{"categories":[{"label":"Cryptography","url":"https://skillfed.io/packages/category/security-cryptography"}],"enrichment":{"capability":"Implements server-side WebAuthn validation for passwordless authentication using FIDO2-compliant authenticators like security keys, biometrics, and platform authenticators.","skillfed_tags":["authentication","cryptography","fido2"],"use_cases":["Add passwordless login to a web application using hardware security keys or platform biometrics.","Implement multi-factor authentication where WebAuthn serves as a second factor alongside passwords.","Build a registration flow that enrolls users' authenticators and stores their public keys server-side.","Verify authentication responses from browser-based WebAuthn ceremonies without managing passwords.","Support cross-platform authentication across desktop, mobile, and web clients with a single server implementation."],"what_it_does":"py_webauthn is a server-side implementation of the WebAuthn specification that handles the cryptographic validation of passwordless authentication credentials. It works with any FIDO2-compliant authenticator\u2014security keys, Touch ID, Face ID, Windows Hello, Android biometrics\u2014and exposes four core methods: generate_registration_options, verify_registration_response, generate_authentication_options, and verify_authentication_response. The library assumes JSON transport between server and browser, with base64url encoding for binary data to avoid extra dependencies.\n\nThe package depends on pyasn1, pyasn1-modules, cbor2, cryptography, and pyOpenSSL to handle the underlying cryptographic operations and ASN.1 parsing required by the WebAuthn spec. It provides helper dataclasses for type-safe construction of inputs and outputs, and utility functions for JSON serialization and base64url conversion. Developers integrate it by generating challenge-based options on the server, sending them to the browser's WebAuthn API, then validating the returned credential against the server-stored challenge.","worth_installing":"Yes. This is a production-stable, actively maintained library with no known vulnerabilities, low install friction, and a permissive license. Install it if you need to add WebAuthn support to a Python backend and are targeting Python 3.10+. The API is straightforward and the dependency footprint is small and well-established."},"id":"webauthn","links":{"html":"https://skillfed.io/packages/webauthn","md":"https://skillfed.io/packages/webauthn.md","pypi":"https://pypi.org/project/webauthn/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-06-29","license_spdx":"BSD-3-Clause","license_treatment":"permissive","name":"webauthn","python_support":"supports_current","summary":"Pythonic WebAuthn"},"popularity":{"monthly_downloads":6984854,"position":1801,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"3.0.0"}