Skip to content

fix(mosaic): support second-factor passkeys in reverification - #10570

Draft
austincalvelage wants to merge 2 commits into
mainfrom
austin/core-4060-second-factor-passkeys
Draft

austincalvelage wants to merge 2 commits into
mainfrom
austin/core-4060-second-factor-passkeys

Conversation

@austincalvelage

@austincalvelage austincalvelage commented Nov 2, 2026 •

Copy link
Copy Markdown
Member

Description

Fixes CORE-4060.

Mosaic was missing the option to use a passkey for the second verification step. This adds it and makes it the first choice when the account and browser support it, just like the old UI. Users can still choose another method.

The screenshots use the same test account setup. Both method menus are opened from the authenticator step.

View Before After
Default second factor Authenticator is the default Passkey is the default
Alternatives from authenticator Only SMS is offered Passkey and SMS are offered

Checklist

  • Relevant tests run as expected: 75 reverification Chromium tests passed, with 1 preexisting TODO.
  • pnpm build runs as expected.
  • Mosaic typecheck, lint, and formatting pass.
  • (If applicable) JSDoc comments have been added or updated for any package exports
  • (If applicable) Documentation has been updated

Type of change

  • 🐛 Bug fix
  • 🌟 New feature
  • 🔨 Breaking change
  • 📖 Refactoring / dependency upgrade / documentation
  • other:

@vercel

vercel Bot commented Nov 2, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
clerk-js-sandbox Ready Ready Preview Nov 2, 2026 5:31am UTC
swingset Ready Ready Preview Nov 2, 2026 5:31am UTC

Request Review

@changeset-bot

changeset-bot Bot commented Nov 2, 2026 •

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 0816752

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 2 packages
Name Type
@clerk/mosaic Patch
@clerk/swingset Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@coderabbitai

coderabbitai Bot commented Nov 2, 2026

Copy link
Copy Markdown
Contributor

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

  • Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

@pkg-pr-new

pkg-pr-new Bot commented Nov 2, 2026 •

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@10570

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@10570

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@10570

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@10570

@clerk/electron

npm i https://pkg.pr.new/@clerk/electron@10570

@clerk/electron-passkeys

npm i https://pkg.pr.new/@clerk/electron-passkeys@10570

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@10570

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@10570

@clerk/expo-biometrics

npm i https://pkg.pr.new/@clerk/expo-biometrics@10570

@clerk/expo-google-signin

npm i https://pkg.pr.new/@clerk/expo-google-signin@10570

@clerk/expo-native-components

npm i https://pkg.pr.new/@clerk/expo-native-components@10570

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@10570

@clerk/express

npm i https://pkg.pr.new/@clerk/express@10570

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@10570

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@10570

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@10570

@clerk/mosaic

npm i https://pkg.pr.new/@clerk/mosaic@10570

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@10570

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@10570

@clerk/react

npm i https://pkg.pr.new/@clerk/react@10570

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@10570

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@10570

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@10570

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@10570

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@10570

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@10570

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@10570

commit: 0816752

Cover a passkey-only second factor without WebAuthn.

This branch was successfully deployed

2 active deployments
Preview – swingset — 0816752a Deployed Nov 2, 2026 by vercel[bot]
Preview – clerk-js-sandbox — 0816752a Deployed Nov 2, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant