PHPackages                             lbuchs/webauthn - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. lbuchs/webauthn

ActiveLibrary[Authentication & Authorization](/categories/authentication)

lbuchs/webauthn
===============

A simple PHP WebAuthn (FIDO2) server library

v2.2.0(1y ago)572807.8k↑28.4%106[39 issues](https://github.com/lbuchs/WebAuthn/issues)[8 PRs](https://github.com/lbuchs/WebAuthn/pulls)12MITPHPPHP >=8.0.0

Since Dec 13Pushed 8mo ago34 watchersCompare

[ Source](https://github.com/lbuchs/WebAuthn)[ Packagist](https://packagist.org/packages/lbuchs/webauthn)[ Docs](https://github.com/lbuchs/webauthn)[ RSS](/packages/lbuchs-webauthn/feed)WikiDiscussions master Synced 1mo ago

READMEChangelog (10)DependenciesVersions (12)Used By (12)

[![Licensed under the MIT License](https://camo.githubusercontent.com/08cef40a9105b6526ca22088bc514fbfdbc9aac1ddbf8d4e6c750e3a88a44dca/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4c6963656e73652d4d49542d626c75652e737667)](https://github.com/lbuchs/WebAuthn/blob/master/LICENSE)[![Requires PHP 7.1.0](https://camo.githubusercontent.com/59374b4e5d4d66758a415c4740f2859d410f658ed70a07baae31772212a35d24/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f5048502d372e312e302d677265656e2e737667)](https://php.net)[![Last Commit](https://camo.githubusercontent.com/2dbde65a83ae8ba7d0f8bc467fdc0c8f962d710c05ded27b6d77df17774ad7bb/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c6173742d636f6d6d69742f6c62756368732f576562417574686e2e737667)](https://github.com/lbuchs/WebAuthn/commits/master)

WebAuthn
========

[](#webauthn)

*A simple PHP WebAuthn (FIDO2) server library*

The goal of this project is to provide a small, lightweight, understandable library to protect logins with passkeys, security keys like Yubico or Solo, fingerprint on Android, or Windows Hello.

Manual
------

[](#manual)

See /\_test for a simple usage of this library. Check [webauthn.lubu.ch](https://webauthn.lubu.ch) for a working example.

### Supported attestation statement formats

[](#supported-attestation-statement-formats)

- android-key ✅
- android-safetynet ✅
- apple ✅
- fido-u2f ✅
- none ✅
- packed ✅
- tpm ✅

Note

This library supports authenticators that are signed with an X.509 certificate or that are self-attested. ECDAA is not supported.

Workflow
--------

[](#workflow)

```
         JAVASCRIPT            |          SERVER
------------------------------------------------------------
                         REGISTRATION

   window.fetch  ----------------->     getCreateArgs
                                             |
navigator.credentials.create        processCreate
                                             |
      alert ok or fail