205350 2019-12-17 12:33:22 -0800 [WPE][GTK] Support WebAuthn 2025-12-08 08:41:09 -0800 1 1 1 Unclassified WebKit WebKitGTK WebKit Nightly Build PC Linux NEW https://bugzilla.redhat.com/show_bug.cgi?id=1793657 https://bugzilla.redhat.com/show_bug.cgi?id=1793682 https://bugzilla.redhat.com/show_bug.cgi?id=2247565 https://bugs.webkit.org/show_bug.cgi?id=301202 P2 Enhancement --- 1 mcatanzaro webkit-unassigned bugs-noreply cassidy clopez dbidwell94 ie2kl43y isaiah.inuwa jackhill jake jiewen_tan joone lwarlow mcatanzaro mgorse mike nekohayo oldest_to_newest 1599510 0 mcatanzaro 2019-12-17 12:33:22 -0800 WebAuthn is currently supported only on Apple ports. 1989891 1 mike 2023-11-03 21:35:33 -0700 Just as a point of reference, Linux Firefox supports FIDO2/WebAuthn authenticators over USB as of version 114.0 (https://www.mozilla.org/en-US/firefox/114.0/releasenotes/). 2020175 2 dbidwell94 2024-03-11 11:10:07 -0700 Will this be implemented sometime in the near future? This blocks my work login flow substantially (both with email w/ Thunderbird and with vpn login via networkmanager-openconnect) 2020204 3 mcatanzaro 2024-03-11 12:43:15 -0700 It's part of the GNOME STF project, so maybe, but it depends on prioritization. Next step is to solve https://github.com/flatpak/xdg-desktop-portal/issues/989. I won't accept new static permissions into Epiphany and other app developers shouldn't either, and adding functionality into WebKit that doesn't work under flatpak is not OK, so a portal is surely the next step. 2153352 4 mcatanzaro 2025-10-22 08:54:40 -0700 The linux-credentials project's credentialsd API is not ready yet, but is very likely what we will need to use: https://github.com/linux-credentials/credentialsd/blob/main/doc/api.md That's designed to be a portal, so we only need one implementation, not separate implementations for host system vs. Flatpak. 2153353 5 mcatanzaro 2025-10-22 08:55:51 -0700 And the developers are actively soliciting feedback: https://github.com/flatpak/xdg-desktop-portal/issues/989#issuecomment-3191398122 So the opportunity to influence how the API works is now. 2163584 6 isaiah.inuwa 2025-12-05 06:50:46 -0800 Hello, I'm one of the developers of credentialsd. Yes, we are looking for feedback, and I would love to have WebAuthn support in WebkitGTK for the reasons mentioned above; it's long been a pet peeve of mine too. Is there anything I should keep in mind for the browser implementation? We have an implementation in Firefox, but I haven't looked at Blink or WebKit yet, so not familiar with any differences there. (I'm also happy to continue discussion somewhere on GitHub if that's more appropriate.) 2164126 7 mcatanzaro 2025-12-08 08:41:09 -0800 Since nobody is working on this, I doubt anybody is going to provide you with feedback. Sorry.