You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cordova.apache.org by GitBox <gi...@apache.org> on 2022/05/06 21:01:52 UTC
[GitHub] [cordova-android] Jammmmm opened a new issue, #1429: WebAuthn / FIDO2 support
Jammmmm opened a new issue, #1429:
URL: https://github.com/apache/cordova-android/issues/1429
## Feature Request
Support for WebAuthn in Cordova Android.
## Motivation Behind Feature
Enables passwordless authentication in websites using WebAuthn, giving security and convenience.
Google, Apple and Microsoft are expanding support for this so it would make sense for it to be available in Cordova: [FIDO Alliance press release](https://fidoalliance.org/apple-google-and-microsoft-commit-to-expanded-support-for-fido-standard-to-accelerate-availability-of-passwordless-sign-ins/).
## Feature Description
A user goes to a website and sees an ordinary login form. Instead of typing a username and password, they can simply type their username and then use their fingerprint scanner/external security key/etc. to login. A password is no longer required.
A demo, which works in any web browser that supports it, can be found at https://webauthn.io/. I have confirmed it works on desktop browsers, Android (Chrome and Firefox), and iOS (Safari). It does not work in any Cordova app I have built on either platform (latest Cordova + latest Android WebView, for example)
Some Javascript to check if the browser supports WebAuthn:
if (window.PublicKeyCredential === undefined || typeof window.PublicKeyCredential !== "function")
{
var errorMessage = "WebAuthn not supported."
if (window.location.protocol === "http:" && (window.location.hostname !== "localhost" && window.location.hostname !== "127.0.0.1"))
{
errorMessage = "WebAuthn only supports secure connections. For testing over HTTP, you can use the origin \"localhost\"."
}
alert (errorMessage);
}
else { alert ("Supported"); }
## Alternatives or Workarounds
Currently there is a [Cordova plugin](https://github.com/niklasmerz/cordova-plugin-fingerprint-aio) that seems like it would work but as far as I can tell, it does not use WebAuthn. It would be better to support a web standard over a custom implementation.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org
[GitHub] [cordova-android] dpogue commented on issue #1429: WebAuthn / FIDO2 support
Posted by GitBox <gi...@apache.org>.
dpogue commented on issue #1429:
URL: https://github.com/apache/cordova-android/issues/1429#issuecomment-1120007147
This is something that would have to be implemented in the underlying WebView library (in this case by Google), not something that Cordova would add itself or be responsible for maintaining. Cordova does not provide the implementation of the webview, it just wraps what's available on the system.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org
[GitHub] [cordova-android] breautek commented on issue #1429: WebAuthn / FIDO2 support
Posted by GitBox <gi...@apache.org>.
breautek commented on issue #1429:
URL: https://github.com/apache/cordova-android/issues/1429#issuecomment-1120030969
FYI: This feature while available in desktop and mobile chrome, it's intentionally not available for the android webview.
Source: https://groups.google.com/a/chromium.org/g/blink-dev/c/qCJhuuZH5p0
> This feature will be supported on all platforms except for Android WebView.
I do not know the rationale behind omitting support for the android webview.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org
[GitHub] [cordova-android] dpogue closed issue #1429: WebAuthn / FIDO2 support
Posted by GitBox <gi...@apache.org>.
dpogue closed issue #1429: WebAuthn / FIDO2 support
URL: https://github.com/apache/cordova-android/issues/1429
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org