Sign in with passkeys + 2FA
next-auth passkeys docs: https://authjs.dev/getting-started/providers/passkey
Hi @steven-tey Can I work on this? I have experience implementing Passkeys on my personal projects.
@steven-tey Is any team working with this feature?
The scope of this issue really should be split into 2FA and passkey support. However, regarding the 2FA aspect, I'd like TOTP 2FA support in addition to passkey (FIDO2) 2FA, because FIDO2 2FA requires that the browser be capable of it, which most mobile ones aren't yet, especially in a consistent manner. In comparison, TOTP also works across all devices, since it's as simple as copying a few numbers.
Agree that 2FA and passkey are separate issues. This should be split. Passkeys are password replacements or alternatives (and not simply another form of 2FA).
Verification code implementation should consider recent developments in the otpauth specification: https://otpauth.dev/#specification-details
https://github.com/dubinc/dub/issues/1150#event-18016336742
@steven-tey, have you split it...? This issue isn't linked to any replacements.