Clarifying WebView and Chrome Custom Tabs support for Android's implementation of Passkeys

[Arun T]

Will Passkeys be supported in WebVIew/CCT in Android through web API's or do we need to use Native API(FIDO2ApiClient). Like for example if my app uses WebView then do I need to call these native Api through a java script interface to orchestrate the webauthn/passkeys flow.

[Tim Cappalli]

You can call WebAuthn via CCT today. I don't believe that is changing.

tim

---

From: fido...@fidoalliance.org <fido...@fidoalliance.org> on behalf of Arun T <arunte...@gmail.com>
Sent: Monday, September 19, 2022 16:59
To: FIDO Dev (fido-dev) <fido...@fidoalliance.org>
Subject: [FIDO-DEV] Clarifying WebView and Chrome Custom Tabs support for Android's implementation of Passkeys

 

Will Passkeys be supported in WebVIew/CCT in Android through web API's or do we need to use Native API(FIDO2ApiClient). Like for example if my app uses WebView then do I need to call these native Api through a java script interface to orchestrate the webauthn/passkeys flow.

--
You received this message because you are subscribed to the Google Groups "FIDO Dev (fido-dev)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to fido-dev+u...@fidoalliance.org.
To view this discussion on the web visit https://groups.google.com/a/fidoalliance.org/d/msgid/fido-dev/53a9151b-d8f2-4e84-b781-75719e93a273n%40fidoalliance.org.

[Arun T]

Thanks Tim.

I should have made my question more explicit. For apps that are using

1. Chrome Custom Tab - Will likely continue to work with Passkeys

2. android.webkit.WebView - No web API support. Apps can potentially use java script interfaces to trigger the native fido APIs in Android.

[Tim Cappalli]

I think for #2, you should migrate to CCT. Using WebViews for auth is not a good practice.

---

From: fido...@fidoalliance.org <fido...@fidoalliance.org> on behalf of Arun T <arunte...@gmail.com>

Sent: Monday, September 19, 2022 17:56

To: FIDO Dev (fido-dev) <fido...@fidoalliance.org>

Cc: Tim Cappalli <Tim.Ca...@microsoft.com>; Arun T <arunte...@gmail.com>
Subject: Re: [FIDO-DEV] Clarifying WebView and Chrome Custom Tabs support for Android's implementation of Passkeys

 

To view this discussion on the web visit https://groups.google.com/a/fidoalliance.org/d/msgid/fido-dev/cb457e15-314b-4cab-8350-e3a21294203an%40fidoalliance.org.