Post

Eiji Kitamura / えーじ
@agektmr.com

Signal API is now available on Chrome for Android. A user deletes their credential on the website, but the passkey remains in their passkey provider. The next time they try to sign in, the passkey provider offers a passkey that no longer works. A sign-in attempt will fail and this isn't ideal.

developer.chrome.comSignal API for passkeys available on Chrome for Android  |  Blog  |  Chrome for DevelopersLearn how the Signal API for passkeys is now available on Chrome for Android, enabling better synchronization between relying parties and passkey providers.

3 reposts6 likes

Eiji Kitamura / えーじ
@agektmr.com

The Signal API solves this by allowing your website to "signal" the current state of credentials to the passkey provider. You can tell the provider to delete invalid passkeys or update metadata, ensuring a seamless sign-in experience. Learn more: developer.chrome.com/blog/signal-...

developer.chrome.comSignal API for passkeys available on Chrome for Android  |  Blog  |  Chrome for DevelopersLearn how the Signal API for passkeys is now available on Chrome for Android, enabling better synchronization between relying parties and passkey providers.