Update on supporting discoverable WebAuthn credentials
-
From what I can tell in the docs, the FusionAuth API does not support discoverable WebAuthn passkeys: https://fusionauth.io/docs/apis/webauthn/complete-a-webauthn-passkey-registration#request-body. I wanted to confirm this is accurate as it is not very transparent from the docs, and if there are any plans to add support for this.
I want to implement a passkey login using the WebAuthn API where the user does not need to provide a username/email. I understand there is a "re-authentication" workflow, but that seems designed around the hosted login pages rather than the API. Thanks!
-
@njanaskie said in Update on supporting discoverable WebAuthn credentials:
You are right. FusionAuth does not support discoverable WebAuthn passkeys. In the page you referred to, there is some verbiage that states that directly in the credential.clientExtensionResults.credProps.rk section.
'FusionAuth does not currently support discoverable credentials (sometimes referred to as "resident keys").'
I'd recommend checking the FusionAuth GitHub issues or opening/upvoting a feature request to track progress on this.
Maybe if you tell us a little more about your use case and why the user can't enter the username/email someone can help with a work around.
