Support secure authentication with Passkey

[nelsonaponte]

It is widely known that usernames and passwords are insecure access control mechanisms and go against one of the premises of the cloud service, i.e., security.

We should implement Passkeys as a means of strong authentication for the accounts with a fall-back to passwords for those who don't like or can't use Passkeys.

https://web.dev/articles/passkey-registration
https://developer.apple.com/passkeys/
https://developers.google.com/identity/passkeys
https://www.corbado.com/blog/passkey-tutorial-how-to-implement-passkeys

[wborn]

It might be an idea to support Keycloak and configure passkeys in it. Then it becomes very easy to add additional authentication flows (SAML/OAuth2 etc) and also support GitHub/Google etc. logins.