search

yrccondor / wp-webauthn

🔒 WP-WebAuthn allows you to safely login to your WordPress site without password.
https://wordpress.org/plugins/wp-webauthn
GNU General Public License v3.0
125 stars 15 forks source link

WP Network Support #58

Open alexclst opened 1 year ago

alexclst commented 1 year ago

This plugin works great on single-site installs, but does not work well at all on network installs. Can network support be added?

The problem I think is that the authenticators are stored in a site-specific manner in the WP database. This means that only one site on a network install will be able to have that log in method work, since registering the same authenticator on subsequent sites will overwrite the earlier passkey in most cases (I use 1Password and iCloud). I'm not sure how to get around this on networks with sites at different URLs, but it is a nercesary bug to fix for this plugin to be usable in such contexts.

yrccondor commented 1 year ago

That’s what we are currently working on. Planned to be shipped with version 2.0. Stay tuned:-)

alexclst commented 1 year ago

@yrccondor Any idea of what the planned release timing will be for 2.0? Just curious, given that I believe this is the only thing stopping me from utilizing this plugin on network sites.

yrccondor commented 1 year ago

Sorry no exact date since we are using our spare time for development; should be within one month

jerome-rdlv commented 9 months ago

Hi, just to say I’m also really interested in this feature. Network support is the only thing that prevents me from installing the plugin on all the websites I build. Thanks for the good work!

yrccondor commented 9 months ago

Hi guys sorry for letting you wait for so long. I'm now on my holiday and finally have time for working on this plugin. I'll try to ship a new update in few weeks. Stay tuned:-)

alexclst commented 5 months ago

@yrccondor any updates on this? I've deployed this plugin to all my WP websites except for my 2 network installs. I realize as I use this plugin and learn about passkeys more that network support may be difficult since in reality they are one installation with multiple domain names. This seems awkward for webauthn because the passkeys are associated to a domain, yet for folks like me who use 1Password as our authenticator of choice it is one login item for the entire network. This seems incompatible at a basic level. So maybe this won't ever quite work, at least for my authenticator of choice..?

yrccondor commented 4 months ago

Hi @alexclst sorry for being inactive on github for so long. many things happened to me this year, i moved to another city and i was working on making this plugin webauthn 2 compatible recently. just let you know i still have plan to maintain and update this plugin. as i'm settling down i believe you can expect updates in the next month (hopefully). again, sorry for the delay