{
    "content": "<h1>The .well-known\/passkey-endpoints Specification<\/h1><p>The <strong>.well-known\/passkey-endpoints<\/strong> URI is a proposed standard designed to enable <a href=\"..\/Web-Browsers\/\">Web Browsers<\/a> and <a href=\"..\/Password-Managers\/\">Password Managers<\/a> to programmatically discover the <a href=\"..\/URL\/\">URL<\/a> endpoints for managing <a href=\"..\/Passkeys\/\">Passkeys<\/a> on a specific domain. This mechanism is built upon the framework established by <a href=\"..\/RFC-8615\/\">RFC 8615<\/a>, which defines a path for well-known services. By hosting a <a href=\"..\/JSON\/\">JSON<\/a> file at this location, an <a href=\"..\/Origin\/\">Origin<\/a> can provide metadata about its <a href=\"..\/WebAuthn\/\">WebAuthn<\/a> capabilities, specifically where a user can go to add, remove, or view their cryptographic credentials.<\/p><p>This discovery process is a vital part of the <a href=\"..\/FIDO-Alliance\/\">FIDO Alliance<\/a> and <a href=\"..\/W3C\/\">W3C<\/a> efforts to streamline the user experience for <a href=\"..\/Passwordless-Authentication\/\">Passwordless Authentication<\/a>. When a user interacts with a site using <a href=\"..\/FIDO2\/\">FIDO2<\/a> protocols, the client software can query this endpoint to find the management interface, facilitating a seamless transition for users looking to upgrade their account security. Detailed technical documentation is available through the <a href=\"https:\/\/fidoalliance.org\/specs\/fido-v2.1-ps-20210615\/fido-client-to-authenticator-protocol-v2.1-ps.html\">FIDO CTAP specifications<\/a> and the <a href=\"https:\/\/www.w3.org\/TR\/webauthn-3\/\">W3C WebAuthn Level 3 draft<\/a>.<\/p><p>Implementation of this endpoint involves serving a resource with the <code>application\/json<\/code> media type. This allows for improved interoperability between <a href=\"..\/Identity-Providers\/\">Identity Providers<\/a> and the ecosystem of <a href=\"..\/Authenticators\/\">Authenticators<\/a>, ensuring that the lifecycle of a <a href=\"..\/Passkeys\/\">Passkey<\/a> can be managed effectively regardless of the specific platform or device used.<\/p><ul><li><a href=\"..\/WebAuthn\/\">WebAuthn<\/a><\/li><li><a href=\"..\/FIDO2\/\">FIDO2<\/a><\/li><li><a href=\"..\/Credential-Management-API\/\">Credential-Management-API<\/a><\/li><li><a href=\"..\/Public-Key-Cryptography\/\">Public-Key-Cryptography<\/a><\/li><\/ul>",
    "tags": [
        "passkeys",
        "webauthn",
        "fido2",
        "authentication",
        "well-known",
        "security",
        "identity",
        "json",
        "w3c",
        "discovery"
    ]
}