[Feature Request] PassKeys API

[ghost1372]

Describe the bug

Passkeys are the future of authentication, and for good reason! They're incredibly easy to use and intuitive, eliminating the need for complicated password creation processes and the hassle of remembering them. Plus, they're unique to each website or application, so you don't have to worry about someone using your passkey to access other services. And unlike passwords, passkeys are resistant to phishing attempts, making them a much more secure option. Best of all, you can use your passkey across all your devices, so you never have to worry about forgetting your password again!

Unfortunately, there is no information on how to use it with c#/winui (I couldn't find it).
So it is very exciting to have API for it.

https://support.microsoft.com/en-us/windows/passkeys-in-windows-301c8944-5ea2-452b-9886-97e4d2ef4422

Packaging type

Packaged (MSIX), Unpackaged

Windows version

Windows 11 version 22H2 (22621, 2022 Update)

IDE

Visual Studio 2022

[jonwis]

Hey @ddsilva-msft - do you have anything coming as API support for Passkeys in apps? There's the https://learn.microsoft.com/windows/win32/api/webauthn/ API surface, but I don't see a WinRT variant for direct app use.

[huwaireb]

👋

Curious, has there been any updates in regards to Passkey support for developers on Microsoft's side?

It seems odd for Microsoft to tout passkey support yet offer not a single page of documentation for developers? From the looks of it, no actual support either? Outside of the webauthn API in win32, which seems to be primarily used by browsers e.g Chromium.

edit: was able to get something working with the win32 api, 🗿 the API seems simple enough i'm genuinely surprised there is zero support in WinRT/Windows App SDK.

[NikhStash]

@huwaireb Could you please let me know, what you have done to get it working.

[huwaireb]

@huwaireb Could you please let me know, what you have done to get it working.

I've dropped WinUI 3 outright (wasn't a great experience 😓), so i can't help you apologies. You'll have to generate the bindings using CsWin32 for WebAuthn.* methods first.

Now the issue is there's no official Microsoft example on the use of the API, so your best luck is browser implementations. Chromium, Firefox and the like.

There's a fairly old repo ~5 years in C++ that extracts the firefox implementation here: https://github.com/aseigler/HelloSample/tree/master.

May serve to be helpful, there's also a newer go version: https://github.com/Ink-33/authn. I can't say about their reliability, but these are your best bets unless you want to use https://sourcegraph.com/ to scour through the browsers codebases, which I recall doing ;c.

best of luck

[NikhStash]

Thanks @huwaireb