Google introduced WebAuthn https://developers.google.com/web/updates/2018/05/webauthn two years back.
Is it possible to accurately identify the finger that a user registered or verified?
For instance, the server could not only obtain the public key but also receive a unique random number associated with the finger that the user registered. This would prevent multiple people from using the same device to authenticate for one user ID.