🔐 Passkey Authentication

# Cài đặt Laragear WebAuthn
composer require laragear/webauthn

# Publish cấu hình và migration
php artisan vendor:publish --provider="Laragear\WebAuthn\WebAuthnServiceProvider"

# Chạy migration
php artisan migrate

<?php

namespace App\Models;

use Laragear\WebAuthn\Contracts\WebAuthnAuthenticatable;
use Laragear\WebAuthn\WebAuthnAuthentication;

class User extends Authenticatable implements WebAuthnAuthenticatable
{
    use WebAuthnAuthentication;
    
    // ... existing code
}

// routes/web.php
use Laragear\WebAuthn\Http\Routes as WebAuthnRoutes;
use Illuminate\Foundation\Http\Middleware\VerifyCsrfToken;

// Đăng ký WebAuthn routes
WebAuthnRoutes::register()->withoutMiddleware(VerifyCsrfToken::class);

// Đăng ký Passkey sau khi đã login
document.getElementById('passkey-register').addEventListener('click', async function() {
    try {
        const { credential, success, error } = await Webpass.attest(
            '/webauthn/register/options',  // Endpoint lấy options
            '/webauthn/register'           // Endpoint gửi credential
        );

        if (success) {
            alert('Passkey đã được thêm thành công!');
        } else {
            alert(error || 'Không thể thêm Passkey.');
        }
    } catch (err) {
        alert(err.message);
    }
});

document.getElementById('passkey-login').addEventListener('click', async function() {
    try {
        const email = document.getElementById('login-email').value;
        
        const optionsUrl = '/webauthn/login/options' + 
            (email ? `?email=${encodeURIComponent(email)}` : '');
        
        const { user, success, error } = await Webpass.assert(
            optionsUrl,
            '/webauthn/login'
        );

        if (success) {
            window.location.href = '/dashboard';
        } else {
            alert(error || 'Đăng nhập thất bại.');
        }
    } catch (err) {
        alert(err.message);
    }
});