Passkeys for Swift Forum access, and upgrading my auth to use it?

Site Feedback
1

Discourse now (as of Nov 2023) has support for passkeys (WebAuthn). It does not appear that the Swift Forum yet supports it.

I would like to request that it does, and hopefully also provide a way to change my login method from whatever it is now (username/password) to passkey.

Thanks!

7 Likes
2

Bump. Is there any update on this?

@mishal_shah @Nicole_Jacque?

3

I will look into this, and provide an update soon.

2 Likes
4

This is now enabled, let us know if you run into any issues.

5 Likes
5

I was able to set up my passkey without issue. But I don't see a way to remove password access to my account.

6

Thank you! I was also able to set up a passkey and log in using it from another device, all without issue.

I believe this is currently not supported by Discourse. It was brought up in the thread you linked to, but it's listed as a "possible future improvement".

1 Like
7

Bah. Kinda defeats the purpose of passkeys.

8

Additionally, Passkeys are used in 2fa that secures user accounts by requiring a user to own some form of on-device authentication so your password only works on its own on trusted devices where authentication has been proven(ie. Cookies/site storage, Mac Address, passkeys and verification codes(do note: Cookies/site storage and MAC Addresses are used for temporary device trust purposes(session authentication) and are often considered something to avoid in implementation of long term trusted device authentication, if a cookie or site storage grants external site access it is not considered safe and the site should be avoided)) you likely won’t notice much change on your trusted devices but it will enhance untrusted device security.