Secure Passkeys

After activating the plugin, a "Secure Passkeys" menu item will appear in your WordPress admin dashboard's sidebar.

You can add a custom theme for frontend shortcodes using the secure_passkeys_themes and secure_passkeys_themes_paths filters. Register the Theme: Use the secure_passkeys_themes filter to register your new theme and make it available in the plugin settings. ` <?php add_filter('secure_passkeys_themes', function ($themes) { $themes['new_theme'] = 'New Theme'; return $themes; }, 10, 1); ` Specify the Theme Path: Use the secure_passkeys_themes_paths filter to define the file path to your custom theme's directory. ` <?php add_filter('secure_passkeys_themes_paths', function ($themes) { $themes['new_theme'] = 'your/path/new/theme/folder'; return $themes; }, 10, 1); ` Override Template Files: Copy the template files you wish to customize from secure-passkeys/src/views/frontend/default/ to your custom theme's folder (your/path/to/new/theme/folder). Any files not copied to your custom theme folder will be loaded from the plugin's default theme, providing a fallback mechanism. This allows you to customize only the files you need to change.

Yes, you can redirect users after a passkey login by using the secure_passkeys_login_redirect_url filter. You can add the following code snippets to your theme's functions.php file. Example – Redirect to a Specific URL: This example redirects all users to a specific URL after they log in. ` <?php add_filter('secure_passkeys_login_redirect_url', function ($redirect_to) { // Redirect users to a custom URL after logging in with a passkey return 'https://your-domain.com/your-custom-path'; }); ` Example – Redirect Based on User Role: This example redirects users based on their assigned role. ` <?php add_filter('secure_passkeys_login_redirect_url', function ($redirect_to) { $user = wp_get_current_user(); // Redirect administrators to the WP admin dashboard if (in_array('administrator', $user->roles)) { return admin_url(); } // Redirect subscribers to a custom dashboard page if (in_array('subscriber', $user->roles)) { return home_url('/dashboard'); } // Default fallback URL return $redirect_to; }); `

Yes! The plugin offers a variety of filters and actions that allow developers to customize and extend its functionality. If you're a developer, we encourage you to explore these hooks and tailor the plugin to meet your specific needs. For a complete list of available hooks and examples, refer to the plugin’s codebase.

• Add - Added support for Heimlane Vault authenticator with its AAGUID.
• Fix - Resolved compatibility issues where 2FA plugins would block passkey login.

• Add - Added support for AliasVault authenticator with its AAGUID.
• Tweak - Updated iCloud Keychain entry to Apple Passwords with new icon.

• Security - Enhanced permission checks for administrative functions to prevent potential unauthorized access.
• Add - Added support for initial authenticator with its AAGUID.
• Fix - Resolved multiple PHP notices by correcting the improper use of wpdb::prepare() on static database queries.
• Tweak - Corrected a typo in the plugin description for proper grammar.

• Add - Updated Microsoft Password Manager AAGUID icon.
• Add - Added Chromium Browser AAGUID icon (previously had no icon).
• Fix - Fixed “You are not authorized to make this request” error caused by missing or empty HTTP_REFERER.

• Add - Added option to enable/disable passkeys reminder notice in WordPress admin for users without passkeys enabled.
• Add - Added support for Microsoft Password Manager authenticator with its AAGUID.
• Tweak - Changed excluded roles selection from multiple select dropdown to individual checkboxes for better usability.
• Fix - Improved autoloader class file path handling for better compatibility across different operating systems and environments.

• Add - Added support for the Ultimate Member plugin.
• Add - Added an option to automatically generate security key name for new passkeys, so users are no longer required to enter one manually.
• Add - Added an option to disable the logging of user activity.
• Tweak - Added extra_wrapper_classes and extra_button_classes attributes to the [secure_passkeys_login_form] shortcode for easier CSS customization.
• Fix - Corrected an issue where the used_at timestamp for a challenge was not being updated correctly in the database.
• Fix - Removed the Accept-Encoding header from the fingerprint calculation to prevent potential validation errors.
• Fix - Improved localization by removing HTML from translatable strings, ensuring they can be translated properly.
• Fix - Resolved a PHP warning on the "Activity Log" caused by an attempt to process a non-existent is_active property on log records.

• Initial release.

This is the initial release of the Secure Passkeys plugin.

1. Overview
2. Passkeys
3. Activity Log
4. General Settings
5. Display Settings
6. Advanced Settings
7. Admin Edit Profile and User Page
8. Admin Add New Passkey
9. Login

Secure Passkeys is licensed under the GNU General Public License v2 or later.