Native Passkey / WebAuthn Support

PHPMaker Feature Requests (PHPMaker)
1

It would be very useful if PHPMaker could add native support for Passkeys / WebAuthn / FIDO2 authentication.

Passkeys are increasingly becoming the preferred replacement for traditional passwords and provide strong protection against phishing and credential theft.

Ideally, PHPMaker could support:

  • Registration of one or more passkeys per user

  • Login using WebAuthn (navigator.credentials.get())

  • Passkey enrollment and removal from the user profile

  • Multiple authenticators for the same account, for example:

    • Bitwarden Passkeys

    • Windows Hello

    • Apple/Google Passkeys

    • YubiKey / FIDO2 security keys

  • Storage of only the WebAuthn credential ID and public key in the application database

  • Optional fallback to password / 2FA

  • Support for passwordless login using discoverable credentials

  • Admin options to enable, disable, or require passkey authentication

This would be particularly useful for PHPMaker applications used in corporate environments, where users may access the same application from several devices.

For example, a passkey stored in Bitwarden can be synchronized across multiple devices, while Windows Hello or a YubiKey can also be registered as additional authenticators.

A native implementation would also be preferable to modifying generated files manually or integrating a third-party WebAuthn library after every project regeneration.

Since PHPMaker already provides several authentication methods and 2FA options, native Passkey/WebAuthn support would be a valuable addition to the security features of future versions.

1 Like