Support WebAuthn as 2FA method

[pke]

For a website I personally prefer WebAuthn using a FIDO2 USB stick. Its built in major browsers and highly secure while being also very convienient at the same time.

It can work alongside OTP and in a later state support even multiple keys.

[titanism]

@pke We listened to your request 👂! You can now set up one or more passkeys (similar to GitHub) with Forward Email 🎉 🚀

Happy with our efforts? Write us a short review at https://www.trustpilot.com/review/forwardemail.net. Don't forget we also support SMTP, IMAP, POP3, – and more to come!

Step by Step Guide for Passkeys and WebAuthn

1. Go to My Account → Security at https://forwardemail.net/my-account/security

2. Click on the "Add New Passkey" button:

   

3. Once setup, you can log in with any existing passkey:

   

4. At anytime you can manage your passkeys at My Account → Security at https://forwardemail.net/my-account/security by clicking on the "Manage Passkeys" button, which will bring up this modal:

   

5. You can also edit passkey nicknames (to help you distinguish which devices are which). After initial passkey creation, you will be automatically prompted to edit the automatically-created nickname (e.g. "USB", "BLE", etc) based off WebAuthn transports detected.

   

6. You will automatically receive emails whenever new passkeys are added or removed (for security precaution):

   

Additional Documentation

We have also added a new reference in our FAQ at https://forwardemail.net/faq#do-you-support-passkeys-and-webauthn and on our About page at https://forwardemail.net/about for December 2023 history update.

Commit References

• b67dae0
• ladjs/passport@b32a46d
• https://github.com/ladjs/passport/releases/tag/v5.1.0
• https://github.com/ladjs/web/releases/tag/v21.0.12
• https://github.com/ladjs/api/releases/tag/v14.1.11

[titanism]

The deploy should finish in < 5 minutes 🚀

[pke]

Awesome! Begging for this with my email host for years (Webauthn) without any response.

[titanism]

@pke migrate to us for SMTP/IMAP if you haven't already! 🚀

[titanism]

Awesome! Begging for this with my email host for years (Webauthn) without any response.

@pke yikes, we added this in < 24 hours 🔥

[titanism]

Pushed fix 8237ed3 for legacy database values.

[titanism]

Pushed fix d98b92c for known origin mismatch issue.

[titanism]

Just pushed final fixes, and now it should work in production.

Deployment should finish within next 10 mins 🚀

@pke if you get the chance to test it out let us know!

[C8opmBM]

I have issues logging in with my yubikey.

Key registration process goes smoothly, but when logging in, after inserting the pin and touching the key, I get an error as if the key is not registered.
Bitwarden passkey login works.

I have the same key registered and logging in on github just fine, so there is no issues with it or the FIDO2 setup.
Could you please look into it?