You have described, at a high level, passkeys.

Well, it's a fair question why Webauthn ended up so much more complicated, which has unquestionably been a hindrance to adoption.

	▲	crote an hour ago \| parent \| next [-]
		Because the various cloud providers want to lock you into their own proprietary ecosystem, of course. How else could they in the future force you to pay a subscription to be allowed to log in to any website?
	▲	drhagen 4 hours ago \| parent \| prev \| next [-]
		Admittedly, my experience comes from OAuth and Webauthn. I have yet to try to implement passkeys. My exposer to passkeys comes completely from long blog posts complaining about it.
	▲	cowlevel 3 hours ago \| parent \| prev [-]
		Design by committee