add Fido2 / WebAuthn support to iOS App

[BMiZEL]

Hello,

can you please add FIDO2 / WebAuthn Support to the Nextcloud iOS App?

Alternatively, instead of using the in-App Browser, change to the user-preferred Browser i.e. Safari, for the authentication/adding a new Nextcloud.

Thank you

[ne20002]

As webauthn is supported by the server I second that.

We currently have the device passwords and I would like to have either full support with Passkeys (as it is available on iOS) or to have the device password (as created in the WebUI) as a start to then initiate a passkey.
With this the device password would be one time only and devices would still have a dedicated passkey and could be revoked per device if necessary.
Webauthn is simply much more secure compared to passwords.

[asdflkampiueowrsdhjfk]

I third this.
I am using Authentik as an identity provider and the current situation is really not ideal.

I would love if this could be fixed.

[BMiZEL]

@asdflkampiueowrsdhjfk

as far as I am concerned this was done a while back - Hardware Keys (FIDO2) is working well .

I third this. I am using Authentik as an identity provider and the current situation is really not ideal.

I would love if this could be fixed.

[asdflkampiueowrsdhjfk]

The combination of Authentik + Webauthn does not work as of today.

I am not referring to Nextclouds own Webauthn support.

[pvdhagen]

our Nextcloud enterprise uses external SSO, which should perform passkey authentication. It is not Authentik, but the same setup.
Users report it works fine on Android but fails on iOS due to the embedded browser whith simply does not support passkeys.
Therefore, I consider this an important issue and do not unterstand why it has been closed as completed.

Discussion continues in #1645

[flindeberg]

@BMiZEL This does not work with third party IDP. Only when using Nextcloud internal Webauthn (perhaps, I have not verified this, but I'm hard pressed to believe it works). External keys are not recognized as the app does not have the right permissions / app lacking functionality (I have not dived into the code base).

[BMiZEL]

Just tried on another device and it's true, it is no longer working.

There was an App Version a while back, where the login re-directed to the device browser and I have not tried since.

[mpivchev]

Please try #3996 and see if it fixes the issue, or wait for a new Testflight.

[mpivchev]

Hi again, 33.0.2 (0) is in Testflight and includes the fix that allows passkeys in the app. Please test if it possible. Thanks!