Add support for WebAuthn

[kbabioch]

Since this new API/standard allows for hardware based crypto to be used in the browser, backend support within simpleSAMLphp would be valuable feature to enhance the overall security of a typical deployment. This will probably require some special setup (in order to store the public keys), with simpleSAMLphp being the interface for that.

[tvdijen]

Contributions are welcome

[thijskh]

This could just be a module, right? See https://simplesamlphp.org/docs/stable/simplesamlphp-modules how to create one.

[kbabioch]

Yes, this can be implemented as module (I guess), but it needs some storage backend (SQL, LDAP, etc.) to store the public keys for each users.

[tvdijen]

WIP: https://github.com/mrvanes/authWebauthn

[tvdijen]

@kbabioch Perhaps you can give the module mentioned a try and let us know if it suits your needs?

[tvdijen]

OK, so I've been playing around with the mentioned module and while still a bit rough around the edges, I think it does exactly what you're looking for. Therefore closing this issue

[jaimeperez]

Hi @kbabioch,

JFYI, we've got a contribution for a new webauthn/Fido2 module, which we've been working on lately. It's still work in progress as well, but much more complete than the one Tim was referrering to previously.