search

team-alembic / ash_authentication

The Ash Authentication framework
MIT License
95 stars 52 forks source link

Add support for passkeys/webauthn #805

Open arosenb2 opened 1 month ago

arosenb2 commented 1 month ago

As additional support is being added daily, it seems like it would be a great step forward to add first-class support for passkeys instead of just TOTP

Recent articles have shown some approaches for Elixir/Phoenix (and to be fair, it does require a lot of JS) but the BE portion seems like it could become a built-in login strategy.

Example: https://til.verschooten.name/til/2024-09-07/passkeys

zachdaniel commented 1 month ago

Would love to work in @type1fool's webauthn components directly for that strategy. We could support it in our builtin UIs automatically.

arosenb2 commented 1 month ago

I think it would be beneficial to also support a headless mode for it (for example, a native app with an Elixir+Ash backend API)

zachdaniel commented 1 month ago

For sure, everything in ash_authentication already does that, we just provide pre-built UIs for convenience with LV.

type1fool commented 1 month ago

It would be nice to see webauthn_components integrated with Ash! I opened issue #84 for this on the WAC repo, and I may be able to tackle it by end of the year.