New passkey auth methods

[rickycpadilla]

What's new

Log in in with identifier

Developers can now provide an explicit identifier to loginWithPasskey.

Authenticator Attachments

Developers can now set PasskeyCreationOptions when calling passage.registerWithPasskey.
This new object contains one property called authenticatorAttachments which provides developers with more granular control of their users' passkey creation experience.
You can learn more about authenticator attachments in the WebAuthn spec.

Example code

// Log in with identifier
// User will only be shown passkeys with that identifier for your app.
await passage.loginWithPasskey("[email protected]");

// Log in without identifier
// User will be shown all passkeys available to them for your app, potentially showing multiple identifiers.
await passage.loginWithPasskey();

// Register with options example
// Give user option to register with a physical security key or another mobile device
const options: PasskeyCreationOptions = {
    authenticatorAttachment: AuthenticatorAttachment.CrossPlatform
};
await passage.registerWithPasskey("[email protected]", options);

// Register without options
// Authenticator attachment will default to "platform", same as before.
await passage.registerWithPasskey("[email protected]")

User experience

Example UI for "cross-platform" or "any" authenticator attachment option.

[jenn-macfarlane]

"Let them eat identifiers" 🍰