<@U04UQ68083H> Does Ory Kratos support passkeys in...
# ory-copilot
s
@chilly-king-10285 Does Ory Kratos support passkeys in API login/registration flows using Swift and Apple’s
AuthenticationServices
framework?
c
A message from kapa.ai
Hmm, I don't know enough to give you a confident answer yet. The knowledge sources provided do not specifically mention support for Swift or Apple's
AuthenticationServices
framework in Ory Kratos. However, Ory Kratos does support passkeys as a password replacement for more secure sign-ins. Passkeys are an industry-accepted standard and notable adopters include Apple. To enable passkeys in Ory, you can go to AuthenticationPasswordless login in the [Ory Console](https://console.ory.sh/projects/current/passwordless) and toggle the switch to enable the feature. Alternatively, you can use the Ory CLI to enable the passkey strategy with the following command:
Copy code
bash ory patch identity-config <your-project-id> \     --add '/selfservice/methods/passkey/enabled=true' \     --add '/selfservice/methods/passkey/config/rp/display_name="My Display Name"'
For more information on Ory Kratos User Login and User Registration, you can refer to the [User Login Documentation](https://www.ory.sh/docs/kratos/self-service/flows/user-login) and [User Registration Documentation](https://www.ory.sh/docs/kratos/self-service/flows/user-registration). For specific information about using Swift and Apple's
AuthenticationServices
framework with Ory Kratos, I recommend checking the official Ory documentation or reaching out to the Ory community for more detailed guidance.
s
@chilly-king-10285 Does the passkey strategy work in native API flows as well?
c
A message from kapa.ai
Yes, the passkey strategy can be used in native API flows. Ory Kratos supports various methods for updating the login flow, including the passkey method. When logging in using the passkey strategy, the method should be set to "passkey". Here is an example of how the request body for the
updateLoginFlow
API might look like:
Copy code
json {   "csrf_token": {     "description": "Sending the anti-csrf token is only required for browser login flows.",     "type": "string"   },   "method": {     "description": "Method should be set to 'passkey' when logging in using the Passkey strategy.",     "type": "string"   },   "passkey_login": {     "description": "Login a WebAuthn Security Key. This must contain the ID of the WebAuthN connection.",     "type": "string"   } }
Please note that the actual implementation might vary depending on your specific use case and setup. For more detailed information, you can refer to the [Ory API Reference](https://www.ory.sh/docs/reference/api).
s
@chilly-king-10285 Does this also work with an Apple passkey instead of a WebAuthn Security Key?
c
A message from kapa.ai
Yes, Ory Kratos does support the use of Apple Passkeys. Passkeys are an industry-accepted standard and notable adopters include Apple. They are described as "a password replacement that provides faster, easier, and more secure sign-ins to websites and apps across a user's devices." Apple Passkeys are stored in the iCloud Keychain and can be used for passwordless login across multiple Apple devices that have access to the same Apple iCloud account. However, the specific details of how to use an Apple Passkey with Ory Kratos in native API flows are not provided in the knowledge sources. For more detailed information, you may need to refer to the [Ory Documentation](https://www.ory.sh/docs/) or reach out to the Ory community.
s
@chilly-king-10285 Can I get a Passkey challenge for a registration or login flow without WebAuthN?
c
A message from kapa.ai
Yes, Ory Kratos supports passkey-based authentication without the need for WebAuthN. Passkeys can be used as a password replacement for more secure sign-ins. In the context of Ory Kratos, passkeys can be used in two ways: - Implicit use of passkeys: For example, when a user authenticates using fingerprint recognition or face recognition, the platform implicitly creates a symmetric key pair, but this detail is hidden from the user. - Explicit use of passkeys: For example, when a user authenticates using a USB key, which has a private key embedded in the physical USB key. However, the specific details of how to get a Passkey challenge for a registration or login flow without WebAuthN are not provided in the knowledge sources. For more detailed information, you may need to refer to the [Ory Documentation](https://www.ory.sh/docs/) or reach out to the Ory community.