managarten/services/mana-core-auth/src
Till JS 3091da914e feat(auth): add WebAuthn/Passkey support across all apps
Implements passwordless authentication via passkeys using @simplewebauthn:

Backend (mana-core-auth):
- New passkeys table in auth schema (credentialId, publicKey, counter, etc.)
- PasskeyService with registration/authentication flows and challenge storage
- 7 new API endpoints (register, authenticate, list, delete, rename)
- createSessionAndTokens helper for non-password auth flows
- Security event types for passkey operations

Client (shared-auth):
- signInWithPasskey() and registerPasskey() with dynamic @simplewebauthn/browser imports
- isPasskeyAvailable() browser capability check
- Passkey management methods (list, delete, rename)

UI (shared-auth-ui):
- Passkey button on LoginPage with key icon, shown when browser supports WebAuthn
- Divider between passkey and email/password form

App integration:
- All 19 web app auth stores have isPasskeyAvailable() and signInWithPasskey()
- All 19 web app login pages pass passkeyAvailable and onSignInWithPasskey props
- rpID=mana.how in production enables cross-app passkey usage (SSO-compatible)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-26 10:30:03 +01:00
..
__tests__/utils perf(auth): replace bcrypt with bcryptjs (pure JS, no native build tools) 2026-03-20 19:46:16 +01:00
admin feat(gdpr): add DSGVO improvements for self-service data page 2026-02-13 13:43:23 +01:00
ai feat: add unified @manacore/shared-llm package and migrate all backends 2026-03-23 22:06:30 +01:00
analytics fix(mana-core-auth): complete production readiness with test fixes 2026-02-01 14:18:58 +01:00
api-keys feat(auth): add audit logging, account lockout, and API key rate limiting 2026-03-19 22:09:58 +01:00
auth feat(auth): add WebAuthn/Passkey support across all apps 2026-03-26 10:30:03 +01:00
common test(auth): add unit tests for local JWKS cache 2026-03-24 22:36:22 +01:00
config ♻️ refactor(credits): simplify credit system by removing free credits and B2B 2026-02-16 11:54:32 +01:00
credits ♻️ refactor(credits): simplify credit system by removing free credits and B2B 2026-02-16 11:54:32 +01:00
db feat(auth): add WebAuthn/Passkey support across all apps 2026-03-26 10:30:03 +01:00
email feat(gdpr): add DSGVO improvements for self-service data page 2026-02-13 13:43:23 +01:00
feedback Fix wrong type 2025-12-04 23:25:25 +01:00
gifts perf(auth): replace bcrypt with bcryptjs (pure JS, no native build tools) 2026-03-20 19:46:16 +01:00
health 🐛 fix(matrix-mana-bot): resolve QEMU emulation failure in CI 2026-02-01 13:59:04 +01:00
me feat(gdpr): add DSGVO improvements for self-service data page 2026-02-13 13:43:23 +01:00
metrics feat(calendar): add Playwright E2E tests for web app 2026-03-17 13:08:09 +01:00
security feat(auth): add WebAuthn/Passkey support across all apps 2026-03-26 10:30:03 +01:00
settings feat(onboarding): add Matrix onboarding bot for profile setup 2026-02-14 12:42:41 +01:00
storage refactor(auth,planta): optimize storage usage 2026-03-20 20:59:14 +01:00
stripe 💳 feat(stripe): add SEPA Direct Debit payment option 2026-02-16 12:05:19 +01:00
subscriptions 💳 feat(stripe): add SEPA Direct Debit payment option 2026-02-16 12:05:19 +01:00
tags feat: major update with network graphs, themes, todo extensions, and more 2025-12-10 02:37:46 +01:00
app.module.ts feat: add unified @manacore/shared-llm package and migrate all backends 2026-03-23 22:06:30 +01:00
main.ts fix(auth): remove conflicting JSON body parser middleware 2026-02-16 14:30:06 +01:00