Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Mm/requirements backend #403

Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions content/docs/implement/_index.md
Original file line number Diff line number Diff line change
@@ -1,9 +1,9 @@
---
title : "Implement"
description: "Implement passkeys"
title : "Implementation"
description: "Adding passkeys to your website"
lead: ""
date: 2022-09-24T15:57:34.857Z
draft: true
draft: false
images: []
weight: 500
sidebar:
Expand Down
35 changes: 35 additions & 0 deletions content/docs/implement/backend.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,35 @@
---
title: "Back End Requirements"
description: "Guidance on server-side handling of passkeys registration and authentication"
lead: ""
date: 2024-08-13T12:00:00.000Z
draft: false
images: []
menu:
docs:
parent: "implement"
weight: 501
toc: true
---

The back end drives WebAuthn ceremonies through four primary responsibilities:

1. Generate registration options
2. Verify registration responses
3. Generate authentication options
4. Verify authentication responses

The guidance below is intended to identify best practices to fulfill these responsibilities and
securely incorporate passkeys-based authentication into your website.

**Please note that this guidance is not applicable to any specific server implementation.**
It is intended to be a launching point; care should be taken as you consider how best to adapt this
guidance for your particular site.

## 1. Generate registration options

## 2. Verify registration responses

## 3. Generate authentication options

## 4. Verify authentication responses
27 changes: 0 additions & 27 deletions content/docs/implement/requirements.md

This file was deleted.

77 changes: 45 additions & 32 deletions hugo_stats.json
Original file line number Diff line number Diff line change
Expand Up @@ -62,33 +62,20 @@
"time",
"title",
"tr",
"ul",
"wbr"
"ul"
],
"classes": [
"DocSearch-Label",
"about",
"active",
"align-middle",
"align-top",
"anchor",
"badge",
"bg-color-green",
"bg-light",
"bi",
"bi-box-arrow-up-right",
"bi-calendar-plus",
"bi-chat-square-text-fill",
"bi-check-circle",
"bi-check-circle-fill",
"bi-circle-half",
"bi-github",
"bi-house-heart",
"bi-mastodon",
"bi-pencil",
"bi-twitter-x",
"bi-usb-drive",
"bi-wrench-adjustable-circle-fill",
"bi-x-circle-fill",
"border",
"btn",
"btn-black",
Expand All @@ -99,7 +86,6 @@
"callout",
"callout-body",
"callout-content",
"callout-icon",
"callout-note",
"callout-title",
"card",
Expand All @@ -120,9 +106,6 @@
"col-xl-4",
"col-xl-8",
"col-xl-9",
"color-black",
"color-green",
"color-red",
"container",
"container-fluid",
"container-lg",
Expand Down Expand Up @@ -160,7 +143,6 @@
"form-control",
"form-control-lg",
"frame",
"fs-4",
"fs-5",
"fs-6",
"fst-italic",
Expand All @@ -178,17 +160,33 @@
"icon-tabler",
"icon-tabler-arrow-left",
"icon-tabler-arrow-right",
"icon-tabler-brand-github",
"icon-tabler-brand-mastodon",
"icon-tabler-brand-threads",
"icon-tabler-brand-x",
"icon-tabler-calendar-clock",
"icon-tabler-circle-check",
"icon-tabler-circle-check-filled",
"icon-tabler-circle-half-2",
"icon-tabler-circle-x-filled",
"icon-tabler-device-usb",
"icon-tabler-dots-vertical",
"icon-tabler-edit-circle",
"icon-tabler-external-link",
"icon-tabler-home-check",
"icon-tabler-inline",
"icon-tabler-inlineicon-tabler-settings-code",
"icon-tabler-menu",
"icon-tabler-messages",
"icon-tabler-moon",
"icon-tabler-search",
"icon-tabler-sun",
"icon-tabler-x",
"info-circle",
"justify-content-between",
"justify-content-center",
"justify-content-end",
"lead",
"lh-1",
"list",
"list-inline",
"list-inline-item",
Expand All @@ -198,7 +196,6 @@
"m-2",
"mb-0",
"mb-2",
"mb-3",
"mb-4",
"mb-5",
"me-2",
Expand Down Expand Up @@ -252,7 +249,6 @@
"page-nav",
"pb-2",
"pb-3",
"pe-1",
"pe-4",
"privacy-policy",
"ps-3",
Expand Down Expand Up @@ -280,7 +276,6 @@
"stretched-link",
"submitted",
"svg-icon-bw",
"svg-inline",
"table",
"table-responsive",
"table-striped",
Expand All @@ -301,22 +296,28 @@
"toc-mobile",
"visually-hidden",
"w-100",
"wrap",
"youtube-preview"
"wrap"
],
"ids": [
"1-generate-registration-options",
"2-factor-authentication-2fa",
"2-verify-registration-responses",
"2fa-user",
"3-generate-authentication-options",
"4-verify-authentication-responses",
"Layer_1",
"TableOfContents",
"a-note-about-user-verification",
"about",
"account-bootstrapping",
"advanced",
"advanced-capabilities",
"attestation",
"authenticating-the-user",
"authentication-factor",
"autofill-ui",
"back-end",
"back-end-requirements",
"basic",
"browser-behavior",
"buttonColorMode",
Expand All @@ -343,10 +344,21 @@
"discoverable-credential",
"docs",
"doks-docs-nav",
"embedded-webviews",
"embedded-webviews-ewv",
"engage-and-contribute",
"expired-sessions-and-logout",
"fido2webauthn-tools",
"first-party-passkey-provider",
"fn1",
"fn2",
"fn3",
"fn4",
"fn5",
"fn6",
"fn7",
"fn8",
"front-end",
"general-passkey-demo-sites",
"go",
"h-rh-i-0",
Expand All @@ -365,6 +377,8 @@
"maintainers",
"matrix",
"meta",
"native-apis",
"native-apps",
"net",
"offcanvasNavMain",
"offcanvasNavMainLabel",
Expand All @@ -376,6 +390,7 @@
"overview",
"passkey",
"passkey-provider",
"persistent-data",
"persistent-linking",
"platform-authenticator",
"platform-notes",
Expand All @@ -398,15 +413,13 @@
"searchToggleMobile",
"selection-criteria",
"sensitive-actions",
"session-data",
"signing-in",
"single-device-passkey",
"socialMenu",
"supfive",
"supfour",
"supone",
"supthree",
"suptwo",
"synced-passkey",
"system-webviews",
"system-webviews-swv",
"third-party-passkey-provider",
"title",
"toc",
Expand All @@ -424,7 +437,7 @@
"w3c-web-authentication-webauthn",
"webauthn-versions-and-capabilities",
"website-visitors",
"whats-next"
"webviews"
]
}
}