webauthn-skeleton

This is a working skeleton of a Node.js/Koa application with passwordless login (Web Authentication API, WebAuthN, FIDO2).

Main version (Koa/fido2-lib) live at https://56k.guru/webauthn Deno version (Deno/Opine/fido2-lib) live at https://56k.guru/webauthn-deno

Features

Tested with Windows Hello, Yubikey or Android lockscreen, more to come.
Supports adding more than one authentication method to the same account.
Supports transfering account to another device by a time limited one time link or QR-code.

Using Koa and fido2-lib

Versions

There are multiple versions of this demo available in different branches

Runtime	Server framework	Branch	Webauthn-lib	Live at
Node	Koa	main	fido2-lib	56k.guru/webauthn
Node	Express	server/express	fido2-lib	-
Deno	Opine	server/deno	fido2-lib	56k.guru/webauthn-deno

Getting it running

First clone this repo, then:

1. Install dependencies

npm install

2. Generate self signed certificate and keys (webauthn requires HTTPS)

I repeat, you need to generate keys, certificate and serve using https for webauthn to work

cd keys

openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -sha256 -days 365 -subj '/CN=localhost'
openssl genrsa -out key.pem
openssl req -new -key key.pem -out csr.pem
openssl x509 -req -days 9999 -in csr.pem -signkey key.pem -out cert.pem

rm csr.pem

cd ..

3. Start server

node app

4. Open browser

https://localhost:3000

Docker development build

docker build . --tag="hexagon/webauthn-skeleton"


sudo docker run \
  -d \
  --restart=always \
  -e WAS_ORIGIN="https://localhost:3000" \
  -e WAS_RPID="localhost" \
  -e WAS_BASE_URL="https://localhost:3000/" \
  -e WAS_BASE_URL="https://localhost:3000/orlikethisifservedfromasuburl" \
  -e WAS_RPNAME="WebAuthN Demo" \
  -e WAS_MODE="development" \
  -e WAS_PORT=3000 \
  --name webauthndemo \
  hexagon/webauthn-skeleton```

Hexagon / webauthn-skeleton

readme