Skip to content

Latest commit

 

History

History
48 lines (39 loc) · 2.18 KB

readme.md

File metadata and controls

48 lines (39 loc) · 2.18 KB
Raw

WebAuthn + Pocketbase Example

This repository contains a proof-of-concept implementation of the user registration and authentication flow described in the webauthn standard. Useful resources can be found here:

This implementation uses the Webauthn/FIDO2 library in golang which is complemented by some helper functions on the javascript side until browser support is widespread.

Setup

  1. Clone the repository
  2. Spin up the pocketbase backend: 
    cd backend
go run . serve
  3. Open up a web browser and complete the initial setup at http://localhost:8090/_/.
  4. Go to the users collection and add to fields:
    1. text: webauthn_id_b64
    2. json: webauthn_credentials
  5. (Optional) Go edit the collection and disable all auth methods (password, oauth).
  6. In a seperate terminal install the prerequisites for the web frontend 
    cd app
npm install
  7. Spin up a development server for the web app 
    npm run dev
    or build the web app into the pb_public directory 
    npm run build
  8. Open up a web browser and point it to either localhost:5173 (dev server) or localhost:8090 (static) depending on the method you chose.
  9. Try it out!

Try it out

Once everything is setup, try to register a user by entering a username and clicking register. You'll be prompted to create a some credentials for this webpage. Confirm using your method of choice (e.g. biometrics or physical key). Now try to login by entering your username and and clicking login. Again, you'll be asked to identify yourself with the previously chosen authenticator. If everything goes well, the authentication token should have been printed to the console.