Page MenuHomePhabricator

Allow users to create passkeys
Closed, ResolvedPublic

Description

To allow users to create passkeys, we need to:

  • Add a parameter to WebAuthnAddKeyForm that puts it in passkey mode
  • When in passkey mode, pass different settings to the WebAuthn request: require user verification, require resident key, don't require a roaming authenticator (this probably requires modifying the WebAuthn action API module and/or Registrator.js
  • When in passkey mode, flag passkeys created through this form as supporting passwordless login

Details

Related Changes in Gerrit:

Event Timeline

Mstyles changed the task status from Open to In Progress.Nov 20 2025, 10:41 PM
Mstyles claimed this task.

Change #1210847 had a related patch set uploaded (by Mstyles; author: Mstyles):

[mediawiki/extensions/WebAuthn@master] Backend support for passkeys

https://gerrit.wikimedia.org/r/1210847

Change #1210847 merged by jenkins-bot:

[mediawiki/extensions/WebAuthn@master] Backend support for passkeys

https://gerrit.wikimedia.org/r/1210847

Mstyles updated the task description. (Show Details)