Approach for the passkey usage goal

[Xpirix]

Passkeys are built on the Web Authentication API (WebAuthn), which is a W3C standard for secure, passwordless authentication. WebAuthn allows users to authenticate using biometrics (e.g., fingerprint, facial recognition) or hardware security keys.

For this, I would suggest a quite popular library called django-passkeys: https://github.com/mkalioby/django-passkeys.

1. Install and set up the library
2. Add the Profile > PassKeys menu that links to a page to manage Passkeys

3. Add a page to manage PassKeys

4. Add a Login with PassKey on the login page

5. Add a banner to invite users to set up their PassKeys

There are some settings that are a bit unclear to me from the library's README which are mentioned here: https://github.com/mkalioby/django-passkeys/blob/d9dbf3b2352229da79e0d56d2060a2d84c78998b/README.md?plain=1#L48-L51

FIDO_SERVER_ID="localhost"      # Server rp id for FIDO2, it the full domain of your project
 FIDO_SERVER_NAME="TestApp"
 import passkeys
 KEY_ATTACHMENT = None | passkeys.Attachment.CROSS_PLATFORM | passkeys.Attachment.PLATFORM