On a freedombox running on raspberry pi, access via the usual domain name fails, and if I try via the local IPv4 address, here is what happens when I type the user name and the password (actually, I do a copy from the password manager) and click on “Login” (not “Log in with passkey”, that I never used):
I tried another user, the result is exactly the same. I tried via ssh, where I think it used to work, it says permission denied after I enter the password.
After removing the power and putting it back, it works normally. This freedombox only has nextcloud and I have not used it for a while. No clue what happened.
I had the same problem ? a couple of days ago and found out the reason to be:
Regards: peter
Reasons Passkeys Fail on.localDomains
HTTPS Requirement (Secure Context): Passkeys require a secure, encrypted connection (HTTPS). Localhost is considered a “secure context” by default, but custom .local domains typically require valid SSL/TLS certificates, which are harder to set up, causing browsers to block WebAuthn API calls.
Registrable Domain Restriction: The passkey (Relying Party ID) must be a registrable domain or a valid public suffix. .local is not a registrable domain suffix, which prevents passkeys from being properly bound to the website.
I did not try to use a passkey, I used the normal login button but got an error message referring to passkey, which looks like an incorrect behaviour to me.