Jammmmm opened a new issue, #1429:
URL: https://github.com/apache/cordova-android/issues/1429

   ## Feature Request
   Support for WebAuthn in Cordova Android.
   
   ## Motivation Behind Feature
   Enables passwordless authentication in websites using WebAuthn, giving 
security and convenience.
   
   Google, Apple and Microsoft are expanding support for this so it would make 
sense for it to be available in Cordova: [FIDO Alliance press 
release](https://fidoalliance.org/apple-google-and-microsoft-commit-to-expanded-support-for-fido-standard-to-accelerate-availability-of-passwordless-sign-ins/).
   
   ## Feature Description
   A user goes to a website and sees an ordinary login form. Instead of typing 
a username and password, they can simply type their username and then use their 
fingerprint scanner/external security key/etc. to login. A password is no 
longer required.
   
   A demo, which works in any web browser that supports it, can be found at 
https://webauthn.io/. I have confirmed it works on desktop browsers, Android 
(Chrome and Firefox), and iOS (Safari). It does not work in any Cordova app I 
have built on either platform (latest Cordova + latest Android WebView, for 
example)
   
   Some Javascript to check if the browser supports WebAuthn:
   
        if (window.PublicKeyCredential === undefined || typeof 
window.PublicKeyCredential !== "function")
        {
                var errorMessage = "WebAuthn not supported."
                if (window.location.protocol === "http:" && 
(window.location.hostname !== "localhost" && window.location.hostname !== 
"127.0.0.1"))
                {
                        errorMessage = "WebAuthn only supports secure 
connections. For testing over HTTP, you can use the origin \"localhost\"."
                }
                alert (errorMessage);
        }
        else { alert ("Supported"); }
   
   ## Alternatives or Workarounds
   Currently there is a [Cordova 
plugin](https://github.com/niklasmerz/cordova-plugin-fingerprint-aio) that 
seems like it would work but as far as I can tell, it does not use WebAuthn. It 
would be better to support a web standard over a custom implementation.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to