StrongKey FIDO Server (SKFS), Community Edition

README

PLEASE NOTE THE LOCATION OF THE API DOCS HAS CHANGED, AND IS NOW HERE.

Overview

The FIDO(R) Certified StrongKey FIDO Server (SKFS), Community Edition is an open-source solution designed for DIY coders who want passwordless FIDO2 logins for any application. Download the code and integrate it with your own web login, or study the OpenAPI documentation and contribute with your own code submissions.

The following links provide some background on FIDO, the FIDO Alliance, and FIDO2:

• FIDO Alliance Home
• What is FIDO?
• The FIDO2 Project

Documentation

For the latest version:

• Installation instructions: Download SKFS and get it running as a stand-alone server
  • Clustering instructions: Download SKFS and get it running as a cluster
  • Upgrade instructions: Upgrade SKFS to the latest version*
• Administration
  • Operations
  • Security
  • Policy
  • Testing
• Application Development
  • Registration and Authentication step-by-step breakdown with code examples
  • Two SKFS v3 API choices: REST and SOAP
• Usage: How users register and authenticate with SKFS
• Troubleshooting
  • Error messages
  • Known Issues
• Release Notes Starting with SKFS 4.3.x and moving forward

Showcase

Sample code is provided with a brief explanation of what each sample does:

• Demo Applications

  • Basic: A basic Java application demonstrating FIDO2 registration and authentication
  • FIDO Policy Demo: A few policies to use as launching points for your own

• Sample Apps

  • Basic: Basic Java sample application
  • PoC: Proof-of-concept Java application
  • SSO: FIDO-enabled sample applications demonstrating SSO
  • Android: FIDO-enabled sample Android application and Android client library to perform FIDO transactions
  • iOS: SKFS for iOS demonstrating Passkey and FIDO2

Sample Client

SKFS client offers examples of the various API calls using different available methods. Read the skfsclient docs for commands to test FIDO2 functionality against your sandbox.

The skfsclient uses a FIDO2 simulator instead of an actual authenticator to demonstrate the web services on the command line. Feel free to download the simulator source code for your own use.

API docs

Interactive OpenAPI documentation for SKFS

Contributing

If you would like to contribute to the SKFS, Community Edition project, please read CONTRIBUTING.md, then sign and return the Contributor License Agreement (CLA).

Archives

Older SKFS versions can be located here.

Licensing

This project is currently licensed under the GNU Lesser General Public License v2.1.

Bouncy Castle Federal Information Processing Standards (BC FIPS) is included with permission from the Legion of the Bouncy Castle, Inc. Source and other details for the module, as well as any updates, are available from the Legion's website at https://www.bouncycastle.org/fips-java.