points by apeace 3 years ago

Is there a way to tell, from Javascript, what kind of authentication the user is going to be doing?

Do I have to tell my users "Login with webauthn" (which none of them will ever do), or can I say "Login with FaceID" by detecting that they are on an iPhone with FaceID?

I tested on webauthn.io using a Macbook with TouchID. On Safari it uses TouchID, whereas on Firefox it prompts me to insert a security key. My users think security keys are expensive and scary, but they really like TouchID. How do I only show the option on Safari when there is TouchID, but not Firefox which only supports security keys? Am I back to UA sniffing and building my own lookup tables of available features like back in 2005?