Passkeys 5: login page integration and unsupported-browser fallback #41

New Issue

2026-08-17T17:15:11-05:00

bermudalamb commented

2026-08-17 17:15:11 -05:00

Part of the Passkeys project. Parent: #36. Depends on the authentication ceremony.

Scope

Surface passkey sign-in on the login page alongside email and password.

Requirements

Feature-detect WebAuthn and hide or disable the passkey option where it is unavailable, rather than offering a button that fails. Password login stays the fallback in every case.
A cancelled or failed passkey prompt must return the customer to a usable password form, not a dead end.
The error surface has to stay quiet about whether an account exists — same rule as the authentication ceremony.

Verification note

This is the one issue in the project that cannot be fully proven in QA. Credentials are bound to the Relying Party ID, so a passkey registered against the QA hostname will not work in production. QA verifies the flow, the fallbacks, and the copy; production needs its own smoke test with a real registration afterwards.

Part of the Passkeys project. Parent: #36. Depends on the authentication ceremony. ## Scope Surface passkey sign-in on the login page alongside email and password. ## Requirements - Feature-detect WebAuthn and hide or disable the passkey option where it is unavailable, rather than offering a button that fails. Password login stays the fallback in every case. - A cancelled or failed passkey prompt must return the customer to a usable password form, not a dead end. - The error surface has to stay quiet about whether an account exists — same rule as the authentication ceremony. ## Verification note This is the one issue in the project that cannot be fully proven in QA. Credentials are bound to the Relying Party ID, so a passkey registered against the QA hostname will not work in production. QA verifies the flow, the fallbacks, and the copy; production needs its own smoke test with a real registration afterwards.

bermudalamb referenced this issue

2026-08-17 17:16:07 -05:00

Passkey (WebAuthn) login for customers #36

bermudalamb added this to the Passkey Implementation project 2026-08-17 17:21:31 -05:00

bermudalamb self-assigned this 2026-08-21 16:09:54 -05:00

bermudalamb referenced this issue from a commit

2026-09-09 13:37:40 -05:00

docs(ops): feature flags are not worth a manager here (#318)

bermudalamb referenced this issue

2026-09-09 13:37:58 -05:00

docs(ops): feature flags are not worth a manager here (#318) #329

bermudalamb referenced this issue