wordpress-mobile / WordPress-Login-Flow-Android

Pluggable WordPress login flow for Android
GNU General Public License v2.0
14 stars 3 forks source link

Issue/support passkey social login #128

Closed ThomazFB closed 5 months ago

ThomazFB commented 5 months ago

Summary

Following the previous changes introduced in https://github.com/wordpress-mobile/WordPress-FluxC-Android/pull/2874, this PR simply adds the webauthn nonce to the Social login payload to be used in the WPLogin library. For our own advantage, the Social login endpoint already returns the same response structure from the /wp-login.php?action=login-endpoint, so the Login2faFragment required very little adaptation to work with this flow seamlessly.

How to Test

  1. Introduce this WPLogin version to your client app.
  2. Login with a Google account associated with WordPress.com using the Login with Google button during the login flow. (make sure this same account also has a Security key configured for your device)
  3. Verify that the 2FA view is opened and the use a security key option is enabled.
  4. Continue the usual Security key flow and make sure everything works as expected.

Update release notes: