Skip to content

ctap2/webauthn flow #185

Description

@devsnek

Use Case

There is one app I use which expects a passkey to be registered on their web interface and then later used (via usb) in their cli application. I wrote an authenticator which exposes a virtual usb port to support this case, but it cannot integrate with 1password's native passkey support. So this one credential of mine lives in a random encrypted file on my laptop instead of in 1password.

Requirements and desired behavior

I think ideally the sdk should have an api that does the equivalent of navigator.credentials.get, so I can just pass the server challenge to 1password and let it handle determining which passkey to use and whether the challenge is valid.

Alternatively just exposing the private key would also sort of work since I could grab the specific login item that I know contains a passkey and do all the crypto myself, but that seems less ideal.

Additional information

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions