Thunderbird Desktop passkeys support

[906230a3-69b0-4]

Thunderbird shall allow users to authenticate with passkeys (FIDO2/WebAuthn) as an alternative to traditional password‑based login for all supported email accounts (Google and Microsoft for example). 

[Jon]

Thanks for submitting an idea to the Mozilla Connect community! Your idea is now open to votes (aka kudos) and comments.

[loffa]

Hello,

My work has recently enforced sign in using WebAuthn for software using oauth2. I have used Thunderbird for all mails I have for a long time but are now unable to login. The OAuth flow allow me to enter user/pass but the WebAuthn step just waits for an action to happen and then does a timeout. It seems like the possibility to authenticate in this way do not work properly in Thunderbird.

I have tried to do the auth flow outside of the Thunderbird browser by copying the URL to Firefox (where I have my WebAuthn already set up) but it fails in the later steps where Thunderbird should receive the last redirect back to a localhost domain. If possible we should be able to delegate the auth flow to somewhere else and then get back into TB. This works with GCP client on terminal as an example.