k1nq/TREK
1
0
Fork 0
mirror of https://github.com/mauriceboe/TREK.git synced 2026-06-22 06:41:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: Passkey (WebAuthn) login (#1111)

Browse Source 
* feat(auth): passkey (WebAuthn) login — server endpoints, schema + admin toggle

Add @simplewebauthn/server registration and primary (discoverable) login ceremonies under /api/auth/passkey, a webauthn_credentials + single-use webauthn_challenges schema (migration), the instance-wide passkey_login toggle (default off) enforced before auth by a guard, and require_mfa satisfaction via a verified passkey. RP ID/origin come only from server config (webauthn_rp_id/origins -> APP_URL), never request headers.

* feat(auth): passkey enrolment, login button + admin settings UI

PasskeysSection in account settings (add/rename/remove with a current-password step-up), a 'Sign in with a passkey' button on the login page, the admin enable + RP-ID/origins controls, and a per-user admin reset action.

* i18n(auth): passkey strings across all locales

Add login/settings/admin passkey keys to en and all 19 translated locales.
This commit is contained in:
Maurice
2026-06-05 18:54:13 +02:00
committed by GitHub
parent 247433fb2a
commit a876fb2634
83 changed files with 2421 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
shared/src/i18n/en/settings.ts
+22
View File
@@ -290,6 +290,28 @@ const settings: TranslationStrings = {
'settings.mfa.demoBlocked': 'Not available in demo mode',
"settings.currency": "Currency",
"settings.currencyHint": "All amounts in Costs are converted to and shown in this currency.",
'settings.passkey.title': 'Passkeys',
'settings.passkey.description':
'Sign in faster and phishing-resistant with a passkey — your fingerprint, face, PIN, or a hardware key. Your password stays as a backup.',
'settings.passkey.notConfigured':
'Passkeys are enabled but not fully configured on this server yet. Ask your administrator to set the WebAuthn domain.',
'settings.passkey.add': 'Add a passkey',
'settings.passkey.addTitle': 'Add a passkey',
'settings.passkey.passwordPrompt': 'Confirm your current password, then follow your device prompt.',
'settings.passkey.passwordRequired': 'Your current password is required.',
'settings.passkey.namePlaceholder': 'Name (optional, e.g. "iPhone")',
'settings.passkey.addedToast': 'Passkey added',
'settings.passkey.added': 'Added',
'settings.passkey.addError': 'Could not add passkey',
'settings.passkey.cancelled': 'Passkey setup cancelled',
'settings.passkey.deleted': 'Passkey removed',
'settings.passkey.deleteConfirm': 'Remove this passkey? Confirm with your password.',
'settings.passkey.rename': 'Rename',
'settings.passkey.defaultName': 'Passkey',
'settings.passkey.synced': 'Synced',
'settings.passkey.deviceBound': 'This device',
'settings.passkey.lastUsed': 'Last used',
'settings.passkey.neverUsed': 'Never used',
};
export default settings;