From 6a690dbe7e1bc9b75b15d1f3716f07efa32e1ac3 Mon Sep 17 00:00:00 2001 From: Jeff Emmett Date: Sat, 21 Mar 2026 21:19:55 +0000 Subject: [PATCH] feat: add WebAuthn related-origins endpoint for cross-domain passkeys Allows passkeys registered with RP ID rspace.online to work on rcal.online subdomains via the .well-known/webauthn route. Co-Authored-By: Claude Opus 4.6 (1M context) --- src/app/.well-known/webauthn/route.ts | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 src/app/.well-known/webauthn/route.ts diff --git a/src/app/.well-known/webauthn/route.ts b/src/app/.well-known/webauthn/route.ts new file mode 100644 index 0000000..029ac97 --- /dev/null +++ b/src/app/.well-known/webauthn/route.ts @@ -0,0 +1,13 @@ +import { NextResponse } from 'next/server'; + +/** + * Related Origin Requests for WebAuthn + * Allows passkeys registered with RP ID "rspace.online" to be used on this domain + * See: https://passkeys.dev/docs/advanced/related-origins/ + */ +export async function GET() { + return NextResponse.json({ + origins: ['https://rspace.online'], + }); +} +