**Work in progress - use for testing purposes only **
This library aims to implement the relying party server of the WebAuthn specification in PHP. The library is currently being development and not yet ready to be used. APIs may change at any time until the first stable release.
Installation via composer:
composer require madwizard/webauthn:^0.0.1
Automatically built reference documentation (for both this library and the separate Symfony bundle):
https://madwizard-thomas.github.io/webauthn/
If you want to integrate this library in a symfony project, have a look at the webuathn-server-bundle package.
This library is still in development! Currently supported features are:
Attestation types:
- FIDO U2F
- Packed
- TPM
- None
Attestation is not yet verified with trusted anchors or the metadata service but the attestation itself is validated for correctness and consistency.
The library is still in development so documentation is limited. The general pattern to follow is:
- Write a class implementing
UserCredentialInterface
. - Implement
CredentialStoreInterface
. - Create an instance of
WebAuthnServer
with aWebAuthnConfiguration
object and the credential store. - Use
startRegistration
/finishRegistration
to register credentials. Be sure to store the temporaryAttestationContext
server side! - and
startAuthentication
/finishAuthentication
to authenticate. . Be sure to store the temporaryAssertionContext
server side!