ente/web/apps/accounts

Ente Accounts

Code that runs on accounts.ente.io.

Primarily, this serves a common domain where our clients (mobile and web / auth and photos) can create and authenticate using shared passkeys tied to the user's Ente account. Passkeys can be shared by multiple domains, so we didn't strictly need a separate web origin for sharing passkeys across our web clients, but we do need a web origin to handle the passkey flow for the mobile clients.

For more details about the Passkey flows, docs/webauthn-passkeys.md.

Development

To set this up to work with a locally running museum, modify your local museum.yaml to set the relaying party's ID to "localhost" (without any port number).

webauthn:
    rpid: "localhost"
    rporigins:
        - "http://localhost:3001"

Note that browsers already treat localhost as a secure domain, so Passkey APIs will work even if our local dev server is using http.