Passkeys and PKCE
WebAuthn passkey sign-in with progressive enrollment, plus PKCE support with a per-client requirement flag.
Added
4- AuthenticationPasskey sign-in with WebAuthn, including progressive enrollment so existing accounts can add one without a migration.
- AuthenticationPasskeys are labelled with the app domain, so someone who belongs to several organizations can tell theirs apart.
- AuthenticationPKCE (RFC 7636), with a per-client flag to require it.
- BillingA pricing page driven by live plan data, with plan categories and FAQs, rather than hard-coded tiers.