{"repo":"aws-samples/webauthn-with-amazon-cognito","free":true,"listed":false,"github":"https://github.com/aws-samples/webauthn-with-amazon-cognito","clone":"git clone https://github.com/aws-samples/webauthn-with-amazon-cognito.git","description":"Demo application for FIDO-based authentication and WebAuthn with Amazon Cognito","language":"JavaScript","stars":118,"topics":["fido2","webauthn","cognito-user-pool","passwordless"],"license":"MIT-0","category":"auth-billing-email","readme_excerpt":"WebAuthn with Amazon Cognito This project is a demonstration of how to implement FIDO-based authentication with Amazon Cognito user pools. Requirements - AWS account and permissions to create CloudFormation stacks, Cognito resources and lambda functions - Nodejs and NPM - Browser and security key that supports FIDO2. Refer to [FIDO Alliance] Deployment steps Clone the project Create Cognito resaources and lambda triggers Wait for the stack to be created successfully and then get the user-pool-id and app-client-id from outputs section. you can do this from CloudFromation console or using describe-stacks command Edit the file public/webauthn-client.js to use the new user-pool that you just created. Install and run the application Note WebAuthn APIs will be exposed by the user-agent only if secure transport is established without errors. This means you have to access the demo application via HTTPS. In the demo recording below, I used AWS Cloud9 which gives you a quick way to deploy and test the app. if you deploy this app on your own workstation or on a separate VM, you need to configure SSL. Here is a quick demo of deploying and running this project in a fresh Cloud9 environment. [FIDO Alliance]: [blog post]: User registration Registration starts by calling createCredential function in webauthn-client.js. This function will construct credentials options object and use it to create credentials with an available authenticator. Creating credentials will use navigator.credentials.c","default_branch":null,"files":null,"tree":[],"storefront":"/r/aws-samples","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/aws-samples/webauthn-with-amazon-cognito/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}