Hi all,
I wanted to point out a new WebAuthn / passkeys package for OpenACS, which is
now available on GitHub:
https://github.com/gustafn/webauthn
There is an announcement and some background in the OpenACS forums:
https://openacs.org/forums/message-view?message_id=8740415
https://openacs.org/forums/message-view?message_id=8763608
From the NaviServer side: all protocol-level and C-level support required for
WebAuthn (CBOR decoding, crypto / EC key handling, COSE/WebAuthn-compatible
operations) is already included in the current NaviServer versions from the
GitHub repository. No additional C extensions or external programs are required
beyond what is already in core.
The package currently targets OpenACS, and there are a few OpenACS-specific
dependencies that would need adaptation if someone wanted to reuse it outside
OpenACS, mainly:
user management (user IDs, properties, login/logout, current user resolution)
templating and UI integration (message keys / i18n, page-contract filters,
themed login and passkey-management pages)
Feedback from the NaviServer side is of course very welcome, especially
regarding the crypto / CBOR interfaces used.
Best regards,
Gustaf
_______________________________________________
naviserver-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/naviserver-devel
