webauthn-minimal

Minimal go implementation of a Webauthn L2 relying party (by arianvp)

Webauthn-minimal Alternatives

Similar projects and alternatives to webauthn-minimal

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better webauthn-minimal alternative or higher similarity.

webauthn-minimal reviews and mentions

Posts with mentions or reviews of webauthn-minimal. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-01-16.
  • You shouldn't have your crypto designed by a CEO
    7 projects | news.ycombinator.com | 16 Jan 2022
    FWIW if you don't care about attestation, Webauthn-L2 has client-side helper functions like getPublicKey() that allow you to do the handshake without parsing any CBOR https://www.w3.org/TR/webauthn-2/#sctn-public-key-easy

    If you want to check attestation you still need to parse CBOR (and whatever attestation format is inside.)

    I used this for a minimal webauthn implementation which is under 300 LoC https://github.com/arianvp/webauthn-minimal (WIP)

    However only Chrome seems to implement the L2 spec so far. It feels like Webauthn is basically abandoned on Mozilla side of things as they still haven't finished implementing L1 (It's missing all the CTAP2 stuff) whilst it has been out for more than a year. And there have barely been any Webauthn-related commits in the past years.

    But yeh; in general webauthn is a design-by-committee dumpster fire; unfortunately.

Stats

Basic webauthn-minimal repo stats
1
3
0.0
over 1 year ago

arianvp/webauthn-minimal is an open source project licensed under Apache License 2.0 which is an OSI approved license.

The primary programming language of webauthn-minimal is Go.


Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com