Passkey use in web browsers

Overview

If your browser app uses WKWebView to display web content, WebKit automatically handles WebAuthentication challenges in web pages and requests credentials from the person using the browser. If your browser app uses an alternative web browser engine—for example, an alternate browser engine for iPhone that you write using BrowserEngineKit—when the website makes a WebAuthentication challenge, use ASAuthorizationController to discover and use credentials to respond to the challenge. ASAuthorizationController works with passkeys stored on the keychain or managed by third-party credential managers.

The person using your browser chooses whether to let your app access their passkeys. Use ASAuthorizationWebBrowserPublicKeyCredentialManager to determine whether you browser app has access, and to request access if it has no access.

Topics

Website authorization

• Authenticating people by using passkeys in browser apps
• ASAuthorizationWebBrowserPublicKeyCredentialManager

Website authentication requests

• ASAuthorizationWebBrowserExternallyAuthenticatableRequest
• ASAuthorizationWebBrowserPlatformPublicKeyCredentialAssertionRequest
• ASAuthorizationWebBrowserPlatformPublicKeyCredentialRegistrationRequest

Website credential providers

• ASAuthorizationWebBrowserPlatformPublicKeyCredentialProvider

See Also

Passkeys

• Public-Private Key Authentication
• Performing fast account creation with passkeys
• Connecting to a service with passkeys