viktor/wrongmove
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
wrongmove/crawler/api
History
Viktor Barzin a8b7eace48
Add passkey (WebAuthn) authentication with self-registration 
Enable users to sign up and sign in using passkeys (biometrics/security
keys) without needing a manually-created Authentik account. The existing
SSO login remains as an alternative.

Backend:
- Add WebAuthn registration/authentication endpoints via py-webauthn
- Issue HS256 JWTs for passkey users, with Redis-backed challenge storage
- Dual JWT verification in auth middleware (issuer-based routing: passkey
  HS256 vs Authentik RS256)
- PasskeyCredential model + migration making user.password nullable
- UserRepository with full CRUD for users and credentials

Frontend:
- AuthUser type abstraction unifying OIDC and passkey users
- Passkey service using @simplewebauthn/browser for WebAuthn ceremonies
- LoginModal redesigned with Sign In / Sign Up tabs
- Type migration from oidc-client-ts User to AuthUser across all services
  and components
2026-02-07 00:34:47 +00:00
..
app.py Add passkey (WebAuthn) authentication with self-registration 2026-02-07 00:34:47 +00:00
auth.py Add passkey (WebAuthn) authentication with self-registration 2026-02-07 00:34:47 +00:00
config.py Add passkey (WebAuthn) authentication with self-registration 2026-02-07 00:34:47 +00:00
metrics.py add opentelemetry 2025-08-02 17:25:56 +00:00
passkey_routes.py Add passkey (WebAuthn) authentication with self-registration 2026-02-07 00:34:47 +00:00