Ziga Zajc

Can you navigate to Sign In (Login screen) and click on Passky Logo at least 5 times to get debug window. Debug window should provide you with Client Version. Note...

Everything looks fine here. One reason can also be that your application (Passky App) requires HTTPS (encrypted traffic), while your Passky Server runs on HTTP (unencrypted). You could also self-host...

If you want application to run thru HTTP, you would need to self-host Passky Website. Passky Website also includes PWA, so it can be installed on your device.

When you navigate to Passky Website click on 3 dots (Depending on the browser)  and click on: Install app / Add to Home Screen / Install Passky (Depending on...

If you can't do that, I would suggest you to try it with a another browser. Some browsers doesn't support PWAs.

> I'm also having trouble on the official passkey server. I'm on the latest version from fdroid. I've been clicking the pasky logo like a madman and I can't get...

We also need to add **Nonce-based strict CSP** or **Hash-based strict CSP**. As Passky Website is client side only, we would need to use **Hash-based strict CSP**. https://web.dev/strict-csp/

CSP is already provided in _headers file and it is not recommended to use CSP inside HTML. It should be provided by Nginx / Apache (Web Server)

> > CSP is already provided in _headers file and it is not recommended to use CSP inside HTML. It should be provided by Nginx / Apache (Web Server) >...

> > Would need to check / make a research about the disadvantages on providing CSP in both ways. > > Of course there is one issue which is an...