- cross-posted to:
- selfhosted@lemmy.world
- cross-posted to:
- selfhosted@lemmy.world
VoidAuth is a self-hosted Single Sign-On solution that aims to be easy to setup and use while feeling seamless to your users. Release v1.1.0 brings a few new features I have been working on and am excited about:
- Passkey-only Users, the option on sign-up to use a passkey instead of a password.
- Admin Notification Emails, so admins know when they have new tasks such as user registrations to approve.
- Approval Emails for New Users, so new users awaiting approval know when they have been.
- DEFAULT_REDIRECT back to your main page for invitations, logouts, etc.
- and more!
So pretty much same as ssh/gpg private/public keys? Do many websites support this? I don’t remember seeing any that would give me an option to register using passkeys. Also, where are the private keys stored? How do I move them from device to device (for example, I signed up on android and now want to log in on desktop)? Do I back them up and restore when I’m buying a new phone?
A lot of the bigger players like Microsoft, Google and Apple support it. For small sites its a lot rarer. The keys are stored on device, but can be synced in a variety of ways, often using the cloud. There is problems with vendor lock in vecause of that, even though passkeys are an open standard by themselves.