Passkeys topic
Passkeys are a form of passwordless user authentication for websites and apps, that is designed to provide a high level of security by leveraging public key infrastructure. Unlike passwords, no shared secret is exchanged between the user and a service. Instead, the public key is sent to the server, while the private key is stored in the user’s device.
To verify the user’s identity, users can use biometric data, such as a fingerprints or facial recognition, instead of relying on a user-generated password. This makes it much more difficult for attackers to gain unauthorized access to an account, as passkeys are two-factor-authentication (2FA) by default. Concisely, they avoid a range of password-based attacks, including phishing, by providing an additional layer of security.
webauthn-ruby
WebAuthn ruby server library ― Make your Ruby/Rails web server become a conformant WebAuthn Relying Party
hanko
Authentication and User Management solution for developers. Open source alternative to Clerk & Auth0.
SimpleWebAuthn
WebAuthn, Simplified. A collection of TypeScript-first libraries for simpler WebAuthn integration. Supports modern browsers, Node, Deno, and more.
awesome-webauthn
🔐 A curated list of awesome WebAuthn and Passkey resources
webauthn.io
The source code for webauthn.io, a demonstration of WebAuthn.
juri
WebAuthn example demo with full integration with Passkeys
apple-wwdc21-webauthn-example
Apple Passkey Demo with Hanko Authentication API, using WebAuthn
c2FmZQ
Securely encrypt, store, and share files, including but not limited to pictures and videos.
rollupid
Open Source and OIDC compliant digital identity for the private web
flutter-passkeys
Easily provide passkey authentication based on FIDO2 / WebAuthn for Flutter apps (iOS & Android) via a dedicated Flutter package