Merge pull request #20047 from mozilla/FXA-13049

feat(settings): Add passkey to MFA scopes

Author: MagentaManifold

packages/fxa-auth-server/config/index.ts

@@ -2672,7 +2672,7 @@ const convictConf = convict({
       env: 'MFA__ENABLED',
     },
     actions: {
-      default: ['test', '2fa', 'email', 'recovery_key', 'password'],
+      default: ['test', '2fa', 'email', 'recovery_key', 'password', 'passkeys'],
       doc: 'Actions protected by MFA',
       format: Array,
       env: 'MFA__ACTIONS',

packages/fxa-settings/src/components/Settings/SubRow/index.tsx

@@ -463,12 +463,11 @@ export const PasskeySubRow = ({
       />
       {deleteModalRevealed && (
         <MfaGuard
-          // TODO: replace with actual required scope and reason when available
-          requiredScope="test"
+          requiredScope="passkeys"
           onDismissCallback={async () => {
             hideDeleteModal();
           }}
-          reason={MfaReason.test}
+          reason={MfaReason.removePasskey}
         >
           <Modal
             onDismiss={hideDeleteModal}

packages/fxa-settings/src/lib/types.ts

@@ -36,6 +36,9 @@ export enum MfaReason {
   createBackupCodes = 'create backup codes',
   createRecoveryKey = 'create recovery key',
   removeRecoveryKey = 'remove recovery key',
+  createPasskey = 'create passkey',
+  renamePasskey = 'rename passkey',
+  removePasskey = 'remove passkey',
   test = 'test',
 }
 
@@ -92,4 +95,10 @@ export type TotpInfo = {
   secret: string;
 };
 
-export type MfaScope = 'test' | '2fa' | 'email' | 'recovery_key' | 'password';
+export type MfaScope =
+  | 'test'
+  | '2fa'
+  | 'email'
+  | 'recovery_key'
+  | 'password'
+  | 'passkeys';