Support Webauthn as a type of MFA

[jaywood128]

Support Webauthn as a type of MFA

Problem

Currently, FusionAuth supports TOTP, Email, and SMS for MFA but doesn't support WebAuthn.

Solution

Add WebAuthn as a supported type for MFA. Additionally, if a JWT included information on the authenticator attachment or manufacturer, an application could ensure that a user is authenticated using say a Yubikey device.

Alternatives/workarounds

Currently not available.

Community guidelines

All issues filed in this repository must abide by the FusionAuth community guidelines.

How to vote

Please give us a thumbs up or thumbs down as a reaction to help us prioritize this feature. Feel free to comment if you have a particular need or comment on how this feature should work.

[alex-fusionauth]

I believe this can be closed as of 1.41

https://fusionauth.io/docs/release-notes/archive#version-1-41-0

[mooreds]

hi @alex-fusionauth maybe I'm missing something, but I don't see a way to use passkeys/webauthn as an MFA method.

Can you point me to the line in the release notes that specifies that?