Question

Webauthn: Support of Related Origin Requests?

Forum|Forum|1 year ago
November 28, 2024
6 replies
934 views

I am currently working on implementing Passkey authentication based on https://github.com/w3c/webauthn/wiki/Explainer:-Related-origin-requests. Chromium and Safari seem to support this feature. With 1Password, the registration of a new Passkey is not possible. As expected for clients not supporting ROR, the registration fails with

Failed to core.webAuthnRegister: ⛔ Core error code: {"type":"WebAuthnError","data":{"type":"OriginRpMissmatch"}}

Are there any plans to support ROR in 1Password?

Browser Extension

1

1P_Evon

1Password Employee

Hello, @drossner. Thank you for writing in.

We don't currently support related origin requests in 1Password. While we recognize the importance of staying aligned with the specifications, it's not on our priority list yet. I've shared your feedback with our team for further consideration.

Let me know if you have any questions.

-Evon

ref:44902199

L

llorenc

Hi @1P_Evon ,

What's the status on supporting related origin requests?

Thanks!

1P_Dave

1Password Employee

Hello! I've replied to you here.

-Dave

D

drossnerAuthor

Thanks Evon! I understand this is a rather recent addition to the specification but - at least for us - an important one. Just want to let you know I second the feature request ;)

Keep up the great work!

Daniel

1

1P_Evon

1Password Employee

@drossner,

You're very welcome. Let me know if there's anything else I can assist you with. 🙂

-Evon

L

llorenc

Hi!

I'm curious whether there has been any progress in supporting https://github.com/w3c/webauthn/wiki/Explainer:-Related-origin-requests in 1Password.

iCloud and Android support it, so our 1Password manager users will have a worse experience because we'll need to open a new window when creating a new passkey.

Thanks!

1P_Dave

1Password Employee

@llorenc

I don't have any progress to share at the moment, the feature request is still open in our backlog and our team is monitoring website support for this feature in order to prioritize it accordingly in the future.

Are you building a website yourself that uses Related Origin Requests? Or have you run into websites that use it? I'd like to add your use case to the feature request to provide more details for our product team.

-Dave

L

llorenc

I work in a project that uses Related Origin Requests.

We have the following URLs:

https://identity.internetcomputer.org/
https://identity.ic0.app/
https://id.ai/

We were able to use iframes instead of ROR to get the credentials. But now we'd like to keep all credentials in one domain. Therefore, we would need to set the RP ID when creating the credential. That works well for iCloud and Google Password Manager, but not for 1Password, which means that we will be forced to open a new window for those users.

How far away is that in your roadmap?

Thanks!

L

LotharSchaberg

Hello Support Team,

please support Related Origin Requests in 1Password.

Thanks in advance.

Lothar

1P_Dave

1Password Employee

@LotharSchaberg

Thank you for the feedback! Can you tell me if you're requesting this for your own website that you're developing? Or are you requesting it for a specific website? Are you able to share the website?

-Dave

PB-51168339

L

LotharSchaberg

Hello Dave,

a few months before I got this support ticket: BDH-22814-758 - the website where the ROR problems occurs is mentioned there. A specific website is my problem, as I am neither owning a website nor am I a developer.

Regards, Lothar

B

BSerlIfE

Has there been any movement on this feature request? There has been progress in this area lately. For instance, Bitwarden now supports ROR for passkeys. I believe at least one of the KeePass variants does as well.

Sign up

1Password employees: Sign in with SSO

Login to the community

1Password employees: Sign in with SSO

Scanning file for viruses.

This file cannot be downloaded