This is a demo application of how to register and authenticate a user with the Thinbus Secure Remote Password (SRP SRP6a) library thinbus-srp
.
To get the code either clone the repo or to install the latest npm release locally with the following command:
npm v thinbus-srp-tester dist.tarball | xargs curl | tar -xvz
cd package
To run it:
npm start
Then open a browser at http://localhost:8080/
When you authenticate (after you have registered) both the browser and the server with console.log
a line such as:
shared key: aa8942427a348b8ed3386df47458feb2b2eef9a9fe9e121d2a41fa2d60994750
That log line is the strong session key K
as described on the SRP design page. This can be used for follow on cryptography such as HMAC signing of JWT web tokens using HS256.