Heb
MeProjects

idp

Example for Cloudflare Pages + D1 + KV + WebAuthn (Passkey)

0
0
0
View on GitHub

idp

🌍 Cloudflare Workers (+ Remix) + πŸ“ Cloudflare D1 (+ Drizzle ORM) + πŸ§€ Cloudflare KV + πŸ”‘ WebAuthn (Passkey autofill / Conditional UI)

Disclaimer

undefinedThis is a PoC application and is not suitable for production use.undefined

Description

This is a simple WebAuthn (Passkey) Identity Provider (IdP) that uses Cloudflare Workers, Cloudflare D1, and Cloudflare KV to provide a simple, serverless identity provider.

Mechanism

  • The login page initiates the WebAuthn attestation sequence using the SimpleWebAuthn library.
  • Passkey Autofill is enabled based on information obtained from /assertion/options.
    • If a valid authenticator is available, the application proceeds with logging in using /assertion/result.
      • User information is retrieved from Cloudflare D1 at this point.
  • If there is no user information available from Passkey Autofill, the user is prompted to enter their username.
    • A session with the entered username is generated at /login.
    • SimpleWebAuthn initiates the authenticator registration using /assertion/options (resident Key is required)
    • The result is sent to /assertion/result
      • The session and result are retrieved and saved in Cloudflare D1 with the user’s information.
  • Each challenge is saved in Cloudflare KV.
  • The login request is implemented as a Strategy in remix-auth.
  • Login session is managed by remix-auth and Cloudflare KV.

Dependencies

References

[beta]v0.14.0