PHPackages                             sebastiancx/webauthn - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. sebastiancx/webauthn

ActiveLibrary[Authentication & Authorization](/categories/authentication)

sebastiancx/webauthn
====================

Web Authentication API server for PHP

v0.0.1(3y ago)0461MITPHPPHP ^8.1

Since Jun 24Pushed 3y agoCompare

[ Source](https://github.com/sebastiancx/webauthn-server)[ Packagist](https://packagist.org/packages/sebastiancx/webauthn)[ RSS](/packages/sebastiancx-webauthn/feed)WikiDiscussions master Synced today

READMEChangelog (1)Dependencies (18)Versions (2)Used By (1)

WebAuthn Relying Party server library for PHP
=============================================

[](#webauthn-relying-party-server-library-for-php)

[![Scrutinizer Code Quality](https://camo.githubusercontent.com/204916fafb0785bb4b60295d33286e42b0d7244216d1dd8361beba20095fc704/68747470733a2f2f7363727574696e697a65722d63692e636f6d2f672f6d616477697a6172642d6f72672f776562617574686e2d7365727665722f6261646765732f7175616c6974792d73636f72652e706e673f623d6d6173746572)](https://scrutinizer-ci.com/g/madwizard-org/webauthn-server/?branch=master)[![Code Coverage](https://camo.githubusercontent.com/25ea08a91d4aca236d11de85bb928329b6f69f09ba32e10500d327da1e80e287/68747470733a2f2f7363727574696e697a65722d63692e636f6d2f672f6d616477697a6172642d6f72672f776562617574686e2d7365727665722f6261646765732f636f7665726167652e706e673f623d6d6173746572)](https://scrutinizer-ci.com/g/madwizard-org/webauthn-server/?branch=master)[![Build Status](https://camo.githubusercontent.com/096a4d6f19d47841f5ef6944e64767b10d494f8efc2232096df572ca861eca7e/68747470733a2f2f7363727574696e697a65722d63692e636f6d2f672f6d616477697a6172642d6f72672f776562617574686e2d7365727665722f6261646765732f6275696c642e706e673f623d6d6173746572)](https://scrutinizer-ci.com/g/madwizard-org/webauthn-server/build-status/master)[![License: MIT](https://camo.githubusercontent.com/fdf2982b9f5d7489dcf44570e714e3a15fce6253e0cc6b5aa61a075aac2ff71b/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4c6963656e73652d4d49542d79656c6c6f772e737667)](https://opensource.org/licenses/MIT)

Current state
-------------

[](#current-state)

Pretty stable but the API may still change slightly until the 1.0 release.

Goal
----

[](#goal)

This library aims to implement the relying party server of the WebAuthn specification in PHP. Important goals are:

- Implement the level 1 WebAuthn specification
- Good quality, secure and maintainable code
- Easy to use for the end-user

Installation
------------

[](#installation)

Installation via composer:

```
composer require sebastiancx/webauthn
```

Supported features
------------------

[](#supported-features)

- > PHP 8.1
- FIDO conformant library
- Attestation types:
    - FIDO U2F
    - Packed
    - TPM
    - Android SafetyNet
    - Android Key
    - Apple
    - None
    - Optional 'unsupported' type to handle future types
- Metadata service support
- Validating metadata
- Extensions:
    - appid

Usage
-----

[](#usage)

The library is still in development so documentation is limited. The general pattern to follow is:

1. Implement `CredentialStoreInterface` (you will need `UserCredential` or your own implementation of `UserCredentialInterface`)
2. Create an instance of `RelyingParty` and use the `ServerBuilder` class to build a server object:

```
$server = (new ServerBuilder())
    ->setRelyingParty($rp)
    ->setCredentialStore($store)
    ->build();
```

3. Use `startRegistration`/`finishRegistration` to register credentials. Be sure to store the temporary `AttestationContext` server side!
4. and `startAuthentication`/`finishAuthentication` to authenticate. Be sure to store the temporary `AssertionContext` server side!

Resources
---------

[](#resources)

[WebAuthn specification](https://www.w3.org/TR/webauthn/)

###  Health Score

22

—

LowBetter than 21% of packages

Maintenance20

Infrequent updates — may be unmaintained

Popularity8

Limited adoption so far

Community11

Small or concentrated contributor base

Maturity43

Maturing project, gaining track record

 Bus Factor1

Top contributor holds 98.5% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Unknown

Total

1

Last Release

1104d ago

### Community

Maintainers

![](https://www.gravatar.com/avatar/a1f67124e988b060bf7da9cb098d5aa7e2623beb5c98078ad61e27a4bcc9b91e?d=identicon)[sebastiancx](/maintainers/sebastiancx)

---

Top Contributors

[![madwizard-thomas](https://avatars.githubusercontent.com/u/12815705?v=4)](https://github.com/madwizard-thomas "madwizard-thomas (194 commits)")[![pevdh](https://avatars.githubusercontent.com/u/6423273?v=4)](https://github.com/pevdh "pevdh (2 commits)")[![SebastianUhlig](https://avatars.githubusercontent.com/u/25252089?v=4)](https://github.com/SebastianUhlig "SebastianUhlig (1 commits)")

###  Code Quality

TestsPHPUnit

Static AnalysisPHPStan

Type Coverage Yes

### Embed Badge

![Health badge](/badges/sebastiancx-webauthn/health.svg)

```
[![Health](https://phpackages.com/badges/sebastiancx-webauthn/health.svg)](https://phpackages.com/packages/sebastiancx-webauthn)
```

###  Alternatives

[tempest/framework

The PHP framework that gets out of your way.

2.2k34.4k15](/packages/tempest-framework)[google/auth

Google Auth Library for PHP

1.4k294.2M217](/packages/google-auth)[shopware/core

Shopware platform is the core for all Shopware ecommerce products.

585.6M568](/packages/shopware-core)[symfony/symfony

The Symfony PHP framework

31.4k87.2M2.2k](/packages/symfony-symfony)[shopware/platform

The Shopware e-commerce core

3.4k1.5M3](/packages/shopware-platform)[symfony/cache

Provides extended PSR-6, PSR-16 (and tags) implementations

4.2k373.5M3.3k](/packages/symfony-cache)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)