Skip to content

feat(webauthn): add REST endpoints for passkey authentication - #1698

Open
theothersideofgod wants to merge 1 commit into
mainfrom
feat/webauthn-http-endpoints
Open

feat(webauthn): add REST endpoints for passkey authentication#1698
theothersideofgod wants to merge 1 commit into
mainfrom
feat/webauthn-http-endpoints

Conversation

@theothersideofgod

@theothersideofgod theothersideofgod commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

Summary

Added REST endpoints for passkey lifecycle, completing Phase 1 of #1236.

Endpoints

  • POST /auth/webauthn/register/begin
  • POST /auth/webauthn/register/finish
  • POST /auth/webauthn/sign-in/begin
  • POST /auth/webauthn/sign-in/finish

Implementation

  • Integrated @simplewebauthn/server for credential verification
  • Token generation uses DB digest() function (same pattern as sign_in)
  • Wired up to existing webauthnSettings context

Test plan

  • E2E flow verified (Register → Sign-in → API Call)
  • Demo available at constructive-tdd/passkey/

🤖 Generated with Claude Code

- Add /auth/webauthn/register/begin and /finish for passkey registration
- Add /auth/webauthn/sign-in/begin and /finish for passkey authentication
- Use database digest() function for token hashing (same as sign_in)
- Add @simplewebauthn/server dependency

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Added@​simplewebauthn/​types@​12.0.01001007850100
Added@​simplewebauthn/​server@​13.3.2981008891100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants