Add passkey / biometric login (WebAuthn FIDO2)
Shop floor workers can log in once with a password, enroll a passkey, and use Face ID / Windows Hello / fingerprint for all future logins. - UserPasskey entity + AddUserPasskeys migration (Fido2 v4.0.1) - PasskeyController: RegisterOptions, Register, LoginOptions, Login, Manage, Remove endpoints - Login page: platform-aware button (Face ID / Windows Hello / etc.) hidden automatically if browser doesn't support WebAuthn - Post-login floating prompt to enroll on first use; session-dismissed - Passkeys & Biometrics link in user dropdown menu - Manage page: list registered devices, add new, remove individual - passkey.js: targeted base64url conversion (only challenge + user.id + credential IDs) — fixes "Required parameters missing" error caused by blindly converting rp.id and other string fields to ArrayBuffers Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
@@ -0,0 +1,97 @@
|
||||
@model IEnumerable<PowderCoating.Core.Entities.UserPasskey>
|
||||
@{
|
||||
ViewData["Title"] = "My Passkeys";
|
||||
}
|
||||
|
||||
<div class="container-fluid py-4" style="max-width:760px;">
|
||||
<div class="d-flex align-items-center gap-3 mb-4">
|
||||
<div class="rounded-circle d-flex align-items-center justify-content-center"
|
||||
style="width:48px;height:48px;background:#e0f2fe;">
|
||||
<i class="bi bi-fingerprint" style="font-size:1.5rem;color:#0284c7;"></i>
|
||||
</div>
|
||||
<div>
|
||||
<h4 class="mb-0 fw-semibold">Passkeys & Biometric Login</h4>
|
||||
<p class="text-muted small mb-0">
|
||||
Passkeys let you sign in with Face ID, fingerprint, or your device PIN — no password needed.
|
||||
</p>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
@if (TempData["Success"] is string msg)
|
||||
{
|
||||
<div class="alert alert-success alert-permanent">
|
||||
<i class="bi bi-check-circle-fill me-2"></i>@msg
|
||||
</div>
|
||||
}
|
||||
|
||||
<!-- Add new passkey -->
|
||||
<div class="card shadow-sm mb-4">
|
||||
<div class="card-body">
|
||||
<h6 class="card-title mb-1">Add a passkey for this device</h6>
|
||||
<p class="text-muted small mb-3">
|
||||
You'll be prompted to authenticate using Face ID, Touch ID, Windows Hello, or a security key.
|
||||
</p>
|
||||
<div class="d-flex gap-2 align-items-center flex-wrap">
|
||||
<input type="text" id="pk-device-name" class="form-control" style="max-width:220px;"
|
||||
placeholder="Device name (e.g. iPhone 15)" maxlength="64" />
|
||||
<button type="button" id="pk-add-btn" class="btn btn-primary">
|
||||
<i class="bi bi-plus-circle me-1"></i>Add Passkey
|
||||
</button>
|
||||
</div>
|
||||
<p id="pk-add-status" class="mt-2 small mb-0"></p>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<!-- Existing passkeys -->
|
||||
@if (!Model.Any())
|
||||
{
|
||||
<div class="text-center py-5 text-muted">
|
||||
<i class="bi bi-fingerprint" style="font-size:3rem;opacity:.3;"></i>
|
||||
<p class="mt-3">No passkeys registered yet.<br />Add one above to enable biometric login on this device.</p>
|
||||
</div>
|
||||
}
|
||||
else
|
||||
{
|
||||
<div class="list-group shadow-sm">
|
||||
@foreach (var pk in Model)
|
||||
{
|
||||
<div class="list-group-item list-group-item-action d-flex align-items-center gap-3">
|
||||
<i class="bi bi-phone" style="font-size:1.4rem;color:#64748b;flex-shrink:0;"></i>
|
||||
<div class="flex-grow-1 min-width-0">
|
||||
<div class="fw-medium text-truncate">
|
||||
@(pk.DeviceFriendlyName ?? "Unnamed device")
|
||||
</div>
|
||||
<div class="text-muted small">
|
||||
Added @pk.CreatedAt.ToLocalTime().ToString("MMM d, yyyy")
|
||||
@if (pk.LastUsedAt.HasValue)
|
||||
{
|
||||
<span class="ms-2">• Last used @pk.LastUsedAt.Value.ToLocalTime().ToString("MMM d, yyyy")</span>
|
||||
}
|
||||
</div>
|
||||
</div>
|
||||
<form method="post" asp-action="Remove" asp-route-id="@pk.Id"
|
||||
onsubmit="return confirm('Remove this passkey?');">
|
||||
@Html.AntiForgeryToken()
|
||||
<button type="submit" class="btn btn-outline-danger btn-sm">
|
||||
<i class="bi bi-trash3"></i> Remove
|
||||
</button>
|
||||
</form>
|
||||
</div>
|
||||
}
|
||||
</div>
|
||||
<p class="text-muted small mt-3">
|
||||
Removing a passkey means you'll need to use your password on that device next time.
|
||||
</p>
|
||||
}
|
||||
|
||||
<div class="mt-4">
|
||||
<a asp-controller="CompanySettings" asp-action="Index" class="text-decoration-none">
|
||||
<i class="bi bi-arrow-left me-1"></i>Back to Settings
|
||||
</a>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
@section Scripts {
|
||||
<script src="~/js/passkey.js"></script>
|
||||
<script src="~/js/passkey-manage.js"></script>
|
||||
}
|
||||
@@ -895,6 +895,33 @@
|
||||
<div id="tempdata-info-message" style="display:none;">@TempData["Info"]</div>
|
||||
}
|
||||
|
||||
@* Passkey setup prompt — shown once per session to authenticated users who have no passkeys yet *@
|
||||
@if (User.Identity?.IsAuthenticated == true && !User.IsInRole("SuperAdmin"))
|
||||
{
|
||||
<div id="passkey-setup-prompt" class="d-none"
|
||||
style="position:fixed;bottom:1.25rem;right:1.25rem;z-index:1090;max-width:320px;">
|
||||
<div class="card shadow-lg border-0">
|
||||
<div class="card-body p-3">
|
||||
<div class="d-flex align-items-start gap-2 mb-2">
|
||||
<i class="bi bi-fingerprint text-primary" style="font-size:1.4rem;flex-shrink:0;margin-top:2px;"></i>
|
||||
<div>
|
||||
<div class="fw-semibold" style="font-size:.9rem;">Enable Face ID / Biometric Login</div>
|
||||
<div class="text-muted" style="font-size:.8rem;">Skip the password next time — use your fingerprint or Face ID.</div>
|
||||
</div>
|
||||
<button type="button" id="passkey-dismiss-btn" class="btn-close ms-auto" style="font-size:.75rem;" aria-label="Dismiss"></button>
|
||||
</div>
|
||||
<p id="passkey-setup-status" class="small mb-2"></p>
|
||||
<div class="d-flex gap-2">
|
||||
<button id="passkey-enable-btn" type="button" class="btn btn-primary btn-sm flex-grow-1">
|
||||
<i class="bi bi-fingerprint me-1"></i>Enable
|
||||
</button>
|
||||
<a href="/Passkey/Manage" class="btn btn-outline-secondary btn-sm">Manage</a>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
}
|
||||
|
||||
@* Hidden container for ModelState errors (read by toast-notifications.js) *@
|
||||
@if (!ViewData.ModelState.IsValid && ViewData.ModelState.ErrorCount > 0)
|
||||
{
|
||||
@@ -1487,6 +1514,7 @@
|
||||
}
|
||||
<ul class="dropdown-menu dropdown-menu-end">
|
||||
<li><a class="dropdown-item" asp-controller="Profile" asp-action="Index"><i class="bi bi-person me-2"></i>Profile</a></li>
|
||||
<li><a class="dropdown-item" asp-controller="Passkey" asp-action="Manage"><i class="bi bi-fingerprint me-2"></i>Passkeys & Biometrics</a></li>
|
||||
<li><a class="dropdown-item" asp-controller="TwoFactorSetup" asp-action="Index"><i class="bi bi-shield-lock me-2"></i>Two-Factor Auth</a></li>
|
||||
<li><a class="dropdown-item" asp-controller="ReleaseNotes" asp-action="Index"><i class="bi bi-rocket-takeoff me-2"></i>What's New</a></li>
|
||||
<li><a class="dropdown-item" asp-controller="Help" asp-action="Index"><i class="bi bi-question-circle me-2"></i>Help</a></li>
|
||||
@@ -2091,6 +2119,7 @@
|
||||
{
|
||||
@* @await Html.PartialAsync("_AiQuickQuoteWidget") *@
|
||||
@await Html.PartialAsync("_AiHelpWidget")
|
||||
<script src="~/js/passkey.js"></script>
|
||||
}
|
||||
|
||||
<!-- ── Quick-Add Modal (reusable inline form host) ─────────────────────── -->
|
||||
|
||||
Reference in New Issue
Block a user