You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cordova.apache.org by "mahnunchik (via GitHub)" <gi...@apache.org> on 2024/10/31 10:54:02 UTC
[I] WebAuthn / passkeys support in Android WebView [cordova-android]
mahnunchik opened a new issue, #1743:
URL: https://github.com/apache/cordova-android/issues/1743
# Feature Request
> The Web Authentication API (WebAuthn) is an extension of the [Credential Management API](https://developer.mozilla.org/en-US/docs/Web/API/Credential_Management_API) that enables strong authentication with public key cryptography, enabling passwordless authentication and secure multi-factor authentication (MFA) without SMS texts.
https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API
## Motivation Behind Feature
Android WebView does not support WebAuthn due to some strange security reasons. The browser supports it, but the embedded WebView does not. Strange, but okay. Correct me if I'm wrong.
It would be great to add support for hardware security keys (passkeys, FIDO-authenticator) in Cordova applications.
## Feature Description
According to Google's documentation [Authenticate users with WebView](https://developer.android.com/identity/sign-in/credential-manager-webview), support can be added, but it's necessary to implement support in native Android code.
Maybe someone has already developed a plugin? I couldn't find one.
## Alternatives or Workarounds
Authentication can be performed by opening the remote page in the in-app browser. WebAuthn works in it...
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org
Re: [I] WebAuthn / passkeys support in Android WebView [cordova-android]
Posted by "breautek (via GitHub)" <gi...@apache.org>.
breautek commented on issue #1743:
URL: https://github.com/apache/cordova-android/issues/1743#issuecomment-2449812721
This will be better integrated via a cordova plugin rather than in a core framework component.
If the plugin needs a new API for implementation, then a feature request could be made for that, but glancing over the android docs, the core framework should be able to provide everything it needs.
Big part of their documentation and how-to example is building a communication bridge between the webview and native environment, which Cordova already has. So it's a matter of implementation the public API as defined in the [W3C spec](https://w3c.github.io/webappsec-credential-management/#dom-credentialscontainer-create) (so that maybe one day the plugin won't be necessary, and the plugin can be removed without changing any app code using the API).
Additional Resources:
- [Plugin Creation Guide](https://cordova.apache.org/docs/en/12.x/guide/hybrid/plugins/index.html)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org
Re: [I] WebAuthn / passkeys support in Android WebView [cordova-android]
Posted by "breautek (via GitHub)" <gi...@apache.org>.
breautek closed issue #1743: WebAuthn / passkeys support in Android WebView
URL: https://github.com/apache/cordova-android/issues/1743
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org