passkeys

• FIX(passkeys): remove unused ua_client_hints dependency (#300). (a25a3de4)

Published to pub.dev: https://pub.dev/packages/passkeys/versions/2.22.3

• FIX(passkeys): remove unused ua_client_hints dependency (#300). (a25a3de4)

2026-08-17

Changes

Packages with breaking changes:

• There are no breaking changes in this release.

Packages with other changes:

• passkeys_android - v2.13.1
• passkeys - v2.22.2
• corbado_auth - v3.8.2
• corbado_auth_firebase - v2.0.10

Packages with dependency updates only:

Packages listed below depend on other packages in this workspace that have had changes. Their versions have been incremented to bump the minimum dependency versions of the packages they depend upon in this project.

• passkeys - v2.22.2
• corbado_auth - v3.8.2
• corbado_auth_firebase - v2.0.10

• FIX(passkeys): remove unused ua_client_hints dependency (#300). (a25a3de4)

• Update a dependency to the latest release.

Published to pub.dev: https://pub.dev/packages/passkeys/versions/2.22.2

• Update a dependency to the latest release.

• FIX(passkeys_darwin): compile out Signal API on Xcode older than 26.2 (#289). (3731dc07)

Published to pub.dev: https://pub.dev/packages/passkeys/versions/2.22.1

• FIX(passkeys_darwin): compile out Signal API on Xcode older than 26.2 (#289). (3731dc07)

• REFACTOR: clean up analysis lints and refine auth exception types (#282). (60312bd3)
• REFACTOR: adopt Dart 3.9 features and migrate the example integration tests to patrol (#268). (7a1bd0de)
• FIX: resolve Dependabot security alerts in npm dependencies (#277). (ffe1d76f)
• FIX(passkeys_darwin): map no-credentials-available regardless of device locale (#271). (7414c54a)
• FIX: improve error handling for excludeCredentials on iOS 26 and Android 16+ (#237). (f8abd40c)
• FEAT(passkeys_doctor): add web/macOS/Windows checks and only run doctor in debug mode (#284). (5cf5c8b7)
• FEAT(passkeys): expose WebAuthn Signal API (#279). (c91ccc8e)
• FEAT(passkeys_web): add PRF extension support (#274). (4f63d7ed)
• FEAT(passkeys): add PRF support for iOS and Android (#263). (906a5069)
• DOCS: fix mistakes across package READMEs (#281). (d9b028ff)
• DOCS(passkeys): document the PRF extension (#275). (ff009bad)

• DOCS(passkeys): document Android Digital Asset Links setup (#256). (1777f145)

• FEAT: add PasskeyAuthenticatorInterface implemented by PasskeyAuthenticator (#247). (bcc028fc)

• Raises minimum Dart SDK to 3.4.0.

• Updates passkeys_darwin dependency to ^0.4.0 (adds Swift Package Manager support for iOS/macOS).

• Adds NoCreateOptionException handling for register flow. (Android)
• Updates passkeys_doctor dependency to ^1.3.0.
• Updates passkeys_android dependency to ^2.12.0.

• Fixes web plugin registration bug preventing automatic inclusion in Flutter's plugin registrant. (Web)

• Fixes Base64URL encoding truncation in Windows WebAuthn helper. (Windows)

• Fixes minor issues.

• Officially adds support for Windows.
• Fixes minor issues.

• Adds support for Windows.
• Adds JSON String serliazation to platform interfaces.

• Fixes Attestation not being passed to the register function. (Web)
• Passes Attestation and ResidentKey params to Security Key Register Handler. (iOS & macOS)
• Handles empty userID returned by authenticators. (iOS & macOS)

• Fixes conditional ui failing because of security keys. (iOS)

• Adds support for macOS.

• Fixes doctor syncing issues on Web. (Web)
• Makes authSelectionType optional. (Android, iOS & Web)

• FIX(passkeys_android): downgrade expected auth errors from Log.e to Log.d (#273). (51f9b540)
• FIX: improve error handling for excludeCredentials on iOS 26 and Android 16+ (#237). (f8abd40c)
• FEAT(passkeys): expose WebAuthn Signal API (#279). (c91ccc8e)
• FEAT(passkeys): add PRF support for iOS and Android (#263). (906a5069)

• Fixes UIWindow unwrapping issue when building iOS app with Flutter 3.35.0+. (iOS)

• hasPasskeySupport now verifies that the Android API level is 28 or higher. (Android)
• Fixed an issue that occurred when running the app on Android devices without Google Play Services. (Android)

• Fixes handling of optional transports field in registration response when authenticators don't provide it. (Android & iOS)

• REFACTOR: clean up analysis lints and refine auth exception types (#282). (60312bd3)
• REFACTOR: adopt Dart 3.9 features and migrate the example integration tests to patrol (#268). (7a1bd0de)
• FIX: resolve Dependabot security alerts in npm dependencies (#277). (ffe1d76f)
• FEAT(passkeys): expose WebAuthn Signal API (#279). (c91ccc8e)
• FEAT(passkeys_web): add PRF extension support (#274). (4f63d7ed)

• Added new PasskeyUnsuportedException to detect if OS is too outdated for passkeys. (Android)

• REFACTOR: adopt Dart 3.9 features and migrate the example integration tests to patrol (#268). (7a1bd0de)
• FEAT(passkeys): expose WebAuthn Signal API (#279). (c91ccc8e)
• FEAT(passkeys): add PRF support for iOS and Android (#263). (906a5069)

• Added passkeys_doctor plugin to help with debugging passkey and configuration issues.
• Added passkey JS bundle check to ensure the passkey JS bundle is loaded before initializing the PasskeyAuthenticator. (Web)

• Fixed a bug where an empty userHandle returned by authenticate was not being handled correctly. (Android)

• Fixed issue with Base64Url encoded userIDs not being decoded correctly. (iOS)
• Improved exception handling for MalformedBase64Url.

• FIX(passkeys_platform_interface): default optional authenticatorSelection fields (#254). (5f410f67)
• FEAT: add PasskeyAuthenticatorInterface implemented by PasskeyAuthenticator (#247). (bcc028fc)
• FEAT(passkeys_platform_interface): add windows availability type. (7f68c446)

2026-06-29

Changes

Packages with breaking changes:

• There are no breaking changes in this release.

Packages with other changes:

• passkeys - v2.21.0
• passkeys_platform_interface - v2.7.0

Packages with dependency updates only:

Packages listed below depend on other packages in this workspace that have had changes. Their versions have been incremented to bump the minimum dependency versions of the packages they depend upon in this project.

• passkeys_android - v2.12.1
• passkeys_darwin - v0.4.1
• passkeys_doctor - v1.5.0
• passkeys_web - v2.9.1
• passkeys_windows - v0.1.2
• corbado_auth - v3.7.2
• corbado_auth_firebase - v2.0.6

• Adds new exceptions to help with debugging Base64 encoding issues.

• Fixed a bug where hybrid transports causes login to fail. (Web)

• FEAT: add PasskeyAuthenticatorInterface implemented by PasskeyAuthenticator (#247). (bcc028fc)

• Fixed Exception when trying to register while authenticatorAttachment is null on Safari or IOS device. (Web)
• Added support for external security keys (Yubikey) on iOS. (iOS)
• Added handling for timeouts in authenticate and register methods. (Android)

• Added transports to RegistrationResponse
• Fixes hasPasskeySupport in getAvailability (Android)

• Introduced getAvailability API: Enables checking for passkey support across platforms.
• Updated androidx.credentials:credentials to version 1.3.0 for improved compatibility. (Android)
• Resolved an issue on iOS 16.0+ where a DeviceNotSupported exception was incorrectly thrown on supported devices. (iOS)
• Added hasPasskeySupport to AvailabilityType to verify passkey support on web platforms. (Web)

• Added support for WebAssembly (Wasm) (Web)
• Added handling for CreateCredentialNoCreateOptionException when no viable creation options were found (Android)

• Improved fallback handling in PasskeyAuthenticator.authenticate.
• Added support for preferImmediatelyAvailableCredentials on Android.
• Fixed requireResidentKey mapping for 1Password compatibility.

• Added support for AGP 8.0 and newer (Android)
• Resolves a crash issue on iOS devices running versions below 16.0. (iOS)

• Added support for preferImmediatelyAvailableCredentials (Android and iOS)
• Added getAvailability (Flutter web only)

• Bump version of passkeys_web and corbado_frontend_api_client
• Removed dependencies to openapi_generator_annotations and openapi_generator

• REFACTOR: clean up analysis lints and refine auth exception types (#282). (60312bd3)
• REFACTOR: adopt Dart 3.9 features and migrate the example integration tests to patrol (#268). (7a1bd0de)
• FIX: resolve Dependabot security alerts in npm dependencies (#277). (ffe1d76f)
• FIX(corbado_auth_firebase): repair compile error and resolve analyzer issues (#253). (d22c2a74)
• DOCS: Remove comment about corbado_auth_firebase being broken (#272). (6a41dff7)

• Added NoCredentialsAvailableException to indicate that no credentials are available during a login (android)

• Bump version of passkeys_ios

• Bump version of passkeys_ios (make excludeCredentials only available for iOS 17.4 and above)

• Bump version of passkeys_android (proguard file is no longer needed)

• Map excludeCredentials error to typed exception

• Added excludeCredentials support

• Update docs

• Update docs

• Stable release for v2
• Added flutter_web support
• Updated conditional UI support for iOS (it is now triggered from the iOS keyboard)
• Updated the example to showcase conditional UI
• Removed the RelyingPartyServer interface and the Corbado implementation of it (this is now part of the corbado_auth package)
• Fix: Cancel any pending authenticator operation before register/login calls
• BREAKING CHANGE: Parameters of "authenticateWithAutocompletion" have changed
• BREAKING CHANGE: Removed getFacetID (no longer needed)
• BREAKING CHANGE: For conditional UI on iOS you now need to set autofillHints: [AutofillHints.username] for the TextField

• Bump version of passkey_ios (fix userHandle issue)

• Bump version of passkey_ios

• Added flutter_web support
• Updated conditional UI support for iOS (it is now triggered from the iOS keyboard)
• Updated the example to showcase conditional UI
• Removed the RelyingPartyServer interface and the Corbado implementation of it (this is now part of the corbado_auth package)
• Fix: Cancel any pending authenticator operation before register/login calls
• BREAKING CHANGE: Parameters of "authenticateWithAutocompletion" have changed
• BREAKING CHANGE: Removed getFacetID (no longer needed)
• BREAKING CHANGE: For conditional UI on iOS you now need to set autofillHints: [AutofillHints.username] for the TextField

• Bump version for passkeys_android

• Bump versions for passkeys_ios, passkeys_android and passkeys_platform_interface

• Corbado: Deprecate the customDomain setting (this does not have to be configured to production projects)
• Corbado: Added new exception type (PasskeyAlreadyExistsException)
• Fix: Make sure that exceptions are awaited within the authenticator

• Improved exception handling for Android and iOS.

• Added autocomplete to sign in (authenticateWithAutocompletion).

• Added userHandle to AuthenticateResponseType.

• Fixed bug that happens when executing the Android example.
• Activate alternate mode for iOS (entitlements).

• Improved docs.

• Improved docs.
• Simplified example.
• Bump iOS version.

• Better comments. Stable release.

• Update image links in docs.

• Initial open source release.