darkedges / capacitor-native-webauthn

capacitor webauthn
6 stars 8 forks source link

Laundry list of feature requests #8

Open kalepail opened 2 weeks ago

kalepail commented 2 weeks ago

First off thank you so much for this package. It's been an absolute life saver for a recent project I've been working on https://github.com/kalepail/soroban-passkey (https://passkey.sorobanbyexample.org/)

As much as I love it though I'm shooting my shot on getting some additional features added to the iOS and Android plugins to bring this up to feature parity with the web version.

Namely:

Currently security keys work on the web but not on iOS or Android. So think things like NFC or USB Yubikey type devices.

So for example on iOS this would be ASAuthorizationSecurityKeyPublicKeyCredentialProvider. I'm no Swift or Java dev so I've just done some preliminary research to explore if this was possible, it seems to be, but it's not supported atm.

The other is that most keys aren't passed along or respected in the iOS integration. So things like authenticatorSelection and pubKeyCredParams aren't used in the startRegistration nor are the allowCredentials in the startAuthentication which means you can't specifically prefer a "signed in" key when signing something with a key that has previously startRegistration, it will just show the full list.

Definitely happy to help test all this stuff, I have an Android and iOS, a Mac, a PC, a basic and an NFC Yubikey, you name it I can probably get it, I would just love to see the feature set of this plugin fully built out.

Thanks again for the work on this, it's some really useful stuff 🙏

kalepail commented 2 weeks ago
When tapping "Save on Another Device" iOS Safari iOS native
IMG_3426 IMG_3427

(Android Chrome vs Android native is similar)