Feature: Passkey Management

[alexfriesen]

Background

zeity currently supports basic authentication and registration workflows for WebAuthn. However, users do not have an overview of their registered passkeys, nor the ability to easily manage or add new passkeys.

Goal

Provide users with an overview of all registered passkeys in their account settings, and allow them to register new passkeys and securely remove existing ones.

Requirements

• Passkey Overview:
  • Display a list of all registered passkeys for the user.
  • Show relevant details (e.g., device name, registration date, last used).
• Register New Passkey:
  • Allow users to register additional passkeys from the overview.
  • Passkey registration must be secured by OTP verification via email.
• Remove registered Passkey:
  • Allow users to remove passkeys.
  • Passkey removal must be secured by OTP verification via email.
• Security:
  • Require OTP sent to the user’s email before a passkey can be registered or removed.
• UI:
  • Add a section in account settings for passkey management.

Benefits

• Improves user control and transparency over authentication methods.
• Enhances account security.
• Simplifies passkey management and prevents unauthorized actions.