search

lazaronixon / authentication-zero

An authentication system generator for Rails applications.
MIT License
1.65k stars 52 forks source link

WebAuthn as primary method of authentication #69

Closed Woolworths closed 1 year ago

Woolworths commented 1 year ago

Right now, WebAuthn support is used as secondary authentication (in 2FA). This issue tracks using WebAuthn as a primary method of authentication.

Perhaps, for now it's not the best time because support is still increasing. But maybe it would be a good idea to have it alongside a password? Or make it work similar to how OAuth works (e.g. "Sign In With Passkeys")?

lazaronixon commented 1 year ago

We follow the hey.com flow, they use TOTP, recovery codes, and security keys as 2FA, also it is good for the generator because it works in an incremental way...

Woolworths commented 1 year ago

Sure, just wanted to throw this possibility out there. As passkeys (WebAuthn) gains ground, it will start being used as a primary method of authentication.

miharekar commented 1 year ago

I believe this is worth re-evaluating with the recent spike in popularity and adoption of passkeys/webauthn

jbwl commented 1 month ago

I would also like to see this become an option, Passkeys are becoming popular because of the wide adoption lately (e.g. by Google, Shopify, Amazon, etc.)