Only allow NFC authentication regardless of desktop or mobile

[eadwu]

Is it possible to do the above (title)?

From what I'm seeing I'd either have to

• Do some janky OAuth from a different provider set up for mobile so that auth requests get forwarded to the app
• Maintain a custom app that is a password manager that just proxies requests through NFC

Mainly just want NFC login to work, so on mobile, just tap and go, while on desktop, qr code to mobile, then tap and go.

Webauthn only allows for password managers to have passkeys, so it is not possible to forward it to another hardware device.

Signing in via passkeys allows chaining of devices, so I can daisy chain a bunch of different devices (including NFC). But it doesn't look like sign ups allow it ...

[eadwu]

Doesn't like a Kratos issue, but rather Android's problem, it doesn't allow saving to hardware tokens for passkeys ... as of this comment.

Sign up via NFC works on mobile and log in works afterwards from desktop -> mobile. For a desktop -> mobile direct path one needs to implement a FIDO2/WebAuthn proxy under a Credential Manager provider Android app.

From what I've seen in videos, this doesn't look to be an issue for Apple devices.