Support log in and decrypt with passkeys

[septatrix]

A week ago Bitwarden added support to log in and decrypt the vault using passkeys/WebAuthn. Supporting this would be great for those who prefer security keys etc. over typing a master password every time.

I am not sure if all changes are contained within the clients and updating the web frontend is sufficient or if this requires new endpoints on the backend. I fear the latter might be the case as the process requires the relying party to provide a salt if I understand correctly which the key uses to derive the unlocking phrase.

[BlackDex]

As mentioned in other posts, we need to add new endpoints to get this supported. So only updating the clients will unfortunately not provide this feature.

[septatrix]

Or maybe add this to #246?

[septatrix]

Do you happen to know which endpoints are missing specifically? How complex are they?

[BlackDex]

Besides the endpoints we also need to update some libraries. Which is abit harder. So it's not an easy task, or simply putting something in a database and be done with it. If that was only so easy haha.

[septatrix]

Is there a roadmap or any estimate when this might get worked on?

[septatrix]

Do you mind adding this to the pinned tracking issue?

[rbability]

I just found this one after going through the Changelog of 1.30.2 and saw that it integrated WebVault 2024.1.2, which has Passkey Logon on the official Bitwarden. I already suspected there is more to that than just integrating the current WebVault from Bitwarden. I would really like to see this too here, but I understand that it might be a lot of work, so of course I´m not demanding anything, just telling that there is interest in this feature :-)
Thanks for the great work you are all doing on this Project!

[tanpro260196]

Now that Firefox also support PRF extension, the only missing link is Vaultwarden support.
It would be really nice to have a completely passwordless work flow.

[BlauToad]

Please add this <3 I haven't used Rust that much, I need to learn Rust just to develop this 😅

[dominicf2001]

I would love this feature