W

webauthn

Small service that relays a WebAuthn/FIDO2 assertion request to the security key on your laptop, so headless tools like icloudpd can do security-key 2FA. AGPL-3.0.

icloudpd fork with FIDO2 security-key 2FA (local or remote key relay), Advanced Data Protection web-access consent, and clearer sign-in error pages. MIT.

Native TPM 2.0 Software Stack for Crystal featuring NV key persistence, OpenSSL 3.5 NIST P-256 FIDO2 credentials, KDFa parameter encryption, and O(1) nonce-reuse detection.

Memory-safe Canonical CBOR (RFC 8949 §4.2 and CTAP2 §6) encoder and decoder for Crystal with IEEE 754 float narrowing and strict validation.

Mirror of github.com/DuarteSantos8/openGym (home of the project) — CI here builds the signed APK and the images. Self-hosted gym & body-weight tracker: routines, workouts, muscle map, imports, passkeys, AI coach.

Apislash auth SDK — quantum-aware authentication for any TypeScript project. AuthManager core + Google/Facebook/Apislash/Passkey providers and TOTP/OTP/Duo MFA. MIT.

Centralized, TPM 2.0 hardware-backed cryptographic identity enclave and multi-protocol bridge for Linux (FIDO2/CTAP2 WebAuthn Passkeys, OpenSSH Agent, GnuPG LibAssuan, age-plugin, encrypted config store).

A Firefox extension that catches conditional mediations and prompts if the user wants to use their hardware key to furfill these requests or want to continue on the normal path (password manager's passkey).

Web::Authn is a Perl port of Duo Labs' py_webauthn (https://github.com/duo-labs/py_webauthn). It implements the Relying Party operations of the W3C WebAuthn Level 2/3 specifications: option generation and cryptographic verification of registration and authentication ceremonies.

Thin TypeScript + zero-dep Python client and recipes to gate high-risk actions behind a payload-bound passkey approval.

The Virtual Security Module (VSM) is a Rust-based cryptographic system designed to manage secure key generation, certificate authorities, and authentication workflows. It provides a hierarchical Signing Authority (SA) structure with deterministic root and sub-CA keys, enabling mTLS authentication and WebAuthn passkey support. Built for resilience and security, VSM ensures reproducible key derivation from a seed phrase while offering flexible certificate management for user authentication and authorization.

Web based authenticator, implementing OAuth2 code flow and BankID-like api interface

A conditional executor for Keycloak login flows, checking if the user has TOTP or Webauthn 2FA enabled

FIDO sample recipes... https://niconico-pun.gitlab.io/fido-sample

FIDO2 Android native sample app