Adds WebAuthn passkey login for the Admin with 2FA fallback, plus trusted devices, lockouts, recovery, dashboards, diagnostics, security scoring, and audit logs. Currently includes the module foundation (registration, ACL, system config, typed config provider, i18n) with features delivered in later workflow steps.
06 Jul 2026
Adds passwordless customer sign-in with passkeys via WebAuthn/FIDO2. Exposes REST APIs and UI widgets for registration, login, and credential management, with safeguards like anti-enumeration, rate limiting, sign-count validation, and token-based sessions.
07 Apr 2026