vole

Clone

Read only, no credentials:

https://rodent.software/git/vole.git

Write over SSH with a registered key:

git clone ssh://git@0.0.0.0:2222/vole.git

A free and open-source forge that lives in your Git repo.

Offer passkeys through conditional UI and require discoverable credentials

ad79b7abded893d0771eaf80de555a1236f17474 · Keenan Nemetz · 3d ago · parent 25343521

Offer passkeys through conditional UI and require discoverable credentials

Start a usernameless ceremony when the login page advertises conditional
mediation, so the browser can offer a saved passkey in the account field. The
assertion resolves the account from the credential id and user handle;
username-first sign-in stays for browsers without autofill and for passkeys
created before discoverable credentials were required.

Register each new passkey with residentKey required, and record the autofill
flow and fallback in the account documentation.

Refs #213 (01M6SAK9STFGJ7PECY7ET8277N).

server/web/auth.go +1−1

@@ -75,7 +75,7 @@ func newAuth(cfg config.Config) (Auth, error) {
	75	75	AttestationPreference: protocol.PreferNoAttestation,
	76	76	AuthenticatorSelection: protocol.AuthenticatorSelection{
	77	77	UserVerification: protocol.VerificationRequired,
	78		ResidentKey: protocol.ResidentKeyRequirementPreferred,
		78	ResidentKey: protocol.ResidentKeyRequirementRequired,
	79	79	},
	80	80	})
	81	81	if err != nil {