Forum Discussion

drossner's avatar
drossner
New Contributor
8 months ago

Webauthn: Support of Related Origin Requests?

I am currently working on implementing Passkey authentication based on https://github.com/w3c/webauthn/wiki/Explainer:-Related-origin-requests. Chromium and Safari seem to support this feature. With 1Password, the registration of a new Passkey is not possible. As expected for clients not supporting ROR, the registration fails with

Failed to core.webAuthnRegister: ⛔ Core error code: {"type":"WebAuthnError","data":{"type":"OriginRpMissmatch"}}

Are there any plans to support ROR in 1Password?

browser extension

12 Replies

  • llorenc's avatar
    llorenc
    New Contributor
    21 days ago

    Hi!

    I'm curious whether there has been any progress in supporting https://github.com/w3c/webauthn/wiki/Explainer:-Related-origin-requests in 1Password.

    iCloud and Android support it, so our 1Password manager users will have a worse experience because we'll need to open a new window when creating a new passkey.

    Thanks!

    • 1P_Dave's avatar
      1P_Dave
      Icon for Moderator rankModerator
      21 days ago

      llorenc​ 

      I don't have any progress to share at the moment, the feature request is still open in our backlog and our team is monitoring website support for this feature in order to prioritize it accordingly in the future.

      Are you building a website yourself that uses Related Origin Requests? Or have you run into websites that use it? I'd like to add your use case to the feature request to provide more details for our product team. 

      -Dave

      • llorenc's avatar
        llorenc
        New Contributor
        18 days ago

        I work in a project that uses Related Origin Requests.

        We have the following URLs:

        • https://identity.internetcomputer.org/
        • https://identity.ic0.app/
        • https://id.ai/

        We were able to use iframes instead of ROR to get the credentials. But now we'd like to keep all credentials in one domain. Therefore, we would need to set the RP ID when creating the credential. That works well for iCloud and Google Password Manager, but not for 1Password, which means that we will be forced to open a new window for those users.

        How far away is that in your roadmap?

        Thanks!

  • 1P_Evon's avatar
    1P_Evon
    Icon for 1Password Team rank1Password Team
    8 months ago

    drossner,

    You're very welcome. Let me know if there's anything else I can assist you with. 🙂

    -Evon

  • drossner's avatar
    drossner
    New Contributor
    8 months ago

    Thanks Evon! I understand this is a rather recent addition to the specification but - at least for us - an important one. Just want to let you know I second the feature request ;)

    Keep up the great work!

    Daniel

  • 1P_Evon's avatar
    1P_Evon
    Icon for 1Password Team rank1Password Team
    8 months ago

    Hello, drossner. Thank you for writing in.

    We don't currently support related origin requests in 1Password. While we recognize the importance of staying aligned with the specifications, it's not on our priority list yet. I've shared your feedback with our team for further consideration.

    Let me know if you have any questions.

    -Evon

    ref:44902199