Repository navigation
Guide Passkeys
A passkey lets you sign in without typing your password: your phone, laptop or password manager confirms it is you with Face ID, Touch ID, Windows Hello or your device PIN. Your password keeps working, so you can always fall back to it. Your server's operator must have switched passkeys on (Passkeys).
- Open MowDeck in your browser (Safari, Chrome, Edge or Firefox) at its usual address.
- Go to Einstellungen, section Konto, panel Passkeys, and choose Passkey hinzufügen.
- Enter your current password and a name (for example "iPhone"), then Passkey anlegen.
- Your device asks to save the passkey; confirm with Face ID, Touch ID or your PIN.
The list shows each passkey with its name, the provider or browser it was made with, when it was added and last used, and whether it is synced (iCloud Keychain, Google Password Manager, a password manager) or bound to one device. You can rename and remove passkeys there. In the iPhone or Android app the panel tells you to add passkeys in the browser; a synced passkey then works in the app too.
- Browser: on the sign-in page choose Mit Passkey anmelden, or tap the username field and pick your passkey from the suggestions. No username or password needed.
- App: choose Mit Passkey anmelden. Safari (iPhone) or Chrome (Android) opens your MowDeck sign-in page; sign in with your passkey there and confirm In der App weiter. You are taken back to the app, signed in. If the browser stays open, tap App öffnen. Only confirm when you started the sign-in from the app yourself.
Remove its passkey under Passkeys after signing in with your password or another passkey. An admin can remove the passkeys of sub-users under Benutzer, Passkeys.
Mirrored from docs/guides/passkeys.md at commit 5968113c667cb4a8b25f17c329e950f2eeb6af3b. Edit the file in the repository, not this wiki page.
Mirrored from the docs/ directory at commit 5968113c667cb4a8b25f17c329e950f2eeb6af3b. Edit the files in the repository, not this wiki.
MowDeck documentation
- Home
- Phases
- Architecture
-
Decisions (ADR)
- Architecture decisions
- ADR 0001: OpenFGA instead of self-built authorization
- ADR 0002: Self-built Identity service in FastAPI instead of Keycloak or Zitadel
- ADR 0003: SvelteKit for the web app
- ADR 0004: Monorepo with a uv workspace
- ADR 0005: AGPL-3.0 for services and apps, Apache-2.0 for libraries
- ADR 0006: PostgreSQL for all persistence, no SQLite
- ADR 0007: NATS JetStream as event bus
- ADR 0008: Traefik as gateway
- ADR 0009: Command and event envelopes, subject naming and de-duplication
- ADR 0010: Python 3.13 for all services and libraries
- ADR 0011: Separate GPL-3.0 package for the PyMammotion adapter
- ADR 0012: Mower control interface and safety rules
- ADR 0013: Device-Gateway registry, sharding and per-mower concurrency
- ADR 0014: Authorization model, tuple ownership and the mowdeck-authz client
- ADR 0015: Tokens, sessions and key rotation
- ADR 0016: Fleet commands and authorization per command kind
- ADR 0017: Telemetry storage and retention
- ADR 0018: Realtime WebSocket protocol
- ADR 0019: Mammotion adapter transports, manual drive and secrets
- ADR 0020: Web app architecture
- ADR 0021: Browser authentication flow
- ADR 0022: Notifications: rules, recipients and delivery
- ADR 0023: Map rendering and projection
- ADR 0024: Scheduler: recurrence, rain pause and command issuing
- ADR 0025: Home Assistant integration as a pure API client
- ADR 0026: Manual drive channel over the Realtime WebSocket
- ADR 0027: Health history and theft alarm
- ADR 0028: Entitlements: plans as data and enforcement
- ADR 0029: Helm chart and release pipeline
- ADR 0030: Mowing patterns as plug-ins and the Planner
- ADR 0031: Billing with a Stripe adapter
- ADR 0032: Live camera over Agora, joined directly by the browser
- ADR 0033: Vision-assisted recovery with human approval
- ADR 0034: Linked cloud accounts and device discovery
- ADR 0035: Server-side camera frames and automatic AI analysis on errors
- ADR 0036: Native app shells with Capacitor, loading the web app from the server
- ADR 0037: Camera panorama calibration in the browser, with the AI supplying points only
- ADR 0038: Dual link per mower and firmware updates
- ADR 0039: Spot mowing by MowDeck-driven paths
- ADR 0040: Link heartbeat for online status
- ADR 0041: Spot runs from the dock: undock, transit and return
- ADR 0042: Drive calibration
- ADR 0043: Turn styles
- ADR 0044: Drive view with camera
- ADR 0045: Camera relay
- ADR 0046: Device settings as capabilities
- ADR 0047: The RTK base station as a Fleet device
- ADR 0048: Maintenance commands
- ADR 0049: Manual driving over the Mammotion cloud
- ADR 0050: Passkeys and the app login hand-off
- ADR 0051: Sign in with GitHub
- ADR 0052: Sign in with Apple
- Development
- Operations
- Spikes
- Guides
- Original plan (German)