network
network copied to clipboard
Flutter native app and biometric authentication
Preflight checklist
- [X] I could not find a solution in the existing issues, docs, nor discussions.
- [X] I agree to follow this project's Code of Conduct.
- [X] I have read and am following this repository's Contribution Guidelines.
- [X] This issue affects my Ory Network project.
- [X] I have joined the Ory Community Slack.
- [ ] I am signed up to the Ory Security Patch Newsletter.
Describe your problem
After doing some research, I have found that the only example available for implementing WebAuthn with Flutter is for Flutter web, which is not suitable for our native app. Since there is no API way for the WebAuthn flow, one must use a browser, but there is no flutter SDK to accomplish this. Also, the Android WebView does not support the WebAuthn standard, so what's the proper way to accomplish biometric authentication in a native flutter app?
We would like to migrate completely from Keycloak to the $690 ORY plan, but this is a blocker which we can't seem to solve ourselves. Any help would be appreciated! Thanks! 👍
Describe your ideal solution
The ideal solution would be an API way to accomplish this, without having to use a browser.
Workarounds or alternatives
Could not find anything
Version
ory cloud
Additional Context
No response
Thanks for reaching out! @jonas-jonas do you have any guidance on what the best approach is here?
I am not too familiar with WebAuthN on native applications, and was under the impression that the only way of getting it to work was with Passkeys on iOS. Great to hear, that Android supports it, too. And even the full standard, not just a subset, as it seems.
As for the Ory Network - I believe that we do not support WebAuthN on native devices for now. The current implementation of it is pretty browser focused and requires JS and browser APIs (as you mentioned).
We do however have it on the roadmap and would love to support WebAuthN in its full capacaty on all supported devices in the (near) future.