wevmwevmOfficialยท1 Agent Skills Included

webauthx

Production-ready passkey registration and login for web apps

Implements complete WebAuthn passkey sign-up and login flows across server and client. Handles challenge generation, credential creation, signature verification, and authenticator name lookup. Eliminates manual ceremony wiring, insecure challenge storage, and common passkey security mistakes. Ships with a production security checklist covering cookies, sessions, rate limiting, and origin validation.
npx skills add wevm/webauthx --all -g -y

All Skills in This Repository (1)

Pure Emerald Level Indicators

Frequently Asked Questions

FAQPage Schema
How to install webauthx?โ–ผ

Run `npx skills add wevm/webauthx --all -g -y` in your terminal to install this skill globally.

How to add passkey login to my app?โ–ผ

Use Authentication.getOptions on the server to create a challenge, Authentication.sign on the client to prompt the user's passkey, then Authentication.verify on the server to check the signature.

How does passkey registration work with webauthx?โ–ผ

The server calls Registration.getOptions and stores a single-use challenge, the client calls Registration.create to trigger the browser passkey prompt, and the server verifies the credential with Registration.verify before storing the public key.

Is webauthx secure enough for production?โ–ผ

Yes. The skill includes a full security checklist covering HTTPS, single-use challenges, signed cookies, session rotation, rate limiting, and origin validation.

Which frameworks does webauthx support?โ–ผ

It works with any TypeScript server and browser client, and includes a ready-made Hono reference implementation you can copy.

Related Repositories in Software Engineering

View All in Software Engineeringโ†’