Description

This includes passkeys support in Keycloak including:

• Check it works and implement it
• Automated tests
• Documentation and maybe a blog

Discussion

https://github.com/keycloak/keycloak/discussions/16201

Tasks

[x] #23658
[x] #23660
[x] #24264
[x] #24999
[x] #27147
[x] #27105
[x] #29585
[x] #29586
[x] #23659
[x] #33072
[x] #29596
[x] #27945
[x] #40023
[x] #40033
[x] #40021
[x] #40022
[x] #40705
[x] #32816
[x] #40792
[x] #41242
[x] #41008
[x] #41259
[x] #41354
[x] #40696
[x] #41556
[x] #41557

Related issues

These issues are not a blocker for the passkeys epic, but partially related to the passkeys work

[ ] #40988
[ ] #29558
[x] #10063
[x] #41613

Motivation

Passkeys are a super hot topic these days. Just check out:

https://www.google.com/search?q=passkeys&tbm=nws

Passkeys are also super cool. I tried out https://passkeys.io/ and was easily able to login on my laptop through my phone. I suggest giving it a go yourself.

Also, check out https://passkeys.dev/ for more info on the dev side of things.

Problem is we're not taking advantage of it at all. Keycloak doesn't even support Passkeys right now, but I assume that it would be relatively trivial to do so, as the complex parts of WebAuthn we already support.