Webauthn

توفر هذه المكتبة تنفيذاً من جانب الخادم لمعيار WebAuthn، مما يتيح للمطورين دمج المصادقة المتوافقة مع FIDO2 في التطبيقات. تعمل كمجموعة أدوات لإدارة البنية التحتية للمفتاح العام، مما يسمح للأنظمة بالتحقق من هوية المستخدم من خلال توقيعات تشفير مدعومة بالأجهزة بدلاً من كلمات المرور التقليدية.

يسهل إطار العمل دورة حياة الاعتماد بأكملها، من التسجيل الأولي لمفاتيح الأمان وأجهزة القياسات الحيوية إلى التحقق المستمر من محاولات المصادقة. يتعامل مع إنشاء والتحقق من مصافحات التحدي والاستجابة، مما يضمن حماية كل حدث تسجيل دخول ضد هجمات إعادة التشغيل والوصول غير المصرح به.

بعيداً عن التحقق من الهوية الأساسي، تدعم المكتبة تنفيذ تدفقات المصادقة متعددة العوامل وتوفر إعدادات قابلة للتكوين لضبط متطلبات الأمان. تعالج بيانات المصادقة باستخدام تسلسل ثنائي موحد وتنسيقات حمولة للحفاظ على قابلية التشغيل البيني مع بنية أمان الويب الحالية.

Features

WebAuthn Server Libraries - Implements FIDO2 authentication to verify hardware keys and biometric devices during user login and registration.
Hardware Key Signature Verification - Validates digital signatures against public keys stored on hardware security keys to confirm user authenticity.
Passwordless Authentication - Enables passwordless logins using hardware security keys and biometric sensors to improve account security.
Challenge-Response Verifications - Generates and validates time-sensitive cryptographic challenges to prevent replay attacks and ensure session integrity.
Credential Registrations - Binds new hardware keys and biometric devices to user accounts by validating cryptographic registration responses.
FIDO2 Server Frameworks - Provides a backend toolkit for verifying FIDO2 cryptographic assertions and attestation statements.
User Authentication Systems - Verifies user identity by validating signed responses from hardware authenticators to grant access without passwords.
Credential Lifecycle Management - Tracks metadata and public key associations for registered authenticators throughout their lifecycle.
Cryptographic Identity Verification - Protects against unauthorized access and phishing by validating user identity through cryptographic handshakes.
Multi-Factor Authentication - Supports multi-factor authentication flows by requiring physical device verification during the login process.
Credential Management - Manages the registration and lifecycle of cryptographic credentials to ensure only authorized devices access accounts.

سجل النجوم

duo-labswebauthnArchived

Name: duo-labs/webauthn
Author: duo-labs

View on GitHub

1,032 نجوم158 تفرعاتGoBSD-3-Clause6 مشاهداتwebauthn.io

Webauthn

Features

WebAuthn Server Libraries - Implements FIDO2 authentication to verify hardware keys and biometric devices during user login and registration.
Hardware Key Signature Verification - Validates digital signatures against public keys stored on hardware security keys to confirm user authenticity.
Passwordless Authentication - Enables passwordless logins using hardware security keys and biometric sensors to improve account security.
Challenge-Response Verifications - Generates and validates time-sensitive cryptographic challenges to prevent replay attacks and ensure session integrity.
Credential Registrations - Binds new hardware keys and biometric devices to user accounts by validating cryptographic registration responses.
FIDO2 Server Frameworks - Provides a backend toolkit for verifying FIDO2 cryptographic assertions and attestation statements.
User Authentication Systems - Verifies user identity by validating signed responses from hardware authenticators to grant access without passwords.
Credential Lifecycle Management - Tracks metadata and public key associations for registered authenticators throughout their lifecycle.
Cryptographic Identity Verification - Protects against unauthorized access and phishing by validating user identity through cryptographic handshakes.
Multi-Factor Authentication - Supports multi-factor authentication flows by requiring physical device verification during the login process.
Credential Management - Manages the registration and lifecycle of cryptographic credentials to ensure only authorized devices access accounts.

بدائل مفتوحة المصدر لـ Webauthn

مشاريع مفتوحة المصدر مشابهة، مرتبة حسب عدد الميزات المشتركة مع Webauthn.

go-webauthn/webauthn
go-webauthn/webauthn
1,284عرض على GitHub
This library provides a backend framework for implementing FIDO2-compliant authentication and passwordless login flows in Go applications. It serves as a server-side toolkit for managing hardware-backed identity verification, enabling developers to integrate secure, browser-based authentication protocols that utilize security keys and biometric sensors. The project distinguishes itself by offering comprehensive tools for credential lifecycle management and hardware attestation. It handles the registration and storage of public key metadata while enforcing strict security requirements, such as
Goctap2fido2go
عرض على GitHub1,284
teamhanko/hanko
teamhanko/hanko
8,801عرض على GitHub
Hanko is an open-source identity provider and customer identity and access management system. It serves as a passkey authentication service and an OAuth and SAML SSO gateway, allowing applications to authenticate users and issue tokens via standard identity protocols. The project distinguishes itself through a strong focus on passwordless access using WebAuthn-based passkeys and email-based passcodes. It provides framework-agnostic authentication interfaces as customizable web components that can be embedded directly into web applications to handle login, registration, and profile management.
Go2faauthenticationciam
عرض على GitHub8,801
aarondl/authboss
aarondl/authboss
4,189عرض على GitHub
Authboss is a modular HTTP authentication framework for managing user identity, session lifecycles, and password security. It provides a system of identity access middleware to control route access and synchronize user identity across requests via standard web protocols. The framework is distinguished by a pluggable architecture that allows for the registration of independent modules to extend identity logic. It utilizes a hook-based event system to execute custom business logic during authentication state changes and employs a selector-verifier token pattern to protect against timing attacks
Go
عرض على GitHub4,189

مجموعات مختارة تضم Webauthn

مجموعات منسقة بعناية يظهر فيها Webauthn.

مكتبات المصادقة بدون كلمة مرور و Passkey

الأسئلة الشائعة

ما هي وظيفة duo-labs/webauthn؟

ما هي الميزات الرئيسية لـ duo-labs/webauthn؟

الميزات الرئيسية لـ duo-labs/webauthn هي: WebAuthn Server Libraries, Hardware Key Signature Verification, Passwordless Authentication, Challenge-Response Verifications, Credential Registrations, FIDO2 Server Frameworks, User Authentication Systems, Credential Lifecycle Management.

ما هي البدائل مفتوحة المصدر لـ duo-labs/webauthn؟

تشمل البدائل مفتوحة المصدر لـ duo-labs/webauthn: go-webauthn/webauthn — This library provides a backend framework for implementing FIDO2-compliant authentication and passwordless login flows… teamhanko/hanko — Hanko is an open-source identity provider and customer identity and access management system. It serves as a passkey… aarondl/authboss — Authboss is a modular HTTP authentication framework for managing user identity, session lifecycles, and password… bitwarden/server — This project provides a comprehensive, self-hosted platform for zero-knowledge credential management and enterprise… supabase/realtime — Realtime is a real-time data distribution and synchronization engine that enables applications to stream database… tinode/chat — This project is a self-hosted, cross-platform instant messaging platform featuring a Go backend and a protobuf-based…