Area: frontend · Effort: M
What: Allow mobile web users to authenticate using WebAuthn biometrics (fingerprint, Face ID) as a faster alternative to password entry.
Why: Password entry on mobile is friction-heavy and a leading cause of session abandonment. Biometric authentication removes this friction entirely.
Acceptance Criteria:
- Users can register a biometric credential from their security settings
- Subsequent logins offer the biometric option if a credential is registered
- Falls back to password if biometric fails or is unavailable
- Registered credentials are visible and revocable in the session management dashboard
Hints:
- Use the
@simplewebauthn/browser and @simplewebauthn/server libraries
- Store public keys in a
webauthn_credentials table
- Biometric is available on iOS Safari (14+) and Chrome for Android (67+)
Area: frontend · Effort: M
What: Allow mobile web users to authenticate using WebAuthn biometrics (fingerprint, Face ID) as a faster alternative to password entry.
Why: Password entry on mobile is friction-heavy and a leading cause of session abandonment. Biometric authentication removes this friction entirely.
Acceptance Criteria:
Hints:
@simplewebauthn/browserand@simplewebauthn/serverlibrarieswebauthn_credentialstable