Passkeys - is it suitable for Hawtio?

[grgrzybek]

Passwordless authentication is getting more popular. It brings ssh authentication to browser thanks to:

• https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API

https://fidoalliance.org/specifications/download/ defines the standard based on Web Authentication API.

[tadayosi]

👍 Awesome! So long as Keycloak supports it, can't we say it's also already supported by Hawtio? Would you propose that Hawtio standalone also natively support passkeys?

FYI, the author of WebAuthn4J is a Red Hatter (my friend) 😉

[grgrzybek]

I don't have any ideas yet about how/where to put it into Hawtio.
https://github.com/webauthn4j/webauthn4j sounds cool, though we'd need client support too (in @hawtio/react.

I just thought that while I'm working (now only server side is left to do) on:

• Support multiple authentication methods at runtime hawtio-react#1556
• Support multiple OIDC configurations hawtio-react#1581
• Support multiple authentication methods at runtime #2941
• Metadata for supporting multiple authentication methods jolokia/jolokia#870

it'd be good at least to find a place where Passkeys could fit in.