-
Notifications
You must be signed in to change notification settings - Fork 2k
Passkeys (WebAuthn/FIDO2) Essentials API — spec + implementation #36617
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Closed
Closed
Changes from 38 commits
Commits
Show all changes
50 commits
Select commit
Hold shift + click to select a range
9de31e1
Add pristine 'dotnet new blazor --auth Individual' as Essentials.Samp…
mattleibow 9087d7b
Re-add bootstrap *.js.map files from the Blazor template
mattleibow a2bca07
Exclude regenerated SQLite app.db from the WebServer sample
mattleibow cfbd167
Wire WebServer sample into MAUI repo build conventions
mattleibow 8f1ab6d
Add Essentials.Samples.WebServer to the solutions
mattleibow c825c60
Align WebServer EF/Identity package versions to the repo's ASP.NET Co…
mattleibow f41e83d
Add spec for cross-platform Passkeys (WebAuthn/FIDO2) Essentials API
mattleibow d77f0cf
Split passkey usage example into registration and login sections
mattleibow 26cb04c
Use opaque JSON-carrier objects with selective extension methods
mattleibow 5ae6eaf
Add bound Obj-C/.NET Apple example and industry-anchored naming decis…
mattleibow 7a1cf88
Drop base type/extension methods; expose JSON via ToString and add ca…
mattleibow b0fcc40
Address PR review feedback: HTTP posting, macOS scope, filenames, wor…
mattleibow 2e23817
Revise spec: no-Play Android, OS-specifics, decoded-props, ASP.NET Id…
mattleibow d4a9181
Add Appendix A (conditional-UI/autofill follow-up); split knob 1a/1b …
mattleibow 0adcce1
Expand §7.5 with per-knob native APIs and behavior matrices
mattleibow 646462f
Convert spec to definitive end-state (remove decision-journal framing)
mattleibow 7adea7b
Improve section flow and fix heading anchors
mattleibow d73d5e5
Address new review feedback: window API, origin, PasskeyException, wo…
mattleibow 87b92ad
Implement Passkeys Essentials API (shared, Apple, Windows; Android/ot…
mattleibow 8c38eca
Implement Android passkeys via AndroidX Credential Manager
mattleibow 4e98987
Address PR review: parser/validation, Windows correctness, iOS UV, tests
mattleibow 776c548
Add reference server and sample pages for Passkeys + WebAuthenticator
mattleibow 6834cc7
Rename auth sample server to Samples.WebServer and fix broken styling
mattleibow 3a43c22
Skip email confirmation on the dev auth sample server
mattleibow 06ce2ec
Automate Android passkey setup for the sample
mattleibow b2c6858
Rename setup-devtunnel.ps1 to Configure.ps1 and derive Android values
mattleibow 832418c
Fix dev tunnel URL detection in Configure.ps1
mattleibow 74b031d
Use the per-tunnel (random) URL and avoid duplicate tunnels
mattleibow 7aafaa2
Refocus samples on passkeys only; align server with stock template
mattleibow 562aa05
Require sign-in for passkey registration; drop passwordless fallback
mattleibow bd8e5ba
Fix Configure.ps1 to read the keystore .NET Android actually signs with
mattleibow 70a6f05
Fix antiforgery 400 on native passkey endpoints; add sign-out + clean…
mattleibow 30b58f4
Make passkey sign-in username-less to avoid credential/user mismatch
mattleibow 0ba4bed
Empty the sample credential fields; drop hardcoded alice@example.com …
mattleibow 43d0623
Adopt baseline's repo-integration for the WebServer sample
mattleibow 336848e
Make the passkeys sample behave like a real login system
mattleibow 768d222
Add passkey list, naming, and removal to the sample
mattleibow 7bbb050
Add server-brokered (BFF) external OAuth sign-in to the sample
mattleibow feb048c
Make external OAuth sign-in generic; remove the mock provider
mattleibow 9d33210
Reword external buttons to "Sign in with <provider>"; harden Apple co…
mattleibow b12df2a
Trim sample comments to describe current behavior
mattleibow 60f69b5
Move external OAuth sign-in to a stacked PR
mattleibow 67cdf7f
Add Apple passkeys test setup and a samples README/testing guide
mattleibow 1fb4d8c
Refine Apple passkey testing docs in the samples README
mattleibow 538767f
Correct Mac Catalyst signing note in the samples README
mattleibow bdbcb09
Make Configure.ps1 a one-stop Apple signing setup for the passkeys sa…
mattleibow 27706e0
Keep all passkey-test dev config out of committed files
mattleibow 8e5b50b
Refine Configure.ps1: shared ApplicationId, fail-fast, xplat plist, t…
mattleibow ca00b48
Move the server-URL AssemblyMetadata fully into the local props
mattleibow c44276e
Remove the temporary nuget.org source from NuGet.config
mattleibow File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Acknowledged — nuget.org is marked TEMPORARY in NuGet.config and must be removed before merge once
Xamarin.AndroidX.Credentialsis mirrored into dotnet-public. It's added only so the Android binding restores in this dev environment.