managarten/packages/shared-auth/src
Till JS 3091da914e feat(auth): add WebAuthn/Passkey support across all apps
Implements passwordless authentication via passkeys using @simplewebauthn:

Backend (mana-core-auth):
- New passkeys table in auth schema (credentialId, publicKey, counter, etc.)
- PasskeyService with registration/authentication flows and challenge storage
- 7 new API endpoints (register, authenticate, list, delete, rename)
- createSessionAndTokens helper for non-password auth flows
- Security event types for passkey operations

Client (shared-auth):
- signInWithPasskey() and registerPasskey() with dynamic @simplewebauthn/browser imports
- isPasskeyAvailable() browser capability check
- Passkey management methods (list, delete, rename)

UI (shared-auth-ui):
- Passkey button on LoginPage with key icon, shown when browser supports WebAuthn
- Divider between passkey and email/password form

App integration:
- All 19 web app auth stores have isPasskeyAvailable() and signInWithPasskey()
- All 19 web app login pages pass passkeyAvailable and onSignInWithPasskey props
- rpID=mana.how in production enables cross-app passkey usage (SSO-compatible)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-26 10:30:03 +01:00
..
adapters fix(shared-auth): add UUID fallback for HTTP contexts 2025-12-05 04:26:34 +01:00
clients feat(contacts): integrate contacts into Todo and Calendar apps 2025-12-11 18:14:35 +01:00
core feat(auth): add WebAuthn/Passkey support across all apps 2026-03-26 10:30:03 +01:00
events feat(auth): add session expired banner when token refresh fails 2026-03-24 21:24:28 +01:00
interceptors refactor(shared-auth): single fetch interceptor for multiple URLs 2026-03-24 20:26:03 +01:00
types feat(auth): add WebAuthn/Passkey support across all apps 2026-03-26 10:30:03 +01:00
index.ts feat(auth): add session expired banner when token refresh fails 2026-03-24 21:24:28 +01:00