GoTrue supports WebAuthn. Add it as a sign-in option on /login alongside magic link and OAuth. Enrol on first successful magic link sign-in if the user opts in.