feat: add settings for limiting what passkeys can be used (#1662)

Co-authored-by: Alessandro (Ale) Segala <43508+ItalyPaleAle@users.noreply.github.com>

backend/internal/apperror/constructors.go

@@ -122,6 +122,10 @@ func PasskeyUserVerificationRequired(cause error) *Error {
 	return Wrap(cause, CodePasskeyUserVerificationRequired, http.StatusBadRequest, "Your passkey couldn't verify you. If you're using a security key, configure a FIDO2 PIN and try again")
 }
 
+func SyncedPasskeyNotAllowed() *Error {
+	return New(CodeSyncedPasskeyNotAllowed, http.StatusBadRequest, "Synced passkeys are not allowed")
+}
+
 func ReservedClaim(key string) *Error {
 	return New(CodeReservedClaim, http.StatusBadRequest, fmt.Sprintf("Claim %s is reserved and can't be used", key)).
 		WithDetail("key", key).

backend/internal/apperror/error.go

@@ -26,6 +26,7 @@ const (
 	CodeInvalidWebAuthnResponse         Code = "invalid_webauthn_response"
 	CodeWebAuthnAuthenticationFailed    Code = "webauthn_authentication_failed"
 	CodePasskeyUserVerificationRequired Code = "passkey_user_verification_required"
+	CodeSyncedPasskeyNotAllowed         Code = "synced_passkey_not_allowed"
 	CodeInvalidWebAuthnSession          Code = "invalid_webauthn_session"
 	CodeUserNotFound                    Code = "user_not_found"
 	CodeUserDisabled                    Code = "user_disabled"