robur/webauthn
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
An implementation of webauthn in OCaml.
20 commits 3 branches 2 tags 147 KiB
OCaml 92%
JavaScript 6.9%
Shell 1.1%
Find a file
Reynir Björnsson 9e8f765703 reject noncanonical CTAP2 CBOR encodings
2021-10-08 18:49:18 +02:00
bin support U2F transport extension extraction from certificate 2021-10-07 09:57:51 +00:00
cbor reject noncanonical CTAP2 CBOR encodings 2021-10-08 18:49:18 +02:00
flash_message WIP 2021-09-28 11:30:14 +00:00
src support U2F transport extension extraction from certificate 2021-10-07 09:57:51 +00:00
CHANGES.md works as initial version 2021-09-29 14:34:09 +00:00
dune-project dune-project: disable formatting 2021-10-07 10:02:03 +00:00
LICENSE.md works as initial version 2021-09-29 14:34:09 +00:00
README.md documentation 2021-10-06 11:57:42 +00:00
webauthn.opam documentation 2021-10-06 11:57:42 +00:00

README.md

WebAuthn - authenticating users to services using public key cryptography

WebAuthn is a web standard published by the W3C. Its goal is to standardize an interfacefor authenticating users to web-based applications and services using public key cryptography. Modern web browsers support WebAuthn functionality.

WebAuthn provides two funcitons: register and authenticate. Usually the public and private keypair is stored on an external token (Yuikey etc.) or part of the platform (TPM). After the public key is registered, it can be used to authenticate to the same service.

This module does not preserve a database of registered public keys, their credential ID, usernames and pending challenges - instead this data must be stored by a client of this API in a database or other persistent storage.

WebAuthn specification at W3C

A basic demonstration server is provided (bin/webauthn_demo), running at webauthn-demo.robur.coop.

Documentation

API documentation is available online.

Installation

opam install webauthn will install this library.