WebAuthn Awesome

A curated list of awesome WebAuthn/FIDO2 resources

• WebAuthn Awesome

  • Demos

• Resources

  • Tutorials
  • Articles
  • Slides
  • Books

• Contributions guidelines

• License

Demos

• FIDO WebAuthn Demo - FIDO Alliance WebAuthn Demo
• DUO WebAuthn Demo - A Demonstration of the WebAuthn Specification https://webauthn.io/
• Mastercard WebAuthn Demo - Webauthn/FIDO2 Relying Party Reference Implementation
• Adam Powers WebAuthn Demo - A set of FIDO2 / WebAuthn demo servers. Live: https://webauthn.org
• Anders Åberg .NET library for FIDO2 - A working implementation library + demo for FIDO2 and WebAuthn using .NET. https://fido2.azurewebsites.net/
• Auth0 WebAuthn Demo - Probably the best WebAuthn flow demo
• Google WebAuthn Demo - An example Java Relying Party implementation of the WebAuthn specification. https://webauthndemo.appspot.com
• Yubico WebAuthn Demo - Provides technical details of WebAuthn data flow and includes a playground to test a U2F/FIDO2 key as a second factor or passwordless key.
• jcjones WebAuthn.bin.coffee DEMO - A simple site for testing Web Authentication https://webauthn.bin.coffee/
• FIDO Alliance: Interop WebApp - As simple test app for FIDO2 servers

Server Libs

• DUO: A WebAuthn Python module - PyWebAuthn is a Python module which can be used to handle WebAuthn registration and assertion.
• Yubico: Java WebAuthn Server - Server-side Web Authentication library for Java.
• Adam Powers: FIDO2 lib
• Anders Åberg: .NET library for FIDO2 - A working implementation library + demo for fido2 and WebAuthn using .NET
• Nov Matake: Ruby WebAuthn Lib - W3C Web Authentication API (a.k.a. WebAuthN / FIDO 2.0) RP library in Ruby
• Yoshikazu Nojima: WebAuthn4J - A portable Java library for WebAuthn server side verification
• Yubico: python-fido2 - FIDO2 Client and Server lib
• cedarcode: WebAuthn Ruby - Ruby implementation of a WebAuthn Relying Party
• Tangui: Wax - Elixir implementation of WebAuthn
• Suby Raman: redux-webauthn - Redux middleware for registering and authenticating users with the Web Authentication API (FIDO2).
• StrongKey: FIDO-Server - StrongKey's FIDO Server, Community Edition is an open-source solution designed for DIY coders who want password-less FIDO2 logins for any application.

Client Libs

• Yubico: python-fido2 - Client Lib to talk to a hardware authenticators over USB HID
• Yubico: libfido2 - C client library and command-line tools to communicate with a FIDO device over USB, and to verify attestation and assertion signatures.
• Lyo Kato: iOS Webauthn Kit - This library provides you a way to handle W3C Web Authentication API (a.k.a. WebAuthN / FIDO 2.0) easily.

Hardware

• Conor Patrick: U2F Zero - U2F Zero is an open source U2F token for 2 factor authentication.
• SoloKeys - Solo is an open source FIDO2 security key, and you can get one at solokeys.com.

Resources

Tutorials

• Introduction to WebAuthn API
• FIDO WebAuthn Workshop
• WebAuthn Guide: DUOSEC

Articles

• Yuriy Ackermann: WebAuthn/FIDO2 Blog
• Auth0: Introduction to Web Authentication
• Watahani のブログ - 技術メモとか料理ネタとか
• Eiji Kitamura: Credential Management API and best practices
• FIDO блог Аккерманн Юрия на Хабре - Статьи о FIDO на русском
• Ken¥d のブログ - セキュリティ, Android, Cloud Nativeについてまとめるブログです
• gebo: CTAP2 お勉強メモ ブログ
• 上野博司/super_reader: Yahoo! JAPANでの生体認証の取り組み（FIDO2サーバーの仕組みについて
• パスワードレス認証WebAuthnの勘所と対応状況

Slides

• FIDO Alliance: WebAuthn Overview
• Implementing FIDO on Android Side using com.google.android.gms.fido.fido2

Books

• Getting started with WebAuthn - コミックマーケット95で頒布した同人誌「Getting started with WebAuthn」の電子版(PDF)です。

Other

• Adam Powers: WebAuthn Logos - An awesome logos by Adam Powers

License

This work is licensed under a Creative Commons Attribution 4.0 International License.