passwordless server下載 - passwordless server源代碼下載

passwordless server

其他類別

1.0.91

下載

bitwarden無密碼dev服務器

bitwarden basswions.dev是一個軟件工具包，可幫助開發人員構建Fido2 WebAuthn Passkeys功能，以實現無縫身份驗證流。

使用無密碼。 DEV意味著無需閱讀大量的W3C規範文檔，確定要實現的密碼學或擔心管理存儲的公鑰。 Bitwarden背後的團隊將為您處理。

passwordless-server項目包含API，數據庫和其他核心基礎架構項目，用於後端所有無密碼客戶端的後端。

演示

您可以嘗試通過demoless.dev驅動的Demo Web應用程序在demo.passwordless.dev上。您也可以觀看以下視頻：

demo.webm

使用無密碼。 dev

創建一個應用程序

開始使用無密碼。 dev：

在此處註冊一個免費帳戶。
在管理員控制台中創建應用程序。
安裝無密碼。 DEVJavaScript客戶端庫。
開始構建註冊並為您的應用程序提供簽名。請參閱無密碼。 DEV文檔以尋求幫助。

連接您的後端

您可以將無密碼與各種不同的後端平台結合使用 - 有關更多信息，請參見文檔。以下是使用ASP.NET Core和.NET的無密碼SDK的後端集成的示例：

 // Add Passwordless to your service container
services . AddPasswordlessSdk ( options =>
{
    options . ApiSecret = "your_api_secret" ;
} ) ;

// ...

// Define the /register endpoint
app . MapGet ( "/register" , async ( IPasswordlessClient passwordless , string alias ) =>
{
    // Get existing user ID from session or create a new user in your database
    var userId = Guid . NewGuid ( ) . ToString ( ) ;
    
    // Provide the userid and an alias to link to this user
    var payload = new RegisterOptions ( userId , alias )
    {
        // Optional: Link this user ID to an alias (e.g. email)
        Aliases = [ alias ]
    } ;
    
    try
    {
        var tokenRegistration = await passwordless . CreateRegisterTokenAsync ( payload ) ;
    
        // Return this token to the frontend
        return Ok ( tokenRegistration ) ;
    }
    catch ( PasswordlessApiException e )
    {
        return new JsonResult ( e . Details )
        {
            StatusCode = ( int ? ) e . StatusCode ,
        } ;
    }
} ) ;

// Define the /signin endpoint
app . MapGet ( "/signin" , async ( IPasswordlessClient passwordless , string token ) =>
{
    try
    {
        var verifiedUser = await passwordless . VerifyTokenAsync ( token ) ;

        // Sign the user in, set a cookie, etc
        return Ok ( verifiedUser ) ;
    }
    catch ( PasswordlessApiException e )
    {
        return new JsonResult ( e . Details )
        {
            StatusCode = ( int ? ) e . StatusCode
        } ;
    }
} ) ;

連接您的前端

通過在前端上使用無密碼客戶端來完成設置註冊和簽名流。我們還為幾個前端框架提供第一方集成 - 有關更多信息，請參見文檔。以下是一個簡單的示例，使用香草JavaScript：

安裝：

$ npm install @passwordlessdev/passwordless-client

註冊端點：

 import Passwordless from '@passwordlessdev/passwordless-client' ;

// Instantiate a passwordless client using your API public key.
const p = new Passwordless . Client ( {
    apiKey : "myapplication:public:4364b1a49a404b38b843fe3697b803c8"
} ) ;

// Fetch the registration token from the backend.
const backendUrl = "https://localhost:8002" ;
const registerToken = await fetch ( backendUrl + "/register?userId" + userId ) . then ( r => r . json ( ) ) ;

// Register the token with the end-user's device.
const { token , error } = await p . register ( registerToken ) ;

Signin端點：

 import Passwordless from '@passwordlessdev/passwordless-client' ;

// Instantiate a passwordless client using your API public key.
const p = new Passwordless . Client ( {
  apiKey : 'myapplication:public:4364b1a49a404b38b843fe3697b803c8'
} ) ;

// Generate an authentication token for the user.

// Option 1: Enable browsers to suggest passkeys for any input that has autofill="webauthn" (only works with discoverable passkeys).
const { token , error } = await p . signinWithAutofill ( ) ;

// Option 2: Enables browsers to suggest passkeys by opening a UI prompt (only works with discoverable passkeys).
const { token , error } = await p . signinWithDiscoverable ( ) ;

// Option 3: Use an alias specified by the user.
const email = '[email protected]' ;
const { token , error } = await p . signinWithAlias ( email ) ;

// Option 4: Use a userId if already known, for example if the user is re-authenticating.
const userId = '107fb578-9559-4540-a0e2-f82ad78852f7' ;
const { token , error } = await p . signinWithId ( userId ) ;

if ( error ) {
  console . error ( error ) ;
  // { errorCode: "unknown_credential", "title": "That credential is not registered with this website", "details": "..."}
}

// Call your backend to verify the token.
const backendUrl = 'https://localhost:8002' ; // Your backend
const verifiedUser = await fetch ( backendUrl + '/signin?token=' + token ) . then ( ( r ) => r . json ( ) ) ;
if ( verifiedUser . success === true ) {
  // If successful, proceed!
  // verifiedUser.userId = "107fb578-9559-4540-a0e2-f82ad78852f7";
}