HIVE phone test

Throwaway developer page for the owners. It talks to nothing, stores nothing, holds no secrets. Passkeys it creates are test passkeys: delete them afterwards.

This page

Origin: ...
rp id used: ...
User agent: ...
Telegram: ...
Secure context: ...

Capabilities

Tester note

Phone, OS version, browser (goes in the copied results header; kept only in this page)

Last result

Nothing run yet.

A and B: create

A: run this inside the Telegram Mini App. B: run it in the phone browser.

B (fallback link). Open this page in a new tab

C: use the passkey

The first needs a create in this page first (the id is kept in memory only). The second asks the phone to offer any passkey it has for this rp id.

D: back to Telegram

F: passkey info

Shows only public facts (id length, transports, attachment, flags, counter). Never a key or a signature. Also write down where the passkey was stored (iCloud Keychain, Google Password Manager, other) and whether a second device can use it through the cross-device QR prompt.

G: hostile conditions

G1: turn the phone screen lock off, then tap the button below. Does create still work?
G2: turn airplane mode on, then tap the second button. What error?
G3: tap the third button and cancel the prompt. What error text?

Remember to turn the screen lock and airplane mode back on afterwards.

Results

One row per attempt. Stays in this page only; reloading the page empties it. Copy it and send it back.