agentejo
Passwordless login
I'm working on passwordless login with webauthn over here https://codeberg.org/_laphilipa/cockpit/src/branch/webauthn
If I build it right into cockpit will it get merged or shuold I build a plugin instead?
I have something working now the UI needs some love but the backend is working. It can be tested with laphilipa/cockpit:webauthn docker image.
Requirements: Fido2 key (eg. solo or yubikey).
If this is tested from behind a reverse proxy the site_url config parameter needs to be correct. This is a fido2 build in phishing prevention.
I made it an addon now https://codeberg.org/_laphilipa/cockpit-webauthn however I would love to see this as part of Cockpit itself.
I haven't tested your addon yet but this sounds awesome! Sad, that you still haven't got any feedback. Development seems to have slowed down a bit, even though at the moment Cockpit is the 8th most popular on the Jamstack Headless CMS list.
Does this use the Web Authentication API? As the next version of Safari should support using Face ID and Touch ID to login which would likely have a bigger userbase than hardware keys currently do.
Ref: https://developer.apple.com/videos/play/wwdc2020/10670/
Does this use the Web Authentication API? As the next version of Safari should support using Face ID and Touch ID to login which would likely have a bigger userbase than hardware keys currently do.
Ref: https://developer.apple.com/videos/play/wwdc2020/10670/
yes, it does. But this goes beyond Apple's iCloud Passkeys, Last time I checked google chrome supported WebAuthn even if you don't have a hardware based key on the computer, I think you can use your phone or something.
But still anyway, WebAuthn support would be great either way, it's a direction the whole web should be moving towards in the future.
As the next version of Safari should support using Face ID and Touch ID
It already works with FaceID and TouchID as well as with external keys (Lightning, USB-C and NFC). Safaris UI is a bit ugly but since realistically end users are not going to use it yet (as basically no website supports it) I think they just didn't value making it pretty yet.
