Support for hardware keys via FIDO and/or WebAuthN as a second-factor for SSH Keys to sign commits in WebIDE

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

Release notes

Problem to solve

As GitLab moves to invest in a richer remote development experience in the new WebIDE and Remote Workspaces, offering a secure, multi-factor protected way to access keys (including SSH and x.509) via modern standards like FIDO2 and/or WebAuthN will be necessary to facilitate the signing of commits.

Proposal

GitLab should support hardware factors such as the use of TouchID or Yubikeys to unlock these keys, without requiring the use of a local environment.

Feature Usage Metrics

This page may contain information related to upcoming products, features and functionality. It is important to note that the information presented is for informational purposes only, so please do not rely on the information for purchasing or planning purposes. Just like with all projects, the items mentioned on the page are subject to change or delay, and the development, release, and timing of any products, features, or functionality remain at the sole discretion of GitLab Inc.

Edited by 🤖 GitLab Bot 🤖