Passkeys 4: manage and revoke passkeys from the account page #40

New Issue

2026-08-17T17:14:59-05:00

bermudalamb commented

2026-08-17 17:14:59 -05:00

Part of the Passkeys project. Parent: #36. Depends on registration.

Scope

The account page lists the customer's registered passkeys and lets them add and remove them.

List: name, when it was added, when it was last used
Add: triggers the registration ceremony
Remove: revokes a single credential

Requirements

Removing the last passkey must not lock the customer out. Since password login remains available, this is safe today — but the check belongs here explicitly, so it still holds if passkey-only login is ever offered.
Revocation takes effect immediately; a revoked credential must be rejected by the authentication ceremony.
Last-used timestamps let a customer recognize which device is which before removing one.

Note

This is the smallest issue in the project and the one that makes the rest usable. Registering a passkey with no way to see or remove it is worse than not offering passkeys at all.

Part of the Passkeys project. Parent: #36. Depends on registration. ## Scope The account page lists the customer's registered passkeys and lets them add and remove them. - List: name, when it was added, when it was last used - Add: triggers the registration ceremony - Remove: revokes a single credential ## Requirements - Removing the last passkey must not lock the customer out. Since password login remains available, this is safe today — but the check belongs here explicitly, so it still holds if passkey-only login is ever offered. - Revocation takes effect immediately; a revoked credential must be rejected by the authentication ceremony. - Last-used timestamps let a customer recognize which device is which before removing one. ## Note This is the smallest issue in the project and the one that makes the rest usable. Registering a passkey with no way to see or remove it is worse than not offering passkeys at all.

bermudalamb referenced this issue

2026-08-17 17:16:07 -05:00

Passkey (WebAuthn) login for customers #36

bermudalamb added this to the Passkey Implementation project 2026-08-17 17:21:31 -05:00

bermudalamb self-assigned this 2026-08-21 16:09:54 -05:00

bermudalamb referenced this issue from a commit

2026-09-09 14:16:02 -05:00

feat(passkeys): registration ceremony (#38)

bermudalamb referenced this issue

2026-09-09 14:16:17 -05:00

feat(passkeys): registration ceremony (#38) #331

bermudalamb referenced this issue