Passkeys (WebAuthn/FIDO2) Essentials API — spec + implementation - #36617

Closed

mattleibow wants to merge 50 commits into

mattleibow-spec-passkeys-essentials

Commits on Jul 24, 2026

Add pristine 'dotnet new blazor --auth Individual' as Essentials.Samples.WebServer baseline

mattleibow
and
Copilot
committed
9de31e1
Re-add bootstrap *.js.map files from the Blazor template

mattleibow
and
Copilot
committed
9087d7b
Exclude regenerated SQLite app.db from the WebServer sample

mattleibow
and
Copilot
committed
a2bca07
Wire WebServer sample into MAUI repo build conventions

mattleibow
and
Copilot
committed
cfbd167
Add Essentials.Samples.WebServer to the solutions

mattleibow
and
Copilot
committed
8f1ab6d
Align WebServer EF/Identity package versions to the repo's ASP.NET Core build

mattleibow
and
Copilot
committed
c825c60
Add spec for cross-platform Passkeys (WebAuthn/FIDO2) Essentials API

mattleibow
and
Copilot
committed
f41e83d
Split passkey usage example into registration and login sections

mattleibow
and
Copilot
committed
d77f0cf
Use opaque JSON-carrier objects with selective extension methods

mattleibow
and
Copilot
committed
26cb04c
Add bound Obj-C/.NET Apple example and industry-anchored naming decisions

mattleibow
and
Copilot
committed
5ae6eaf
Drop base type/extension methods; expose JSON via ToString and add cached properties

mattleibow
and
Copilot
committed
7a1cf88
Address PR review feedback: HTTP posting, macOS scope, filenames, wording

mattleibow
and
Copilot
committed
b0fcc40
Revise spec: no-Play Android, OS-specifics, decoded-props, ASP.NET Identity test RP

mattleibow
and
Copilot
committed
2e23817
Add Appendix A (conditional-UI/autofill follow-up); split knob 1a/1b in §7.5

mattleibow
and
Copilot
committed
d4a9181
Expand §7.5 with per-knob native APIs and behavior matrices

mattleibow
and
Copilot
committed
0adcce1
Convert spec to definitive end-state (remove decision-journal framing)

mattleibow
and
Copilot
committed
646462f
Improve section flow and fix heading anchors

mattleibow
and
Copilot
committed
7adea7b
Address new review feedback: window API, origin, PasskeyException, wording

mattleibow
and
Copilot
committed
d73d5e5
Implement Passkeys Essentials API (shared, Apple, Windows; Android/others stubbed)

mattleibow
and
Copilot
committed
87b92ad
Implement Android passkeys via AndroidX Credential Manager

mattleibow
and
Copilot
committed
8c38eca
Address PR review: parser/validation, Windows correctness, iOS UV, tests

mattleibow
and
Copilot
committed
4e98987
Add reference server and sample pages for Passkeys + WebAuthenticator

mattleibow
and
Copilot
committed
776c548
Rename auth sample server to Samples.WebServer and fix broken styling

mattleibow
and
Copilot
committed
6834cc7
Skip email confirmation on the dev auth sample server

mattleibow
and
Copilot
committed
3a43c22
Automate Android passkey setup for the sample

mattleibow
and
Copilot
committed
06ce2ec
Rename setup-devtunnel.ps1 to Configure.ps1 and derive Android values

mattleibow
and
Copilot
committed
b2c6858
Fix dev tunnel URL detection in Configure.ps1

mattleibow
and
Copilot
committed
832418c
Use the per-tunnel (random) URL and avoid duplicate tunnels

mattleibow
and
Copilot
committed
74b031d
Refocus samples on passkeys only; align server with stock template

mattleibow
and
Copilot
committed
7aafaa2
Require sign-in for passkey registration; drop passwordless fallback

mattleibow
and
Copilot
committed
562aa05
Fix Configure.ps1 to read the keystore .NET Android actually signs with

mattleibow
and
Copilot
committed
bd8e5ba
Fix antiforgery 400 on native passkey endpoints; add sign-out + clean errors

mattleibow
and
Copilot
committed
70a6f05
Make passkey sign-in username-less to avoid credential/user mismatch

mattleibow
and
Copilot
committed
30b58f4
Empty the sample credential fields; drop hardcoded alice@example.com / password

mattleibow
and
Copilot
committed
0ba4bed
Adopt baseline's repo-integration for the WebServer sample

mattleibow
and
Copilot
committed
43d0623
Make the passkeys sample behave like a real login system

mattleibow
and
Copilot
committed
336848e

Commits on Jul 25, 2026

Add passkey list, naming, and removal to the sample

mattleibow
and
Copilot
committed
768d222

Commits on Jul 26, 2026

Add server-brokered (BFF) external OAuth sign-in to the sample

mattleibow
and
Copilot
committed
7bbb050
Make external OAuth sign-in generic; remove the mock provider

mattleibow
and
Copilot
committed
feb048c

Commits on Jul 27, 2026

Reword external buttons to "Sign in with <provider>"; harden Apple config

mattleibow
and
Copilot
committed
9d33210
Trim sample comments to describe current behavior

mattleibow
and
Copilot
committed
b12df2a
Move external OAuth sign-in to a stacked PR

mattleibow
and
Copilot
committed
60f69b5
Add Apple passkeys test setup and a samples README/testing guide

mattleibow
and
Copilot
committed
67cdf7f
Refine Apple passkey testing docs in the samples README

mattleibow
and
Copilot
committed
1fb4d8c
Correct Mac Catalyst signing note in the samples README

mattleibow
and
Copilot
committed
538767f
Make Configure.ps1 a one-stop Apple signing setup for the passkeys sample

mattleibow
and
Copilot
committed
bdbcb09
Keep all passkey-test dev config out of committed files

mattleibow
and
Copilot
committed
27706e0
Refine Configure.ps1: shared ApplicationId, fail-fast, xplat plist, template-driven props

mattleibow
and
Copilot
committed
8e5b50b
Move the server-URL AssemblyMetadata fully into the local props

mattleibow
and
Copilot
committed
ca00b48
Remove the temporary nuget.org source from NuGet.config

mattleibow
and
Copilot
committed
c44276e