NousResearch/hermes-agent

Desktop OIDC sign-in via system browser for passkeys

Cluster 42448 · apps/desktop. Data as of 2026-10-28 11:56 UTC

Nothing open on GitHub. Fix merged in #67920 on 22 Jul 2026. Check it covers your case.

open issues

open PRs

items grouped

Known?: Yes. 3 related items grouped here, 1 issue already closed.
Fix event: A fix was merged to main in PR #67920. Check it covers your case. No release data is tracked.
Tracker: The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open: Nothing open on GitHub.

Next step: read #67920, then check it covers your case.

Read #67920 Pick up a Lab task

These items address a limitation where desktop app WebViews block WebAuthn/passkey/Touch ID prompts during OIDC login, proposing a system-browser-based flow with PKCE (RFC 8252) as the solution.

Open issues0

No open issues.

Open PRs0

No open pull requests.

Fixes on record

Merged to main. A stamp counts the issues a fix is linked to.

#67920 feat(dashboard-auth): RFC 8252 native desktop sign-in (system browser + PKCE, no webview/cookies)

merged to main

files: apps/desktop/electron/main.ts, apps/desktop/electron/native-auth-decisions.test.ts, apps/desktop/electron/native-auth-decisions.ts, apps/desktop/electron/native-oauth-login.test.ts, apps/desktop/electron/native-oauth-login.ts, apps/desktop/electron/native-oauth.test.ts, apps/desktop/electron/native-oauth.ts, hermes_cli/dashboard_auth/audit.py, hermes_cli/dashboard_auth/middleware.py, hermes_cli/dashboard_auth/native_flow.py, hermes_cli/dashboard_auth/routes.py, hermes_cli/web_server.py, tests/hermes_cli/test_dashboard_auth_native_flow.py, web/src/lib/api.ts, website/docs/guides/desktop-native-signin.md

1 PR closed without merging

From the close comments: superseded by another PR 1

#46554 feat(desktop): system-browser OIDC sign-in (passkeys / WebAuthn / Touch ID) · superseded by another PR → 4d23b22, #67920, #42448

Closed issues · 1

Closed#42448[Feature]: Hermes Desktop OIDC Login window fails to trigger WebAuthn / Passkey / Touch ID popups

How this cluster was grouped

Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
Pairwise link density 0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem: apps/desktop
Merged PRs: #67920
Closed issues: 1
Attempts: 1 PR closed without merging
Fix link checked: 22 Jul 2026

For your agent

The same facts, typed.

cluster/42448.json
cluster/42448.md