[Backend] Passkey (WebAuthn) authentication

[Penielka]

Overview

Add passwordless authentication via WebAuthn passkeys as a primary or second factor, with device management and recovery flows.

Acceptance Criteria

• Passkey registration and login via WebAuthn
• Passkeys usable as MFA second factor
• Device management (list, revoke) UI
• Account recovery flow when passkeys are lost
• Fallback authentication preserved for legacy users

Files to Modify

• backend/src/services/auth/passkeys.ts — WebAuthn service
• backend/src/routes/auth.ts — extend auth endpoints
• backend/src/models/Passkey.ts — new model
• frontend/src/components/auth/ — passkey UI

Priority: High

[Chigybillionz]

Hi, I’m interested in this task and can handle the implementation. Assign it to me and I’ll get started.

[uche102]

📋 Grainlify Application

@uche102 has applied to work on this issue as part of the Grainlify program.

Hi please i would like to work on this

---

Repo Maintainers: To accept this application, review their application or assign @uche102 to this issue.

[grantfox-oss]

🦊 GrantFox — @Chigybillionz has been assigned to this issue as part of the Third Campaign campaign!

Next steps:

1. Open a Pull Request referencing this issue (e.g., Closes #409)
2. Your PR will be reviewed by the AetherEdu maintainers

Good luck! Track your progress on GrantFox.

[grantfox-oss]

🎉 This issue has been marked as completed on GrantFox!

@Chigybillionz's PR #485 was approved and merged by @Penielka.

🏆 @Chigybillionz: You earned 40 FoxPoints for this contribution! Your current tier: Builder (2,835 total points). Track your full progress on GrantFox.

👏 Great work, @Chigybillionz! Keep contributing to AetherEdu.