Support WhatsApp passkey flow when linking device with QR code or pairing code

[dioneiserino]

Summary

WhatsApp is now requiring a passkey flow when linking a device. WAHA exposes QR code and pairing code flows, but both get stuck because the WhatsApp mobile app asks the user to continue on WhatsApp Web and complete passkey verification.

Environment

• WAHA image: devlikeapro/waha:gows
• Engine: GOWS
• Auth methods tested:
  • QR Code
  • Pairing code via POST /api/{session}/auth/request-code
• WhatsApp mobile app: Android
• WAHA session status after starting: SCAN_QR_CODE

What happens

When scanning the QR code, WhatsApp accepts the QR initially, but then shows:

Continue on WhatsApp Web
Keep app open on both devices. You may need to scan another QR code to use your Passkey.

When deleting the passkey and trying again, WhatsApp shows:

Create a passkey to log in
For security reasons, your account needs a passkey to link devices

The same requirement appears when using the pairing code flow.

Expected behavior

WAHA should either:

• support this new passkey continuation flow,
• expose a way for the user to complete the passkey step,
• document which engines support it,
• or clearly document that WhatsApp accounts requiring passkeys cannot currently be linked.

Steps to reproduce

1. Start a new WAHA session.
2. Get QR code for the session.
3. Scan the QR code using WhatsApp mobile app.
4. WhatsApp asks to continue on WhatsApp Web for passkey verification.
5. Session does not complete in WAHA.

Alternative:

1. Start a new WAHA session.
2. Call POST /api/{session}/auth/request-code with the phone number.
3. Enter the pairing code in WhatsApp.
4. WhatsApp still requires passkey before linking the device.
5. Session does not complete in WAHA.

Additional context

The same WhatsApp account can be linked successfully using the official WhatsApp Web flow, because the user can complete passkey verification in the browser.

The problem is that with WAHA, especially GOWS, there is no visible/interactable WhatsApp Web screen where the user can complete the passkey step.

Could you confirm whether this passkey flow is supported by any WAHA engine, such as WEBJS or WPP, or whether it is currently unsupported?

[romeumc]

+1

[stormdust]

+1

[exclusiveticsc-lab]

+1

[digaodfreitas]

+1

[WilliamSantos96]

+1

[brunocicom]

+1

[joaoAPina]

+1

[olavomachadoshibata]

+1

[vhiperdev]

+1

[higorrezend]

+1

[GabSouzaDev]

+1

[SirGabreu]

+1

[carlossouza-algoricca]

+1