-
Notifications
You must be signed in to change notification settings - Fork 11.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: add session based passkey authenticator #18817
base: main
Are you sure you want to change the base?
Conversation
The latest updates on your projects. Learn more about Vercel for Git ↗︎
3 Skipped Deployments
|
This PR is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days. |
92fc262
to
278a399
Compare
278a399
to
3edd93f
Compare
1855078
to
bafe2f2
Compare
bafe2f2
to
4cb3e8e
Compare
4cb3e8e
to
7e47e55
Compare
7e47e55
to
73cb473
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
One UX concern i have with passkeys in general, and especially with the session based passkey version, is address derivation.
It feels odd to me to have and r1 key, passkey, and passkey session to all have different on chain addresses despite using the same exact priv/pub key pair at the end of the day. I can maybe understand having a separation between bare r1 and passkey, but the separation between passkey and passkey session seems odd to me.
I'd love to hear @kchalkias 's thoughts on this if possible.
Now while this may feel odd to me, I don't have a strong stance on us doing one thing vs the other and if we want to be more conservative by having this separation I'd be content with that
cd9518a
to
3c05da3
Compare
sui-foundation/sips#36
Description
Describe the changes or additions included in this PR.
Test plan
How did you test the new or updated feature?
Release notes
Check each box that your changes affect. If none of the boxes relate to your changes, release notes aren't required.
For each box you select, include information after the relevant heading that describes the impact of your changes that a user might notice and any actions they must take to implement updates.