PHPackages                             madwizard/webauthn - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. madwizard/webauthn

ActiveLibrary[Authentication & Authorization](/categories/authentication)

madwizard/webauthn
==================

Web Authentication API server for PHP

v1.0.0(1y ago)6097.3k↓84.4%13[9 issues](https://github.com/madwizard-org/webauthn-server/issues)[1 PRs](https://github.com/madwizard-org/webauthn-server/pulls)1MITPHPPHP ^7.2.0|^8.0CI failing

Since Nov 18Pushed 1y ago5 watchersCompare

[ Source](https://github.com/madwizard-org/webauthn-server)[ Packagist](https://packagist.org/packages/madwizard/webauthn)[ RSS](/packages/madwizard-webauthn/feed)WikiDiscussions master Synced 3d ago

READMEChangelogDependencies (18)Versions (19)Used By (1)

WebAuthn Relying Party server library for PHP
=============================================

[](#webauthn-relying-party-server-library-for-php)

[![Scrutinizer Code Quality](https://camo.githubusercontent.com/204916fafb0785bb4b60295d33286e42b0d7244216d1dd8361beba20095fc704/68747470733a2f2f7363727574696e697a65722d63692e636f6d2f672f6d616477697a6172642d6f72672f776562617574686e2d7365727665722f6261646765732f7175616c6974792d73636f72652e706e673f623d6d6173746572)](https://scrutinizer-ci.com/g/madwizard-org/webauthn-server/?branch=master)[![Code Coverage](https://camo.githubusercontent.com/25ea08a91d4aca236d11de85bb928329b6f69f09ba32e10500d327da1e80e287/68747470733a2f2f7363727574696e697a65722d63692e636f6d2f672f6d616477697a6172642d6f72672f776562617574686e2d7365727665722f6261646765732f636f7665726167652e706e673f623d6d6173746572)](https://scrutinizer-ci.com/g/madwizard-org/webauthn-server/?branch=master)[![Build Status](https://camo.githubusercontent.com/096a4d6f19d47841f5ef6944e64767b10d494f8efc2232096df572ca861eca7e/68747470733a2f2f7363727574696e697a65722d63692e636f6d2f672f6d616477697a6172642d6f72672f776562617574686e2d7365727665722f6261646765732f6275696c642e706e673f623d6d6173746572)](https://scrutinizer-ci.com/g/madwizard-org/webauthn-server/build-status/master)[![License: MIT](https://camo.githubusercontent.com/fdf2982b9f5d7489dcf44570e714e3a15fce6253e0cc6b5aa61a075aac2ff71b/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4c6963656e73652d4d49542d79656c6c6f772e737667)](https://opensource.org/licenses/MIT)

Current state
-------------

[](#current-state)

Pretty stable but the API may still change slightly until the 1.0 release.

Goal
----

[](#goal)

This library aims to implement the relying party server of the WebAuthn specification in PHP. Important goals are:

- Implement the level 1 WebAuthn specification
- Good quality, secure and maintainable code
- Easy to use for the end-user

Installation
------------

[](#installation)

Installation via composer:

```
composer require madwizard/webauthn
```

Supported features
------------------

[](#supported-features)

- > PHP 7.2
- FIDO conformant library
- Attestation types:
    - FIDO U2F
    - Packed
    - TPM
    - Android SafetyNet
    - Android Key
    - Apple
    - None
    - Optional 'unsupported' type to handle future types
- Metadata service support
- Validating metadata
- Extensions:
    - appid

Usage
-----

[](#usage)

The library is still in development so documentation is limited. The general pattern to follow is:

1. Implement `CredentialStoreInterface` (you will need `UserCredential` or your own implementation of `UserCredentialInterface`)
2. Create an instance of `RelyingParty` and use the `ServerBuilder` class to build a server object:

```
$server = (new ServerBuilder())
    ->setRelyingParty($rp)
    ->setCredentialStore($store)
    ->build();
```

3. Use `startRegistration`/`finishRegistration` to register credentials. Be sure to store the temporary `AttestationContext` server side!
4. and `startAuthentication`/`finishAuthentication` to authenticate. Be sure to store the temporary `AssertionContext` server side!

Resources
---------

[](#resources)

[WebAuthn specification](https://www.w3.org/TR/webauthn/)

###  Health Score

48

—

FairBetter than 93% of packages

Maintenance37

Infrequent updates — may be unmaintained

Popularity44

Moderate usage in the ecosystem

Community18

Small or concentrated contributor base

Maturity75

Established project with proven stability

 Bus Factor1

Top contributor holds 99% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~142 days

Recently: every ~216 days

Total

17

Last Release

505d ago

Major Versions

v0.10.0 → v1.0.02025-02-14

PHP version history (4 changes)v0.0.1PHP ^7.1.3

v0.3.0PHP ^7.2.0

v0.6.0PHP >=7.2.0

v0.9.0PHP ^7.2.0|^8.0

### Community

Maintainers

![](https://www.gravatar.com/avatar/a86ef5261b4993a904a9b1c8376acedc500dee77051f69de16a0370c1c97394d?d=identicon)[madwizard](/maintainers/madwizard)

---

Top Contributors

[![madwizard-thomas](https://avatars.githubusercontent.com/u/12815705?v=4)](https://github.com/madwizard-thomas "madwizard-thomas (196 commits)")[![pevdh](https://avatars.githubusercontent.com/u/6423273?v=4)](https://github.com/pevdh "pevdh (2 commits)")

---

Tags

2fafidofido-u2ffido2phprelying-partytwo-factor-authenticationu2fwebauthn

###  Code Quality

TestsPHPUnit

Static AnalysisPHPStan

Type Coverage Yes

### Embed Badge

![Health badge](/badges/madwizard-webauthn/health.svg)

```
[![Health](https://phpackages.com/badges/madwizard-webauthn/health.svg)](https://phpackages.com/packages/madwizard-webauthn)
```

###  Alternatives

[tempest/framework

The PHP framework that gets out of your way.

2.2k34.4k15](/packages/tempest-framework)[google/auth

Google Auth Library for PHP

1.4k294.2M220](/packages/google-auth)[shopware/core

Shopware platform is the core for all Shopware ecommerce products.

585.6M577](/packages/shopware-core)[symfony/symfony

The Symfony PHP framework

31.4k87.2M2.2k](/packages/symfony-symfony)[shopware/platform

The Shopware e-commerce core

3.4k1.5M3](/packages/shopware-platform)[symfony/cache

Provides extended PSR-6, PSR-16 (and tags) implementations

4.2k373.5M3.3k](/packages/symfony-cache)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)