Our.Umbraco.Passless 0.0.2

Our.Umbraco.Passless - Passwordless login for Umbraco

Package	NuGet
Our.Umbraco.Passless

Passwordless login for Umbraco using FIDO2. Main implementation based on Fido2-net-lib a great implementation for any potential FIDO server.

Getting started

When you've installed and configured the package, log into the backffice, press your user icon in the top right corner and click Manage Fido Devices to add new devices.

Features

• Passwordless login to the umbraco backoffice.
• Register multiple Authenticators to your user
• Platform (Windows hello etc) And Cross Platform (Android/Iphone via passkeys, YubiKey etc) Authenticators supported.

Planned features

• Completely disable password login
• Forgot password registers new authenticator
• Passwordless login for members.
• Better configuration for consumers
• Umbraco 9 Support. This might take longer as the .net 5 version of fido2.net lib is quite outdated.

Known issues

• The "Remember last authenticator" checkbox works poorly with passkeys, not sure if it can be helped?
• The CSS styling could need a loving hand

Install

Use nuget to install Our.Umbraco.Passless

Install-Package Our.Umbraco.Passless

Configuration

You need to add these settings to your appsettings.config

 "Passless": {
   "useUmbracoDb" : true, //Optional
   "fido2": {
     "serverName": "{your server name}",
     "serverDomain": "{YOUR DOMAIN}",
     "origins": [ "{YOUR ORIGIN}" ],
     "timestampDriftTolerance": {drifttollerance in ms}
   }
 }

For example:

"Passless": {
   "fido2": {
     "serverName": "Passless",
     "serverDomain": "localhost",
     "origins": [ "https://localhost:44351" ],
     "timestampDriftTolerance": 300000
   }
}

Use Umbraco DB

The useUmbracoDB toggles whether we register our implementation of IFidoCredentialRepository and runs the migration adding the credentials table to the current umbraco database.

Set this to false, and register your own implementation if you want to use a different database for the users credentials.

Frontend

While working on the frontend navigate to src/UmbracoFidoLogin/UI and run npm run dev The current webpack setup is just a dumb Webpack-copy step

Special thanks to:

• D-Inventor for his Angular JS support