PHPackages                             madwizard/webauthn - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. madwizard/webauthn

ActiveLibrary[Authentication & Authorization](/categories/authentication)

madwizard/webauthn
==================

Web Authentication API server for PHP

v1.0.0(1y ago)6194.9k↓42.4%12[9 issues](https://github.com/madwizard-org/webauthn-server/issues)[1 PRs](https://github.com/madwizard-org/webauthn-server/pulls)1MITPHPPHP ^7.2.0|^8.0CI passing

Since Nov 18Pushed 1y ago5 watchersCompare

[ Source](https://github.com/madwizard-org/webauthn-server)[ Packagist](https://packagist.org/packages/madwizard/webauthn)[ RSS](/packages/madwizard-webauthn/feed)WikiDiscussions master Synced 1mo ago

READMEChangelogDependencies (18)Versions (19)Used By (1)

WebAuthn Relying Party server library for PHP
=============================================

[](#webauthn-relying-party-server-library-for-php)

[![Scrutinizer Code Quality](https://camo.githubusercontent.com/204916fafb0785bb4b60295d33286e42b0d7244216d1dd8361beba20095fc704/68747470733a2f2f7363727574696e697a65722d63692e636f6d2f672f6d616477697a6172642d6f72672f776562617574686e2d7365727665722f6261646765732f7175616c6974792d73636f72652e706e673f623d6d6173746572)](https://scrutinizer-ci.com/g/madwizard-org/webauthn-server/?branch=master)[![Code Coverage](https://camo.githubusercontent.com/25ea08a91d4aca236d11de85bb928329b6f69f09ba32e10500d327da1e80e287/68747470733a2f2f7363727574696e697a65722d63692e636f6d2f672f6d616477697a6172642d6f72672f776562617574686e2d7365727665722f6261646765732f636f7665726167652e706e673f623d6d6173746572)](https://scrutinizer-ci.com/g/madwizard-org/webauthn-server/?branch=master)[![Build Status](https://camo.githubusercontent.com/096a4d6f19d47841f5ef6944e64767b10d494f8efc2232096df572ca861eca7e/68747470733a2f2f7363727574696e697a65722d63692e636f6d2f672f6d616477697a6172642d6f72672f776562617574686e2d7365727665722f6261646765732f6275696c642e706e673f623d6d6173746572)](https://scrutinizer-ci.com/g/madwizard-org/webauthn-server/build-status/master)[![License: MIT](https://camo.githubusercontent.com/fdf2982b9f5d7489dcf44570e714e3a15fce6253e0cc6b5aa61a075aac2ff71b/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4c6963656e73652d4d49542d79656c6c6f772e737667)](https://opensource.org/licenses/MIT)

Current state
-------------

[](#current-state)

Pretty stable but the API may still change slightly until the 1.0 release.

Goal
----

[](#goal)

This library aims to implement the relying party server of the WebAuthn specification in PHP. Important goals are:

- Implement the level 1 WebAuthn specification
- Good quality, secure and maintainable code
- Easy to use for the end-user

Installation
------------

[](#installation)

Installation via composer:

```
composer require madwizard/webauthn
```

Supported features
------------------

[](#supported-features)

- > PHP 7.2
- FIDO conformant library
- Attestation types:
    - FIDO U2F
    - Packed
    - TPM
    - Android SafetyNet
    - Android Key
    - Apple
    - None
    - Optional 'unsupported' type to handle future types
- Metadata service support
- Validating metadata
- Extensions:
    - appid

Usage
-----

[](#usage)

The library is still in development so documentation is limited. The general pattern to follow is:

1. Implement `CredentialStoreInterface` (you will need `UserCredential` or your own implementation of `UserCredentialInterface`)
2. Create an instance of `RelyingParty` and use the `ServerBuilder` class to build a server object:

```
$server = (new ServerBuilder())
    ->setRelyingParty($rp)
    ->setCredentialStore($store)
    ->build();
```

3. Use `startRegistration`/`finishRegistration` to register credentials. Be sure to store the temporary `AttestationContext` server side!
4. and `startAuthentication`/`finishAuthentication` to authenticate. Be sure to store the temporary `AssertionContext` server side!

Resources
---------

[](#resources)

[WebAuthn specification](https://www.w3.org/TR/webauthn/)

###  Health Score

49

—

FairBetter than 95% of packages

Maintenance40

Moderate activity, may be stable

Popularity45

Moderate usage in the ecosystem

Community17

Small or concentrated contributor base

Maturity75

Established project with proven stability

 Bus Factor1

Top contributor holds 99% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~142 days

Recently: every ~216 days

Total

17

Last Release

459d ago

Major Versions

v0.10.0 → v1.0.02025-02-14

PHP version history (4 changes)v0.0.1PHP ^7.1.3

v0.3.0PHP ^7.2.0

v0.6.0PHP >=7.2.0

v0.9.0PHP ^7.2.0|^8.0

### Community

Maintainers

![](https://www.gravatar.com/avatar/a86ef5261b4993a904a9b1c8376acedc500dee77051f69de16a0370c1c97394d?d=identicon)[madwizard](/maintainers/madwizard)

---

Top Contributors

[![madwizard-thomas](https://avatars.githubusercontent.com/u/12815705?v=4)](https://github.com/madwizard-thomas "madwizard-thomas (196 commits)")[![pevdh](https://avatars.githubusercontent.com/u/6423273?v=4)](https://github.com/pevdh "pevdh (2 commits)")

---

Tags

2fafidofido-u2ffido2phprelying-partytwo-factor-authenticationu2fwebauthn

###  Code Quality

TestsPHPUnit

Static AnalysisPHPStan

Type Coverage Yes

### Embed Badge

![Health badge](/badges/madwizard-webauthn/health.svg)

```
[![Health](https://phpackages.com/badges/madwizard-webauthn/health.svg)](https://phpackages.com/packages/madwizard-webauthn)
```

###  Alternatives

[google/auth

Google Auth Library for PHP

1.4k272.7M162](/packages/google-auth)[shopware/platform

The Shopware e-commerce core

3.3k1.5M3](/packages/shopware-platform)[simplesamlphp/simplesamlphp

A PHP implementation of a SAML 2.0 service provider and identity provider.

1.1k12.4M193](/packages/simplesamlphp-simplesamlphp)[tempest/framework

The PHP framework that gets out of your way.

2.1k23.1k9](/packages/tempest-framework)[sulu/sulu

Core framework that implements the functionality of the Sulu content management system

1.3k1.3M152](/packages/sulu-sulu)[shopware/core

Shopware platform is the core for all Shopware ecommerce products.

595.2M386](/packages/shopware-core)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)