Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: add session based passkey authenticator #18817

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

joyqvq
Copy link
Contributor

@joyqvq joyqvq commented Jul 26, 2024

sui-foundation/sips#36

Description

Describe the changes or additions included in this PR.

Test plan

How did you test the new or updated feature?


Release notes

Check each box that your changes affect. If none of the boxes relate to your changes, release notes aren't required.

For each box you select, include information after the relevant heading that describes the impact of your changes that a user might notice and any actions they must take to implement updates.

  • Protocol:
  • Nodes (Validators and Full nodes):
  • Indexer:
  • JSON-RPC:
  • GraphQL:
  • CLI:
  • Rust SDK:
  • REST API:

Copy link

vercel bot commented Jul 26, 2024

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
sui-docs ✅ Ready (Inspect) Visit Preview 💬 Add feedback Dec 18, 2024 8:51pm
3 Skipped Deployments
Name Status Preview Comments Updated (UTC)
multisig-toolkit ⬜️ Ignored (Inspect) Visit Preview Dec 18, 2024 8:51pm
sui-kiosk ⬜️ Ignored (Inspect) Visit Preview Dec 18, 2024 8:51pm
sui-typescript-docs ⬜️ Ignored (Inspect) Visit Preview Dec 18, 2024 8:51pm

Copy link
Contributor

This PR is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days.

@github-actions github-actions bot added the Stale label Sep 25, 2024
@joyqvq joyqvq force-pushed the session-based-passkey branch from 92fc262 to 278a399 Compare November 26, 2024 20:16
@joyqvq joyqvq temporarily deployed to sui-typescript-aws-kms-test-env November 26, 2024 20:16 — with GitHub Actions Inactive
@joyqvq joyqvq force-pushed the session-based-passkey branch from 278a399 to 3edd93f Compare November 26, 2024 20:17
@joyqvq joyqvq temporarily deployed to sui-typescript-aws-kms-test-env November 26, 2024 20:17 — with GitHub Actions Inactive
@github-actions github-actions bot removed the Stale label Nov 28, 2024
@joyqvq joyqvq temporarily deployed to sui-typescript-aws-kms-test-env November 30, 2024 00:45 — with GitHub Actions Inactive
@joyqvq joyqvq force-pushed the session-based-passkey branch from 1855078 to bafe2f2 Compare December 3, 2024 04:22
@joyqvq joyqvq temporarily deployed to sui-typescript-aws-kms-test-env December 3, 2024 04:22 — with GitHub Actions Inactive
@joyqvq joyqvq force-pushed the session-based-passkey branch from bafe2f2 to 4cb3e8e Compare December 4, 2024 04:07
@joyqvq joyqvq temporarily deployed to sui-typescript-aws-kms-test-env December 4, 2024 04:07 — with GitHub Actions Inactive
@joyqvq joyqvq force-pushed the session-based-passkey branch from 4cb3e8e to 7e47e55 Compare December 4, 2024 04:12
@joyqvq joyqvq temporarily deployed to sui-typescript-aws-kms-test-env December 4, 2024 04:12 — with GitHub Actions Inactive
@joyqvq joyqvq force-pushed the session-based-passkey branch from 7e47e55 to 73cb473 Compare December 4, 2024 04:36
@joyqvq joyqvq temporarily deployed to sui-typescript-aws-kms-test-env December 4, 2024 04:36 — with GitHub Actions Inactive
@joyqvq joyqvq marked this pull request as ready for review December 4, 2024 04:37
@joyqvq joyqvq temporarily deployed to sui-typescript-aws-kms-test-env December 4, 2024 04:38 — with GitHub Actions Inactive
Copy link
Contributor

@bmwill bmwill left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One UX concern i have with passkeys in general, and especially with the session based passkey version, is address derivation.

It feels odd to me to have and r1 key, passkey, and passkey session to all have different on chain addresses despite using the same exact priv/pub key pair at the end of the day. I can maybe understand having a separation between bare r1 and passkey, but the separation between passkey and passkey session seems odd to me.

I'd love to hear @kchalkias 's thoughts on this if possible.

Now while this may feel odd to me, I don't have a strong stance on us doing one thing vs the other and if we want to be more conservative by having this separation I'd be content with that

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants