feature: a shell opens with one of the user's passkeys in place of the password and the TOTP code.

debian-package/debian/changelog

@@ -1,3 +1,17 @@
+vpn-router (0.36.0-1) unstable; urgency=medium
+
+  feature: a shell opens with one of the user's passkeys in place of the password and the TOTP code.
+
+  * POST /shell/passkey begins a proof for one of the signed-in user's own
+    passkeys, with user verification; POST /shell takes the browser's
+    answer as {"passkey": {"id", "credential"}} in place of the password
+    and the code, and gives the ticket of the shell.
+  * A passkey that is not accepted is refused with 403. The shell still
+    needs the user's TOTP enrolment, which its login session and sudo in
+    it need.
+
+ -- Slawomir Koszewski <slawek@koszewscy.waw.pl>  Thu, 29 Oct 2026 23:09:43 +0100
+
 vpn-router (0.35.2-2) unstable; urgency=medium
 
   update: the package is published for Ubuntu 26.04 (resolute) as well as 24.04 (noble).