implementing-hardware-security-key-authentication - Build FIDO2/WebAuthn RP Server for Hardware Key Auth
Build a FIDO2/WebAuthn RP server, run registration and authentication ceremonies, persist credential records, and enroll hardware security keys.
Tags
Updated: 2026-09-21Capabilities
What this skill does
- Configure RP identity and server
- Run WebAuthn registration ceremony
- Run WebAuthn authentication ceremony
- Persist credential records
- Enroll roaming and platform authenticators
- Migrate password authentication to passkeys
Inputs
- RP configuration data
- HTTPS request origin
- User entity parameters
- Authenticator selection policy
Outputs
- Persisted credential records
- Verified registration and authentication results
- Enrolled authenticator records
Requirements
- HTTPS secure origin in production
- python-fido2 library version 2.0 or higher
- Backup key recovery path
