Web Authentication (WebAuthn) support

[mguinness]

Have you considered adding support for WebAuthn? Either a resident key for passwordless login or a non-resident key for 2FA?

For an example see the Password and authentication settings in GitHub which allow for with both passkeys and security keys.

You can trigger the passwordless signin flow on the username input field, see Sign in with a passkey through form autofill.

I found a very basic example at WebAuthn for your small scale web applications that acts as a proxy for nginx auth_request.

It utilizes the Web Authentication API which uses navigator.credentials.create() and navigator.credentials.get().

Be aware that WebAuthn requires a secure context, i.e. https:// with the exception being http://localhost for development.

[lymestack]

Thanks for your inquiry. This subject on Web Authentication is new to me. After doing a little light research and seeing you have quite a bit of experience on the subject of Identity, I'd be glad to chat some time. I am from the East Coast of the USA and you can email me at lymestack@gmail.com. Thanks!

[mguinness]

I ported the aforementioned project written in Python to .NET at NginxWebAuthn. Should be possible to adapt the code for 2FA.