Add well-known asset for Related Origin Requests

src/asset_util/src/lib.rs

@@ -387,6 +387,7 @@ lazy_static! {
         let mut map = HashMap::new();
         map.insert(Path::new(".well-known/ic-domains").to_owned(), (ContentType::JSON, ContentEncoding::Identity));
         map.insert(Path::new(".well-known/ii-alternative-origins").to_owned(), (ContentType::JSON, ContentEncoding::Identity));
+        map.insert(Path::new(".well-known/webauthn").to_owned(), (ContentType::JSON, ContentEncoding::Identity));
         map
     };
 }
@@ -645,6 +646,11 @@ fn should_return_correct_extension() {
             ContentType::JSON,
             ContentEncoding::Identity,
         ),
+        (
+            ".well-known/webauthn",
+            ContentType::JSON,
+            ContentEncoding::Identity,
+        ),
         (
             ".well-known/ii-alternative-origins",
             ContentType::JSON,

src/internet_identity/src/assets.rs

@@ -58,6 +58,16 @@ pub fn get_static_assets() -> Vec<Asset> {
         encoding: ContentEncoding::Identity,
         content_type: ContentType::OCTETSTREAM,
     });
+
+    // Required to share passkeys with the different domains.
+    // See https://web.dev/articles/webauthn-related-origin-requests#step_2_set_up_your_well-knownwebauthn_json_file_in_site-1
+    // Maximum of 5 labels. If we want to support more, we'll need to set them in the configuration.
+    assets.push(Asset {
+        url_path: "/.well-known/webauthn".to_string(),
+        content: b"{\"origins\":[\"https://beta.identity.ic0.app\",\"https://beta.identity.internetcomputer.org\",\"https://identity.internetcomputer.org\",\"https://identity.ic0.app\",\"https://identity.icp0.io\"]}".to_vec(),
+        encoding: ContentEncoding::Identity,
+        content_type: ContentType::OCTETSTREAM,
+    });
     assets
 }
 

src/internet_identity/tests/integration/http.rs

@@ -31,6 +31,7 @@ fn ii_canister_serves_http_assets() -> Result<(), CallError> {
         ("/", None),
         ("/index.js", Some("gzip")),
         ("/.well-known/ic-domains", None),
+        ("/.well-known/webauthn", None),
     ];
     let env = env();
     let canister_id = install_ii_canister(&env, II_WASM.clone());