Whooverse — Passkey-in-iframe test (chunk 4.5)
Discovery apparatus only. Tests whether a WebAuthn ceremony completes
in the host browser / LLM-chat iframe. No DB, no Mi onboarding, no
production behaviour — see itsmi for the real flow.
Active config
- rpId
- —
- rpName
- —
- origin
- —
- page origin
- —
- mode
- —
Register passkey
Authenticate
Iframe-host test: when this page renders inside an MCP-App iframe
(Claude / ChatGPT / Gemini), the buttons spawn a popup tab via
app.openLink() because WebAuthn is blocked by iframe
Permissions Policy. Chunk 4.5e popup-fallback design.