Support for passkeys in Supabase Auth

[DePasqualeOrg]

Update: won't be on the roadmap for 2023 as we need to explore both the security model and developer experience

---

Now that the major platforms will be offering better support for passkeys, are there any plans for Supabase to support passkeys for authentication?

[arshamg]

Is this on the current roadmap at all? User expectations for passkeys are growing as there's more adoption. Would really love to implement this through Supabase Auth.

[vbylen]

@kiwicopple check out https://www.passkeys.io. It feels like the future 😇😇😇

[ofeenee]

Please add support for this; or even support the official standard webauthn web api for a broader compatibility?

[williambarberjr]

Would also love to see this implemented!

[buk0vec]

This would be awesome to see implemented with Supabase!

[beyera]

I've been using Passage in my smaller Supabase projects and it has been working well. They have a guide on integrating with Supabase here: https://docs.passage.id/helpful-guides/supabase-integration-guide

[lao]

Please we need it. That is the future standard.

[jordanful]

Would love first-party support here. Currently using SMS OTP and boy does it feel antiquated.

[digi604]

We need that too.

[UnexDev]

Would love to see this! I might go make a concept PR for Webauthn

[jehrhardt]

I am currently working on an open source Supabase Auth extension to add Passkeys. There will be a SaaS option as well in January.

If this is an option for you, let's get in touch.

[blondie63]

Please add this feature ! :)

[vincentdelitz]

We at Corbado published a guide on how to use passkey-first authentication for existing Supabase users. Maybe it's helpful for someone.

[er2]

When I logged in just now to upvote this, GitHub prompted me to set up a passkey 😝 (and I did)

[KazanderDad]

Please add fido2 passkeys to Supabase!!

[Radiergummi]

I tried implementing this on my own and almost finished the implementation, until I realised setAuth() is gone and I can't really issue my own access tokens after validating the Webauthn assertion. Would be really neat if you'd be able to add Passkey support, or at least give us back a way to issue own tokens.

[darkmastermindz]

+1 for adding native support to Supabase Auth

[vikyw89]

Waiting for this feature

[Coderwelsch]

+1

[kenuxi]

+1