Page MenuHomePhabricator

Passkey Endpoints Well-Known URL
Open, Needs TriagePublicFeature

Description

Wikis which use the WebAuthn extension should promote passkey upgrades with the Passkey Endpoints Well-Known Url
Info can be located at https://github.com/ms-id-standards/MSIdentityStandardsExplainers/blob/main/PasskeyEndpointsWellKnownUrl/explainer.md
A simpler explanation can be found at: https://developers.google.com//identity/passkeys/developer-guides/upgrades/
Basically though, (using the Miraheze Meta server as an example) https://meta.miraheze.org/.well-known/passkey-endpoints should return a json that looks like this:
If possible an equivalent should roll out to all wiki's using the extension (as the Meta wiki explains "Please keep in mind that you'll have to go to the wiki you registered the authenticator on to log-in. You may want to register the authenticator on Meta for this reason.")

{
  "enroll": "https://meta.miraheze.org/wiki/Special:Manage_Two-factor_authentication?module=webauthn&action=addkey",
  "manage": "https://meta.miraheze.org/wiki/Special:Manage_Two-factor_authentication"
}

This should increase passkey adoption and overall account security of users if done via the extension a lot and a slight bonus if only done to the main wiki.

Examples of how this would look to users:

passkey-upgrades-2.jpg (824×1,784 px, 49 KB)

passkey-upgrades-3.jpg (824×1,784 px, 55 KB)

Related Objects

Event Timeline

Restricted Application added subscribers: Reception123, Aklapper. · View Herald Transcript
TheGreatGreenStar renamed this task from Webauthn upgrade from 2FA to Passkeys for Passwordless to Passkey Endpoints Well-Known URL.Jul 18 2025, 2:26 AM

I accidentally copied name from wrong downstream feature request. Fixed.