{"repo":"NousResearch/hermes-agent","public_id":"42448","display_label":"Desktop OIDC sign-in via system browser for passkeys","summary":"These items address a limitation where desktop app WebViews block WebAuthn/passkey/Touch ID prompts during OIDC login, proposing a system-browser-based flow with PKCE (RFC 8252) as the solution.","subsystem":"apps/desktop","counts":{"members":3,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":1,"attempt_prs":1},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":67920,"merged_at":"2026-07-22T13:50:51+00:00"},"resolution":{"state":"unresolved","by":null},"freshness":{"state":"verified","last_verified_at":"2026-07-22T13:50:51+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[{"issue_number":42448,"pr_number":67920,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false,"pr_merged_at":"2026-07-22T13:50:51+00:00"}],"members":[{"kind":"issue","number":42448,"title":"[Feature]: Hermes Desktop OIDC Login window fails to trigger WebAuthn / Passkey / Touch ID popups","url":null,"state":"closed"},{"kind":"pr","number":46554,"title":"feat(desktop): system-browser OIDC sign-in (passkeys / WebAuthn / Touch ID)","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"4d23b2238","number":0},{"kind":"pr","value":"#67920","number":67920},{"kind":"pr","value":"#42448","number":42448}],"category":"superseded_by_pr","implication":"superseded"},"merged":false},{"kind":"pr","number":67920,"title":"feat(dashboard-auth): RFC 8252 native desktop sign-in (system browser + PKCE, no webview/cookies)","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["apps/desktop/electron/main.ts","apps/desktop/electron/native-auth-decisions.test.ts","apps/desktop/electron/native-auth-decisions.ts","apps/desktop/electron/native-oauth-login.test.ts","apps/desktop/electron/native-oauth-login.ts","apps/desktop/electron/native-oauth.test.ts","apps/desktop/electron/native-oauth.ts","hermes_cli/dashboard_auth/audit.py","hermes_cli/dashboard_auth/middleware.py","hermes_cli/dashboard_auth/native_flow.py","hermes_cli/dashboard_auth/routes.py","hermes_cli/web_server.py","tests/hermes_cli/test_dashboard_auth_native_flow.py","web/src/lib/api.ts","website/docs/guides/desktop-native-signin.md"]}],"trust":{"default_tier":"verified","includes_suggested":false}}