coldbox-security-passkeys

Official

Phishing-resistant passkey authentication

AuthorColdBox
Version1.0.0
Installs0

System Documentation

What problem does it solve?

Provide a secure, phishing-resistant alternative to passwords by enabling WebAuthn/FIDO2 passkey registration and authentication in ColdBox applications, reducing password-related attacks and user friction.

Core Features & Use Cases

  • Server-side WebAuthn flows: Generate registration and authentication challenges, verify assertions, and integrate with ColdBox event handlers.
  • Credential lifecycle management: Store public keys, update sign counts, list user devices, and revoke compromised passkeys.
  • Integration example: Add passkey registration and passwordless login to an existing ColdBox site using cbsecurity-passkeys, custom PasskeyStorageService persistence, and routes/handlers for browser interactions.

Quick Start

Add passkey-based WebAuthn registration, authentication, and device management to my ColdBox application using cbsecurity-passkeys and a custom credential storage service.

Dependency Matrix

Required Modules

None required

Components

Standard package

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: coldbox-security-passkeys
Download link: https://github.com/ColdBox/skills/archive/main.zip#coldbox-security-passkeys

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.