Enable users to sign up and sign in using passkeys (biometrics/security keys) without needing a manually-created Authentik account. The existing SSO login remains as an alternative. Backend: - Add WebAuthn registration/authentication endpoints via py-webauthn - Issue HS256 JWTs for passkey users, with Redis-backed challenge storage - Dual JWT verification in auth middleware (issuer-based routing: passkey HS256 vs Authentik RS256) - PasskeyCredential model + migration making user.password nullable - UserRepository with full CRUD for users and credentials Frontend: - AuthUser type abstraction unifying OIDC and passkey users - Passkey service using @simplewebauthn/browser for WebAuthn ceremonies - LoginModal redesigned with Sign In / Sign Up tabs - Type migration from oidc-client-ts User to AuthUser across all services and components |
||
|---|---|---|
| .. | ||
| 6363b18a22ca_initial.py | ||
| 8220f657bae5_add_indices_to_commonly_searched_.py | ||
| a1b2c3d4e5f6_add_streaming_indexes.py | ||
| b4c7d8e9f0a1_add_passkey_auth.py | ||
| e5f1bc4e3323_fix_typo_in_logitude_column.py | ||