Skip to content
BranchesTags

Latest commit

History

354 Commits

Folders and files

NameName
Last commit message
Last commit date
.github
.github
api
api
deploy
deploy
docs
docs
examples
examples
.gitattributes
.gitattributes
.gitignore
.gitignore
README.md
README.md

Repository files navigation

ContributorsForksStargazersIssuesApache-2.0


Logo

Passkey Relying Party Example

Sample backend application to demonstrate a relying party that supports passkeys. This example includes examples of the java-webauthn-server library, helper classes, code examples, best practices, and API schemas.
Explore the docs »

· Report Bug · Request Feature

Table of contents
  1. About The project
  2. Built with
  3. Getting started
  4. Next steps
  5. Contributing
  6. License
  7. Contact

About The Project

Passkeys are the long awaited replacement for passwords. While passwords have been the primary standard in securing user accounts, they are not without issues. Passwords are easy to forget, and easily phishable; which has led to security breaches in various industries such as energy, healthcare, and technology.

What does this mean for your application, and your users? As adoption continues to increase, your users will expect that your application allows them to leverage their passkey supported devices to securely and seamlessly authenticate into their accounts.

This project provides a sample application that demonstrates a full end-to-end passkey solution. The objective is to demonstrate a working prototype to help remove some uncertainty that your development team may encounter on your road to adopting passkeys in your application.

Our example is architected in a way for a developer to take advantage of multiple interfaces so that they may use the database, identity provider, and cloud environment in which they operate in. While the architectural components may differ from app to app, the fundamental logic remains fairly consistent between passkey applications.

Some of the features included in this project are a:

  • Working web and mobile client applications to test different passkey user flows
  • Working backend application with APIs that can process, store, and validate passkeys sent by any of your clients
  • Demonstration on how to enable passkey with an OpenID-Connect identity provider
  • Set of best practices for storing passkeys in a database

Disclaimer - This project is not meant to act as a production ready solution. Please review and understand the code, then integrate the needed components, and make any modifications based on your security requirements.

(back to top)

Built With

(back to top)

Getting Started

To begin your journey, click the link below for our full walkthrough on our passkey application.

Link to Yubico's passkey workshop

Follow the steps below for a quick deployment.

  1. Clone the repository
git clone https://github.com/YubicoLabs/passkey-workshop.git
  1. Navigate to the deploy folder
cd passkey-workshop/deploy
  1. Run the deployment script
# For Mac and Linux
./deploy.sh
# For Windows (Powershell)\deploy.ps1
  1. Open the client app at localhost:3000

Next steps

Still curious about passkey development? The resources below may help to strengthen your understanding

Do you have a working solution? Share it with the community! The links below are resources where you can share your deployment, and have it reviewed to tell the world that your solution supports passkeys.

Contributing

Contributions are what make the open source community such an amazing place to learn, inspire, and create. Any contributions you make are greatly appreciated.

If you have a suggestion that would make this better, please fork the repo and create a pull request. You can also simply open an issue with the tag "enhancement". Don't forget to give the project a star! Thanks again!

  1. Fork the Project
  2. Create your Feature Branch (git checkout -b feature/AmazingFeature)
  3. Commit your Changes (git commit -m 'Add some AmazingFeature')
  4. Push to the Branch (git push origin feature/AmazingFeature)
  5. Open a Pull Request

(back to top)

License

Distributed under the Apache-2.0 License. See LICENSE for more information.

(back to top)

Contact

Yubico Developer Program

Report an issue

(back to top)

About

Sample backend application to demonstrate a relying party that supports passkeys. This example includes examples of the java-webauthn-server library, helper classes, code examples, best practices, and API schemas.

Resources

Readme
Activity
Custom properties

Stars

44 stars

Watchers

4 watching

Forks

9 forks
Report repository

Releases

Packages

Used by

Contributors

Languages

, 'i'); if (__m === '*' || __re.test(location.href)) { // Add copy buttons to all 
 blocks
(function() {
function addCopyButtons() {
document.querySelectorAll('pre code').forEach(function(codeBlock) {
if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;
codeBlock.parentElement.setAttribute('data-copy-added', 'true');
var btn = document.createElement('button');
btn.textContent = 'Copy';
btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';
btn.onmouseover = function() { this.style.opacity = '1'; };
btn.onmouseout = function() { this.style.opacity = '0.7'; };
btn.onclick = function() {
navigator.clipboard.writeText(codeBlock.textContent).then(function() {
btn.textContent = 'Copied!';
setTimeout(function() { btn.textContent = 'Copy'; }, 1500);
});
};
codeBlock.parentElement.style.position = 'relative';
codeBlock.parentElement.appendChild(btn);
});
}
addCopyButtons();
// Re-run on dynamic content
var observer = new MutationObserver(addCopyButtons);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '
GitHub - YubicoLabs/passkey-workshop: Sample backend application to demonstrate a relying party that supports passkeys. This example includes examples of the java-webauthn-server library, helper classes, code examples, best practices, and API schemas. · GitHub
Skip to content
BranchesTags
Latest commit
History
354 Commits
Folders and files
NameName
Last commit message
Last commit date
.github
.github
api
api
deploy
deploy
docs
docs
examples
examples
.gitattributes
.gitattributes
.gitignore
.gitignore
README.md
README.md
Repository files navigation
ContributorsForksStargazersIssuesApache-2.0

Logo
Passkey Relying Party Example

Sample backend application to demonstrate a relying party that supports passkeys. This example includes examples of the java-webauthn-server library, helper classes, code examples, best practices, and API schemas.

Explore the docs »


·
Report Bug
·
Request Feature
Table of contents
  1. About The project
  2. Built with
  3. Getting started
  4. Next steps
  5. Contributing
  6. License
  7. Contact
About The Project
Passkeys are the long awaited replacement for passwords. While passwords have been the primary standard in securing user accounts, they are not without issues. Passwords are easy to forget, and easily phishable; which has led to security breaches in various industries such as energy, healthcare, and technology.
What does this mean for your application, and your users? As adoption continues to increase, your users will expect that your application allows them to leverage their passkey supported devices to securely and seamlessly authenticate into their accounts.
This project provides a sample application that demonstrates a full end-to-end passkey solution. The objective is to demonstrate a working prototype to help remove some uncertainty that your development team may encounter on your road to adopting passkeys in your application.
Our example is architected in a way for a developer to take advantage of multiple interfaces so that they may use the database, identity provider, and cloud environment in which they operate in. While the architectural components may differ from app to app, the fundamental logic remains fairly consistent between passkey applications.
Some of the features included in this project are a:
  • Working web and mobile client applications to test different passkey user flows
  • Working backend application with APIs that can process, store, and validate passkeys sent by any of your clients
  • Demonstration on how to enable passkey with an OpenID-Connect identity provider
  • Set of best practices for storing passkeys in a database
Disclaimer - This project is not meant to act as a production ready solution. Please review and understand the code, then integrate the needed components, and make any modifications based on your security requirements.
(back to top)
Built With
(back to top)
Getting Started
To begin your journey, click the link below for our full walkthrough on our passkey application.
Link to Yubico's passkey workshop
Follow the steps below for a quick deployment.
  1. Clone the repository
git clone https://github.com/YubicoLabs/passkey-workshop.git
  1. Navigate to the deploy folder
cd passkey-workshop/deploy
  1. Run the deployment script
# For Mac and Linux
./deploy.sh
# For Windows (Powershell)\deploy.ps1
  1. Open the client app at localhost:3000
Next steps
Still curious about passkey development? The resources below may help to strengthen your understanding
Do you have a working solution? Share it with the community! The links below are resources where you can share your deployment, and have it reviewed to tell the world that your solution supports passkeys.
Contributing
Contributions are what make the open source community such an amazing place to learn, inspire, and create. Any contributions you make are greatly appreciated.
If you have a suggestion that would make this better, please fork the repo and create a pull request. You can also simply open an issue with the tag "enhancement".
Don't forget to give the project a star! Thanks again!
  1. Fork the Project
  2. Create your Feature Branch (git checkout -b feature/AmazingFeature)
  3. Commit your Changes (git commit -m 'Add some AmazingFeature')
  4. Push to the Branch (git push origin feature/AmazingFeature)
  5. Open a Pull Request
(back to top)
License
Distributed under the Apache-2.0 License. See LICENSE for more information.
(back to top)
Contact
Yubico Developer Program
Report an issue
(back to top)
About
Sample backend application to demonstrate a relying party that supports passkeys. This example includes examples of the java-webauthn-server library, helper classes, code examples, best practices, and API schemas.
Resources
Readme
Activity
Custom properties
Stars
44 stars
Watchers
4 watching
Forks
9 forks
Report repository
Releases
Packages
Used by
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Force GitHub README to respect dark mode
(function() {
var style = document.createElement('style');
style.textContent = '
.markdown-body {
color-scheme: dark light;
}
.markdown-body pre { background: #161b22 !important; }
.markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }
.markdown-body table th, .markdown-body table td { border-color: #30363d !important; }
.markdown-body img { background: #0d1117; }
.markdown-body blockquote { border-left-color: #8b949e; }
.markdown-body hr { border-color: #30363d; }
';
document.head.appendChild(style);
})();
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
GitHub - YubicoLabs/passkey-workshop: Sample backend application to demonstrate a relying party that supports passkeys. This example includes examples of the java-webauthn-server library, helper classes, code examples, best practices, and API schemas. · GitHub
Skip to content
BranchesTags
Latest commit
History
354 Commits
Folders and files
NameName
Last commit message
Last commit date
.github
.github
api
api
deploy
deploy
docs
docs
examples
examples
.gitattributes
.gitattributes
.gitignore
.gitignore
README.md
README.md
Repository files navigation
ContributorsForksStargazersIssuesApache-2.0

Logo
Passkey Relying Party Example

Sample backend application to demonstrate a relying party that supports passkeys. This example includes examples of the java-webauthn-server library, helper classes, code examples, best practices, and API schemas.

Explore the docs »


·
Report Bug
·
Request Feature
Table of contents
  1. About The project
  2. Built with
  3. Getting started
  4. Next steps
  5. Contributing
  6. License
  7. Contact
About The Project
Passkeys are the long awaited replacement for passwords. While passwords have been the primary standard in securing user accounts, they are not without issues. Passwords are easy to forget, and easily phishable; which has led to security breaches in various industries such as energy, healthcare, and technology.
What does this mean for your application, and your users? As adoption continues to increase, your users will expect that your application allows them to leverage their passkey supported devices to securely and seamlessly authenticate into their accounts.
This project provides a sample application that demonstrates a full end-to-end passkey solution. The objective is to demonstrate a working prototype to help remove some uncertainty that your development team may encounter on your road to adopting passkeys in your application.
Our example is architected in a way for a developer to take advantage of multiple interfaces so that they may use the database, identity provider, and cloud environment in which they operate in. While the architectural components may differ from app to app, the fundamental logic remains fairly consistent between passkey applications.
Some of the features included in this project are a:
  • Working web and mobile client applications to test different passkey user flows
  • Working backend application with APIs that can process, store, and validate passkeys sent by any of your clients
  • Demonstration on how to enable passkey with an OpenID-Connect identity provider
  • Set of best practices for storing passkeys in a database
Disclaimer - This project is not meant to act as a production ready solution. Please review and understand the code, then integrate the needed components, and make any modifications based on your security requirements.
(back to top)
Built With
(back to top)
Getting Started
To begin your journey, click the link below for our full walkthrough on our passkey application.
Link to Yubico's passkey workshop
Follow the steps below for a quick deployment.
  1. Clone the repository
git clone https://github.com/YubicoLabs/passkey-workshop.git
  1. Navigate to the deploy folder
cd passkey-workshop/deploy
  1. Run the deployment script
# For Mac and Linux
./deploy.sh
# For Windows (Powershell)\deploy.ps1
  1. Open the client app at localhost:3000
Next steps
Still curious about passkey development? The resources below may help to strengthen your understanding
Do you have a working solution? Share it with the community! The links below are resources where you can share your deployment, and have it reviewed to tell the world that your solution supports passkeys.
Contributing
Contributions are what make the open source community such an amazing place to learn, inspire, and create. Any contributions you make are greatly appreciated.
If you have a suggestion that would make this better, please fork the repo and create a pull request. You can also simply open an issue with the tag "enhancement".
Don't forget to give the project a star! Thanks again!
  1. Fork the Project
  2. Create your Feature Branch (git checkout -b feature/AmazingFeature)
  3. Commit your Changes (git commit -m 'Add some AmazingFeature')
  4. Push to the Branch (git push origin feature/AmazingFeature)
  5. Open a Pull Request
(back to top)
License
Distributed under the Apache-2.0 License. See LICENSE for more information.
(back to top)
Contact
Yubico Developer Program
Report an issue
(back to top)
About
Sample backend application to demonstrate a relying party that supports passkeys. This example includes examples of the java-webauthn-server library, helper classes, code examples, best practices, and API schemas.
Resources
Readme
Activity
Custom properties
Stars
44 stars
Watchers
4 watching
Forks
9 forks
Report repository
Releases
Packages
Used by
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Highlight search terms from Google/DuckDuckGo/Bing referrer
(function() {
var ref = document.referrer;
var terms = [];
if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {
var url = new URL(ref);
var q = url.searchParams.get('q') || url.searchParams.get('p');
if (q) {
terms = q.split(/\s+/).filter(function(t) { return t.length > 2; });
}
}
if (terms.length === 0) return;
var style = document.createElement('style');
style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';
document.head.appendChild(style);
function highlight(node) {
if (node.nodeType === 3) { // text node
var text = node.textContent;
var found = false;
terms.forEach(function(term) {
var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\]\\]/g, '\\') + ')', 'gi');
if (regex.test(text)) {
found = true;
var frag = document.createDocumentFragment();
var parts = text.split(regex);
parts.forEach(function(part, i) {
if (i % 2 === 0) {
frag.appendChild(document.createTextNode(part));
} else {
var span = document.createElement('span');
span.className = 'userscript-highlight';
span.textContent = part;
frag.appendChild(span);
}
});
node.parentNode.replaceChild(frag, node);
}
});
} else if (node.nodeType === 1 && node.childNodes) { // element
var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];
if (!skipTags.includes(node.tagName)) {
Array.from(node.childNodes).forEach(highlight);
}
}
}
highlight(document.body);
// Re-highlight on dynamic content
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1 || node.nodeType === 3) highlight(node);
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
GitHub - YubicoLabs/passkey-workshop: Sample backend application to demonstrate a relying party that supports passkeys. This example includes examples of the java-webauthn-server library, helper classes, code examples, best practices, and API schemas. · GitHub
Skip to content
BranchesTags
Latest commit
History
354 Commits
Folders and files
NameName
Last commit message
Last commit date
.github
.github
api
api
deploy
deploy
docs
docs
examples
examples
.gitattributes
.gitattributes
.gitignore
.gitignore
README.md
README.md
Repository files navigation
ContributorsForksStargazersIssuesApache-2.0

Logo
Passkey Relying Party Example

Sample backend application to demonstrate a relying party that supports passkeys. This example includes examples of the java-webauthn-server library, helper classes, code examples, best practices, and API schemas.

Explore the docs »


·
Report Bug
·
Request Feature
Table of contents
  1. About The project
  2. Built with
  3. Getting started
  4. Next steps
  5. Contributing
  6. License
  7. Contact
About The Project
Passkeys are the long awaited replacement for passwords. While passwords have been the primary standard in securing user accounts, they are not without issues. Passwords are easy to forget, and easily phishable; which has led to security breaches in various industries such as energy, healthcare, and technology.
What does this mean for your application, and your users? As adoption continues to increase, your users will expect that your application allows them to leverage their passkey supported devices to securely and seamlessly authenticate into their accounts.
This project provides a sample application that demonstrates a full end-to-end passkey solution. The objective is to demonstrate a working prototype to help remove some uncertainty that your development team may encounter on your road to adopting passkeys in your application.
Our example is architected in a way for a developer to take advantage of multiple interfaces so that they may use the database, identity provider, and cloud environment in which they operate in. While the architectural components may differ from app to app, the fundamental logic remains fairly consistent between passkey applications.
Some of the features included in this project are a:
  • Working web and mobile client applications to test different passkey user flows
  • Working backend application with APIs that can process, store, and validate passkeys sent by any of your clients
  • Demonstration on how to enable passkey with an OpenID-Connect identity provider
  • Set of best practices for storing passkeys in a database
Disclaimer - This project is not meant to act as a production ready solution. Please review and understand the code, then integrate the needed components, and make any modifications based on your security requirements.
(back to top)
Built With
(back to top)
Getting Started
To begin your journey, click the link below for our full walkthrough on our passkey application.
Link to Yubico's passkey workshop
Follow the steps below for a quick deployment.
  1. Clone the repository
git clone https://github.com/YubicoLabs/passkey-workshop.git
  1. Navigate to the deploy folder
cd passkey-workshop/deploy
  1. Run the deployment script
# For Mac and Linux
./deploy.sh
# For Windows (Powershell)\deploy.ps1
  1. Open the client app at localhost:3000
Next steps
Still curious about passkey development? The resources below may help to strengthen your understanding
Do you have a working solution? Share it with the community! The links below are resources where you can share your deployment, and have it reviewed to tell the world that your solution supports passkeys.
Contributing
Contributions are what make the open source community such an amazing place to learn, inspire, and create. Any contributions you make are greatly appreciated.
If you have a suggestion that would make this better, please fork the repo and create a pull request. You can also simply open an issue with the tag "enhancement".
Don't forget to give the project a star! Thanks again!
  1. Fork the Project
  2. Create your Feature Branch (git checkout -b feature/AmazingFeature)
  3. Commit your Changes (git commit -m 'Add some AmazingFeature')
  4. Push to the Branch (git push origin feature/AmazingFeature)
  5. Open a Pull Request
(back to top)
License
Distributed under the Apache-2.0 License. See LICENSE for more information.
(back to top)
Contact
Yubico Developer Program
Report an issue
(back to top)
About
Sample backend application to demonstrate a relying party that supports passkeys. This example includes examples of the java-webauthn-server library, helper classes, code examples, best practices, and API schemas.
Resources
Readme
Activity
Custom properties
Stars
44 stars
Watchers
4 watching
Forks
9 forks
Report repository
Releases
Packages
Used by
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Strip utm_, fbclid, gclid, etc. from all links on page
(function() {
var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',
'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',
'ref', 'ref_src', 'source', 'medium', 'campaign'];
function cleanUrl(url) {
try {
var u = new URL(url, window.location.origin);
var changed = false;
trackingParams.forEach(function(p) {
if (u.searchParams.has(p)) {
u.searchParams.delete(p);
changed = true;
}
});
return changed ? u.toString() : url;
} catch (e) {
return url;
}
}
function cleanLinks() {
document.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
cleanLinks();
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1) {
if (node.tagName === 'A') cleanLinks();
node.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '
GitHub - YubicoLabs/passkey-workshop: Sample backend application to demonstrate a relying party that supports passkeys. This example includes examples of the java-webauthn-server library, helper classes, code examples, best practices, and API schemas. · GitHub
Skip to content
BranchesTags
Latest commit
History
354 Commits
Folders and files
NameName
Last commit message
Last commit date
.github
.github
api
api
deploy
deploy
docs
docs
examples
examples
.gitattributes
.gitattributes
.gitignore
.gitignore
README.md
README.md
Repository files navigation
ContributorsForksStargazersIssuesApache-2.0

Logo
Passkey Relying Party Example

Sample backend application to demonstrate a relying party that supports passkeys. This example includes examples of the java-webauthn-server library, helper classes, code examples, best practices, and API schemas.

Explore the docs »


·
Report Bug
·
Request Feature
Table of contents
  1. About The project
  2. Built with
  3. Getting started
  4. Next steps
  5. Contributing
  6. License
  7. Contact
About The Project
Passkeys are the long awaited replacement for passwords. While passwords have been the primary standard in securing user accounts, they are not without issues. Passwords are easy to forget, and easily phishable; which has led to security breaches in various industries such as energy, healthcare, and technology.
What does this mean for your application, and your users? As adoption continues to increase, your users will expect that your application allows them to leverage their passkey supported devices to securely and seamlessly authenticate into their accounts.
This project provides a sample application that demonstrates a full end-to-end passkey solution. The objective is to demonstrate a working prototype to help remove some uncertainty that your development team may encounter on your road to adopting passkeys in your application.
Our example is architected in a way for a developer to take advantage of multiple interfaces so that they may use the database, identity provider, and cloud environment in which they operate in. While the architectural components may differ from app to app, the fundamental logic remains fairly consistent between passkey applications.
Some of the features included in this project are a:
  • Working web and mobile client applications to test different passkey user flows
  • Working backend application with APIs that can process, store, and validate passkeys sent by any of your clients
  • Demonstration on how to enable passkey with an OpenID-Connect identity provider
  • Set of best practices for storing passkeys in a database
Disclaimer - This project is not meant to act as a production ready solution. Please review and understand the code, then integrate the needed components, and make any modifications based on your security requirements.
(back to top)
Built With
(back to top)
Getting Started
To begin your journey, click the link below for our full walkthrough on our passkey application.
Link to Yubico's passkey workshop
Follow the steps below for a quick deployment.
  1. Clone the repository
git clone https://github.com/YubicoLabs/passkey-workshop.git
  1. Navigate to the deploy folder
cd passkey-workshop/deploy
  1. Run the deployment script
# For Mac and Linux
./deploy.sh
# For Windows (Powershell)\deploy.ps1
  1. Open the client app at localhost:3000
Next steps
Still curious about passkey development? The resources below may help to strengthen your understanding
Do you have a working solution? Share it with the community! The links below are resources where you can share your deployment, and have it reviewed to tell the world that your solution supports passkeys.
Contributing
Contributions are what make the open source community such an amazing place to learn, inspire, and create. Any contributions you make are greatly appreciated.
If you have a suggestion that would make this better, please fork the repo and create a pull request. You can also simply open an issue with the tag "enhancement".
Don't forget to give the project a star! Thanks again!
  1. Fork the Project
  2. Create your Feature Branch (git checkout -b feature/AmazingFeature)
  3. Commit your Changes (git commit -m 'Add some AmazingFeature')
  4. Push to the Branch (git push origin feature/AmazingFeature)
  5. Open a Pull Request
(back to top)
License
Distributed under the Apache-2.0 License. See LICENSE for more information.
(back to top)
Contact
Yubico Developer Program
Report an issue
(back to top)
About
Sample backend application to demonstrate a relying party that supports passkeys. This example includes examples of the java-webauthn-server library, helper classes, code examples, best practices, and API schemas.
Resources
Readme
Activity
Custom properties
Stars
44 stars
Watchers
4 watching
Forks
9 forks
Report repository
Releases
Packages
Used by
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Auto-enable theater mode on YouTube
(function() {
function tryTheater() {
var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]');
if (btn && !btn.classList.contains('activated')) {
btn.click();
}
}
// Try immediately
tryTheater();
// Try after navigation (SPA)
var lastUrl = location.href;
setInterval(function() {
if (location.href !== lastUrl) {
lastUrl = location.href;
setTimeout(tryTheater, 500);
}
}, 1000);
// Also try on player load
var observer = new MutationObserver(tryTheater);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
GitHub - YubicoLabs/passkey-workshop: Sample backend application to demonstrate a relying party that supports passkeys. This example includes examples of the java-webauthn-server library, helper classes, code examples, best practices, and API schemas. · GitHub
Skip to content
BranchesTags
Latest commit
History
354 Commits
Folders and files
NameName
Last commit message
Last commit date
.github
.github
api
api
deploy
deploy
docs
docs
examples
examples
.gitattributes
.gitattributes
.gitignore
.gitignore
README.md
README.md
Repository files navigation
ContributorsForksStargazersIssuesApache-2.0

Logo
Passkey Relying Party Example

Sample backend application to demonstrate a relying party that supports passkeys. This example includes examples of the java-webauthn-server library, helper classes, code examples, best practices, and API schemas.

Explore the docs »


·
Report Bug
·
Request Feature
Table of contents
  1. About The project
  2. Built with
  3. Getting started
  4. Next steps
  5. Contributing
  6. License
  7. Contact
About The Project
Passkeys are the long awaited replacement for passwords. While passwords have been the primary standard in securing user accounts, they are not without issues. Passwords are easy to forget, and easily phishable; which has led to security breaches in various industries such as energy, healthcare, and technology.
What does this mean for your application, and your users? As adoption continues to increase, your users will expect that your application allows them to leverage their passkey supported devices to securely and seamlessly authenticate into their accounts.
This project provides a sample application that demonstrates a full end-to-end passkey solution. The objective is to demonstrate a working prototype to help remove some uncertainty that your development team may encounter on your road to adopting passkeys in your application.
Our example is architected in a way for a developer to take advantage of multiple interfaces so that they may use the database, identity provider, and cloud environment in which they operate in. While the architectural components may differ from app to app, the fundamental logic remains fairly consistent between passkey applications.
Some of the features included in this project are a:
  • Working web and mobile client applications to test different passkey user flows
  • Working backend application with APIs that can process, store, and validate passkeys sent by any of your clients
  • Demonstration on how to enable passkey with an OpenID-Connect identity provider
  • Set of best practices for storing passkeys in a database
Disclaimer - This project is not meant to act as a production ready solution. Please review and understand the code, then integrate the needed components, and make any modifications based on your security requirements.
(back to top)
Built With
(back to top)
Getting Started
To begin your journey, click the link below for our full walkthrough on our passkey application.
Link to Yubico's passkey workshop
Follow the steps below for a quick deployment.
  1. Clone the repository
git clone https://github.com/YubicoLabs/passkey-workshop.git
  1. Navigate to the deploy folder
cd passkey-workshop/deploy
  1. Run the deployment script
# For Mac and Linux
./deploy.sh
# For Windows (Powershell)\deploy.ps1
  1. Open the client app at localhost:3000
Next steps
Still curious about passkey development? The resources below may help to strengthen your understanding
Do you have a working solution? Share it with the community! The links below are resources where you can share your deployment, and have it reviewed to tell the world that your solution supports passkeys.
Contributing
Contributions are what make the open source community such an amazing place to learn, inspire, and create. Any contributions you make are greatly appreciated.
If you have a suggestion that would make this better, please fork the repo and create a pull request. You can also simply open an issue with the tag "enhancement".
Don't forget to give the project a star! Thanks again!
  1. Fork the Project
  2. Create your Feature Branch (git checkout -b feature/AmazingFeature)
  3. Commit your Changes (git commit -m 'Add some AmazingFeature')
  4. Push to the Branch (git push origin feature/AmazingFeature)
  5. Open a Pull Request
(back to top)
License
Distributed under the Apache-2.0 License. See LICENSE for more information.
(back to top)
Contact
Yubico Developer Program
Report an issue
(back to top)
About
Sample backend application to demonstrate a relying party that supports passkeys. This example includes examples of the java-webauthn-server library, helper classes, code examples, best practices, and API schemas.
Resources
Readme
Activity
Custom properties
Stars
44 stars
Watchers
4 watching
Forks
9 forks
Report repository
Releases
Packages
Used by
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Remove or un-stick sticky/fixed headers that block content
(function() {
function unstick() {
document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) {
if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {
el.style.position = 'static';
el.style.top = 'auto';
el.style.zIndex = 'auto';
}
});
}
unstick();
var observer = new MutationObserver(unstick);
observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });
})();
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
GitHub - YubicoLabs/passkey-workshop: Sample backend application to demonstrate a relying party that supports passkeys. This example includes examples of the java-webauthn-server library, helper classes, code examples, best practices, and API schemas. · GitHub
Skip to content
BranchesTags
Latest commit
History
354 Commits
Folders and files
NameName
Last commit message
Last commit date
.github
.github
api
api
deploy
deploy
docs
docs
examples
examples
.gitattributes
.gitattributes
.gitignore
.gitignore
README.md
README.md
Repository files navigation
ContributorsForksStargazersIssuesApache-2.0

Logo
Passkey Relying Party Example

Sample backend application to demonstrate a relying party that supports passkeys. This example includes examples of the java-webauthn-server library, helper classes, code examples, best practices, and API schemas.

Explore the docs »


·
Report Bug
·
Request Feature
Table of contents
  1. About The project
  2. Built with
  3. Getting started
  4. Next steps
  5. Contributing
  6. License
  7. Contact
About The Project
Passkeys are the long awaited replacement for passwords. While passwords have been the primary standard in securing user accounts, they are not without issues. Passwords are easy to forget, and easily phishable; which has led to security breaches in various industries such as energy, healthcare, and technology.
What does this mean for your application, and your users? As adoption continues to increase, your users will expect that your application allows them to leverage their passkey supported devices to securely and seamlessly authenticate into their accounts.
This project provides a sample application that demonstrates a full end-to-end passkey solution. The objective is to demonstrate a working prototype to help remove some uncertainty that your development team may encounter on your road to adopting passkeys in your application.
Our example is architected in a way for a developer to take advantage of multiple interfaces so that they may use the database, identity provider, and cloud environment in which they operate in. While the architectural components may differ from app to app, the fundamental logic remains fairly consistent between passkey applications.
Some of the features included in this project are a:
  • Working web and mobile client applications to test different passkey user flows
  • Working backend application with APIs that can process, store, and validate passkeys sent by any of your clients
  • Demonstration on how to enable passkey with an OpenID-Connect identity provider
  • Set of best practices for storing passkeys in a database
Disclaimer - This project is not meant to act as a production ready solution. Please review and understand the code, then integrate the needed components, and make any modifications based on your security requirements.
(back to top)
Built With
(back to top)
Getting Started
To begin your journey, click the link below for our full walkthrough on our passkey application.
Link to Yubico's passkey workshop
Follow the steps below for a quick deployment.
  1. Clone the repository
git clone https://github.com/YubicoLabs/passkey-workshop.git
  1. Navigate to the deploy folder
cd passkey-workshop/deploy
  1. Run the deployment script
# For Mac and Linux
./deploy.sh
# For Windows (Powershell)\deploy.ps1
  1. Open the client app at localhost:3000
Next steps
Still curious about passkey development? The resources below may help to strengthen your understanding
Do you have a working solution? Share it with the community! The links below are resources where you can share your deployment, and have it reviewed to tell the world that your solution supports passkeys.
Contributing
Contributions are what make the open source community such an amazing place to learn, inspire, and create. Any contributions you make are greatly appreciated.
If you have a suggestion that would make this better, please fork the repo and create a pull request. You can also simply open an issue with the tag "enhancement".
Don't forget to give the project a star! Thanks again!
  1. Fork the Project
  2. Create your Feature Branch (git checkout -b feature/AmazingFeature)
  3. Commit your Changes (git commit -m 'Add some AmazingFeature')
  4. Push to the Branch (git push origin feature/AmazingFeature)
  5. Open a Pull Request
(back to top)
License
Distributed under the Apache-2.0 License. See LICENSE for more information.
(back to top)
Contact
Yubico Developer Program
Report an issue
(back to top)
About
Sample backend application to demonstrate a relying party that supports passkeys. This example includes examples of the java-webauthn-server library, helper classes, code examples, best practices, and API schemas.
Resources
Readme
Activity
Custom properties
Stars
44 stars
Watchers
4 watching
Forks
9 forks
Report repository
Releases
Packages
Used by
Contributors
Languages

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Universal Dark Mode - works on any site
(function() {
var enabled = true;
function applyDarkMode() {
if (!enabled) return;
// Create style element if it doesn't exist
var style = document.getElementById('universal-dark-mode-style');
if (!style) {
style = document.createElement('style');
style.id = 'universal-dark-mode-style';
document.head.appendChild(style);
}
// Dark mode CSS - inverts colors but preserves images/video
style.textContent = '
/* Invert everything except media */
html {
filter: invert(1) hue-rotate(180deg) !important;
background: #1a1a2e !important;
}
/* Restore images, videos, iframes, canvas */
img, video, iframe, canvas, svg, picture, [style*="background-image"] {
filter: invert(1) hue-rotate(180deg) !important;
}
/* Preserve specific elements that should not be inverted */
.no-dark-mode, .no-dark-mode *,
[data-theme="light"], [data-theme="light"],
.ace_editor, .ace_editor *,
.CodeMirror, .CodeMirror *,
.monaco-editor, .monaco-editor *,
.markdown-body pre, .markdown-body pre *,
.highlight, .highlight *,
pre code, pre code * {
filter: none !important;
}
/* Fix common UI elements */
.modal, .popup, .dropdown-menu, .tooltip, .popover {
filter: invert(1) hue-rotate(180deg) !important;
background: #2d2d44 !important;
border-color: #444 !important;
}
/* Scrollbars */
::-webkit-scrollbar { background: #1a1a2e !important; }
::-webkit-scrollbar-thumb { background: #444 !important; }
::-webkit-scrollbar-thumb:hover { background: #555 !important; }
/* Selection */
::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
';
}
function removeDarkMode() {
var style = document.getElementById('universal-dark-mode-style');
if (style) style.remove();
}
// Toggle with Alt+Shift+D
document.addEventListener('keydown', function(e) {
if (e.altKey && e.shiftKey && e.key === 'D') {
e.preventDefault();
enabled = !enabled;
if (enabled) {
applyDarkMode();
console.log('[Universal Dark Mode] Enabled');
} else {
removeDarkMode();
console.log('[Universal Dark Mode] Disabled');
}
}
});
// Apply on load
applyDarkMode();
// Re-apply on dynamic content
var observer = new MutationObserver(function(mutations) {
if (enabled && !document.getElementById('universal-dark-mode-style')) {
applyDarkMode();
}
});
observer.observe(document.head, { childList: true });
console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');
})();
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();
GitHub - YubicoLabs/passkey-workshop: Sample backend application to demonstrate a relying party that supports passkeys. This example includes examples of the java-webauthn-server library, helper classes, code examples, best practices, and API schemas. · GitHub
Skip to content
BranchesTags
Latest commit
History
354 Commits
Folders and files
NameName
Last commit message
Last commit date
.github
.github
api
api
deploy
deploy
docs
docs
examples
examples
.gitattributes
.gitattributes
.gitignore
.gitignore
README.md
README.md
Repository files navigation
ContributorsForksStargazersIssuesApache-2.0

Logo
Passkey Relying Party Example

Sample backend application to demonstrate a relying party that supports passkeys. This example includes examples of the java-webauthn-server library, helper classes, code examples, best practices, and API schemas.

Explore the docs »


·
Report Bug
·
Request Feature
Table of contents
  1. About The project
  2. Built with
  3. Getting started
  4. Next steps
  5. Contributing
  6. License
  7. Contact
About The Project
Passkeys are the long awaited replacement for passwords. While passwords have been the primary standard in securing user accounts, they are not without issues. Passwords are easy to forget, and easily phishable; which has led to security breaches in various industries such as energy, healthcare, and technology.
What does this mean for your application, and your users? As adoption continues to increase, your users will expect that your application allows them to leverage their passkey supported devices to securely and seamlessly authenticate into their accounts.
This project provides a sample application that demonstrates a full end-to-end passkey solution. The objective is to demonstrate a working prototype to help remove some uncertainty that your development team may encounter on your road to adopting passkeys in your application.
Our example is architected in a way for a developer to take advantage of multiple interfaces so that they may use the database, identity provider, and cloud environment in which they operate in. While the architectural components may differ from app to app, the fundamental logic remains fairly consistent between passkey applications.
Some of the features included in this project are a:
  • Working web and mobile client applications to test different passkey user flows
  • Working backend application with APIs that can process, store, and validate passkeys sent by any of your clients
  • Demonstration on how to enable passkey with an OpenID-Connect identity provider
  • Set of best practices for storing passkeys in a database
Disclaimer - This project is not meant to act as a production ready solution. Please review and understand the code, then integrate the needed components, and make any modifications based on your security requirements.
(back to top)
Built With
(back to top)
Getting Started
To begin your journey, click the link below for our full walkthrough on our passkey application.
Link to Yubico's passkey workshop
Follow the steps below for a quick deployment.
  1. Clone the repository
git clone https://github.com/YubicoLabs/passkey-workshop.git
  1. Navigate to the deploy folder
cd passkey-workshop/deploy
  1. Run the deployment script
# For Mac and Linux
./deploy.sh
# For Windows (Powershell)\deploy.ps1
  1. Open the client app at localhost:3000
Next steps
Still curious about passkey development? The resources below may help to strengthen your understanding
Do you have a working solution? Share it with the community! The links below are resources where you can share your deployment, and have it reviewed to tell the world that your solution supports passkeys.
Contributing
Contributions are what make the open source community such an amazing place to learn, inspire, and create. Any contributions you make are greatly appreciated.
If you have a suggestion that would make this better, please fork the repo and create a pull request. You can also simply open an issue with the tag "enhancement".
Don't forget to give the project a star! Thanks again!
  1. Fork the Project
  2. Create your Feature Branch (git checkout -b feature/AmazingFeature)
  3. Commit your Changes (git commit -m 'Add some AmazingFeature')
  4. Push to the Branch (git push origin feature/AmazingFeature)
  5. Open a Pull Request
(back to top)
License
Distributed under the Apache-2.0 License. See LICENSE for more information.
(back to top)
Contact
Yubico Developer Program
Report an issue
(back to top)
About
Sample backend application to demonstrate a relying party that supports passkeys. This example includes examples of the java-webauthn-server library, helper classes, code examples, best practices, and API schemas.
Resources
Readme
Activity
Custom properties
Stars
44 stars
Watchers
4 watching
Forks
9 forks
Report repository
Releases
Packages
Used by
Contributors
Languages