Meteor Login using WebAuthn API

help
#1

Has anyone worked out how to integrate the Webauthn API as a passwordless login mechanism for Meteor? This would allow users to login using Windows Hello, TouchID, a Yubikey, etc. The code to register and authenticate users is fairly straightforward, but I don’t know how to let Meteor know the user is now authenticated? Any thoughts on how this could be done?

There’s a nice WebAuthn demo here: https://webauthn.io/

#2

We use a combination of this

And Meteor’s accounts api

1 Like
#3

@rjdavid , thanks for the response. However, I don’t see any Meteor Accounts method to login the user that doesn’t require a username/password combo, an emailed token, or an oAuth integration. How did you go from successfully authenticating a user using WebAuthn to logging that user into their Meteor account?

#4

Ah! It looks like I need to use the undocumented Accounts.registerLoginHandler

#5

Good point that Accounts.registerLoginHandler() is not in the documentation :thinking:

1 Like
#6

Hey! I’ll add that to our backlog, Thanks for letting us know

#7

Any updates on this? Maybe someone already implemented it in custom meteor package?

#8

Added an issue to the core: Accounts.registerLoginHandler is still undocumented · Issue #12189 · meteor/meteor · GitHub

1 Like