Skip to content
OpenSmartRoute
Skillv1.0.0

passkeys

WebAuthn (passkeys) + TOTP MFA wrappers around go-webauthn/webauthn and pquerna/otp.

by golusoris(0) 0 installs
Free
Sign in to install

Free account. Installing gives you the manifest plus copy-paste snippets.

See reviews

About

Imported from golusoris/golusoris (auth/passkeys/AGENTS.md). Install upstream with npx skills add golusoris/golusoris --skill passkeys. Copyright stays with the author.

auth/passkeys

WebAuthn (passkeys) + TOTP MFA wrappers around go-webauthn/webauthn and pquerna/otp.

Surface

  • passkeys.New(opts) — relying-party config (RPID, RPName, RPOrigins).
  • Registration: BeginRegistration(user) → send to browser; FinishRegistration(user, sess, r) → persist credential.
  • Login: BeginLogin(user) / FinishLogin(user, sess, r).
  • TOTP: ProvisionTOTP(issuer, account) → *otp.Key (show URL as QR); VerifyTOTP(secret, code).

Notes

  • User is the webauthn.User interface — apps adapt their model.
  • Persisting Credentials and round-tripping SessionData is the app's responsibility.
  • TOTP uses SHA-1 / 6 digits / 30s period (the standard Google Authenticator profile) and accepts ±1 period clock skew.

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml
targets:
  - https://api.opensmartroute.ai/api/v1/registry/golusoris-golusoris-passkeys/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

golusoris-golusoris-passkeys.ocm.jsonjson
{
  "ocm": "1",
  "id": "golusoris-golusoris-passkeys",
  "kind": "skill",
  "name": "passkeys",
  "description": "WebAuthn (passkeys) + TOTP MFA wrappers around go-webauthn/webauthn and pquerna/otp.",
  "publisher": "golusoris",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "coding"
    ],
    "tags": [
      "skill-md",
      "github-agents"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "WebAuthn (passkeys) + TOTP MFA wrappers around go-webauthn/webauthn and pquerna/otp."
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "github-agents",
      "repository": "https://github.com/golusoris/golusoris",
      "path": "auth/passkeys/AGENTS.md",
      "ref": "d5a862a77ad92addebfb1bb325c0f1707ca2f243",
      "url": "https://github.com/golusoris/golusoris/blob/d5a862a77ad92addebfb1bb325c0f1707ca2f243/auth/passkeys/AGENTS.md",
      "key": "golusoris/golusoris/auth/passkeys/AGENTS.md"
    }
  },
  "instructions": "# auth/passkeys\n\nWebAuthn (passkeys) + TOTP MFA wrappers around go-webauthn/webauthn and pquerna/otp.\n\n## Surface\n\n- `passkeys.New(opts)` — relying-party config (`RPID`, `RPName`, `RPOrigins`).\n- Registration: `BeginRegistration(user)` → send to browser; `FinishRegistration(user, sess, r)` → persist credential.\n- Login: `BeginLogin(user)` / `FinishLogin(user, sess, r)`.\n- TOTP: `ProvisionTOTP(issuer, account)` → `*otp.Key` (show URL as QR); `VerifyTOTP(secret, code)`.\n\n## Notes\n\n- `User` is the `webauthn.User` interface — apps adapt their model.\n- Persisting `Credential`s and round-tripping `S",
  "cost": {
    "context_tokens": 190
  }
}

Fetch it by URL: GET /api/v1/registry/golusoris-golusoris-passkeys/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.