[Feature request] Passkeys

[AlmerCarbonEquity]

Are there any plans to add support for passkeys as a 2fa method?

[moggers87]

Passkeys? Do you mean like backup tokens or something else?

[AlmerCarbonEquity]

@moggers87 I mean logging in with finger prints etc. It is based on WebAuthn: https://www.google.com/account/about/passkeys/

[hanckmann]

I second the request for passkeys support.
It would really help bring Django and this plugin up to the latest security standards.

[hanckmann]

And I just came across webauth: https://en.wikipedia.org/wiki/WebAuthn
Which seems to be the same/similar to passkeys.

These seem to be supported: https://django-two-factor-auth.readthedocs.io/en/stable/installation.html#webauthn-setup

Maybe @moggers87 can confirm this?
I have not yet used it (but will test this in the comming weeks).

[moggers87]

I can confirm that WebAuthn is supported but I'm not sure if there are any extra steps required to use passkeys with our WebAuthn plugin

[AlmerCarbonEquity]

@moggers87 I took a look at your webauthn example app and seems to work! So I'd say passkeys are supported. 1 thing that I think is missing that would make this package full fill all our needs is direct login with the passkey. I think it is considered safe enough to only need fingerprint/face id for login. Would be great to see this feature.