From 0a1001eb0bd2d1f7c0624ae1ef8ae7ccdb3447d4 Mon Sep 17 00:00:00 2001
From: Peter Stone <thepeterstone@gmail.com>
Date: Thu, 5 Feb 2026 15:35:01 -1000
Subject: Add passkey (WebAuthn) authentication support
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Enable passwordless login via passkeys as an alternative to password auth.
Users register passkeys from Settings; the login page offers both options.
WebAuthn is optional — only active when WEBAUTHN_RP_ID and WEBAUTHN_ORIGIN
env vars are set.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 web/templates/passkeys_list.html | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)
 create mode 100644 web/templates/passkeys_list.html

(limited to 'web/templates/passkeys_list.html')

diff --git a/web/templates/passkeys_list.html b/web/templates/passkeys_list.html
new file mode 100644
index 0000000..4e05461
--- /dev/null
+++ b/web/templates/passkeys_list.html
@@ -0,0 +1,24 @@
+{{define "passkeys_list.html"}}
+<div class="items-list">
+    {{if .Passkeys}}
+        {{range .Passkeys}}
+        <div class="item-row" id="passkey-{{.ID}}">
+            <div class="item-name">
+                <strong>{{if .Name}}{{.Name}}{{else}}Passkey{{end}}</strong>
+                <div class="item-desc">Added {{.CreatedAt.Format "Jan 2, 2006"}}</div>
+            </div>
+            <button class="btn btn-danger btn-sm"
+                    hx-delete="/passkeys/{{.ID}}"
+                    hx-target="#passkey-{{.ID}}"
+                    hx-swap="outerHTML"
+                    hx-headers='{"X-CSRF-Token": "{{$.CSRFToken}}"}'
+                    hx-confirm="Delete this passkey?">
+                Delete
+            </button>
+        </div>
+        {{end}}
+    {{else}}
+        <div class="empty-state">No passkeys registered. Register one to enable passwordless login.</div>
+    {{end}}
+</div>
+{{end}}
-- 
cgit v1.2.3