Skip to content

Instantly share code, notes, and snippets.

@mahnunchik

mahnunchik/index.html

Created September 29, 2023 00:41
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save mahnunchik/596637aaa81d078ef76e2d9e828d0a3c to your computer and use it in GitHub Desktop.
Save mahnunchik/596637aaa81d078ef76e2d9e828d0a3c to your computer and use it in GitHub Desktop.
Download ZIP
WebAuthn Electron
Raw
index.html
<!DOCTYPE html>
<html>
<head>
<meta charset="UTF-8">
<!-- https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP -->
<meta http-equiv="Content-Security-Policy" content="default-src 'self' https://webauthn.io/; script-src 'self' 'unsafe-inline' https://unpkg.com/; style-src 'self' 'unsafe-inline'">
<title>Hello World!</title>
<script src="https://unpkg.com/@simplewebauthn/browser"></script>
</head>
<body>
<h1>Hello World!</h1>
<div>
We are using Node.js <span id="node-version"></span>,
Chromium <span id="chrome-version"></span>,
and Electron <span id="electron-version"></span>.
</div>
<div>
<p>browserSupportsWebAuthn: <span id="browserSupportsWebAuthn"></span><p>
<p>browserSupportsWebAuthnAutofill: <span id="browserSupportsWebAuthnAutofill"></span><p>
</div>
<div class="col-sm-12 mb-3">
<input
type="text"
id="username"
placeholder="example_username"
x-model="username"
autocomplete="username webauthn"
/>
</div>
<button
id="register-button"
onclick="startRegistration()"
>
Register
</button>
<button
id="register-button"
onclick="startAuthentication()"
>
Authenticate
</button>
<script type="module" src="./renderer.js"></script>
</body>
</html>
Raw
main.js
const { app, protocol, net, BrowserWindow } = require('electron')
const path = require('path')
const { pathToFileURL } = require('url');
function createWindow () {
const mainWindow = new BrowserWindow({
width: 800,
height: 600,
})
mainWindow.loadURL('https://webauthn.io/')
mainWindow.webContents.openDevTools()
}
app.whenReady().then(() => {
protocol.handle('https', (req) => {
const { host, pathname } = new URL(req.url);
if (host === 'webauthn.io' && (pathname === '/' || pathname === '/renderer.js' )) {
const url = new URL('.' + (pathname === '/' ? '/index.html' : pathname), pathToFileURL(__filename));
return net.fetch(url);
}
return net.fetch(req, { bypassCustomProtocolHandlers: true });
});
createWindow()
app.on('activate', function () {
if (BrowserWindow.getAllWindows().length === 0) createWindow()
})
})
app.on('window-all-closed', function () {
if (process.platform !== 'darwin') app.quit()
})
Raw
package.json
{
"name": "lumpy-dime-set-9mmzx",
"productName": "lumpy-dime-set-9mmzx",
"description": "My Electron application description",
"keywords": [],
"main": "./main.js",
"version": "1.0.0",
"author": "evlasenko",
"scripts": {
"start": "electron ."
},
"dependencies": {},
"devDependencies": {
"electron": "26.2.2"
}
}
Raw
preload.js
/**
* The preload script runs before. It has access to web APIs
* as well as Electron's renderer process modules and some
* polyfilled Node.js functions.
*
* https://www.electronjs.org/docs/latest/tutorial/sandbox
*/
window.addEventListener('DOMContentLoaded', () => {
const replaceText = (selector, text) => {
const element = document.getElementById(selector)
if (element) element.innerText = text
}
for (const type of ['chrome', 'node', 'electron']) {
replaceText(`${type}-version`, process.versions[type])
}
})
Raw
renderer.js
document.getElementById('browserSupportsWebAuthn').innerHTML = SimpleWebAuthnBrowser.browserSupportsWebAuthn();
document.getElementById('browserSupportsWebAuthnAutofill').innerHTML = await SimpleWebAuthnBrowser.browserSupportsWebAuthnAutofill();
window.startRegistration = async function startRegistration() {
const username = document.getElementById('username').value;
if (!username) {
console.error('Please enter a username to register');
return;
}
const apiRegOptsResp = await fetch('https://webauthn.io/registration/options', {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({
username,
// e.g. 'preferred'
user_verification: 'preferred',
// e.g. 'direct'
attestation: 'none',
// e.g. 'platform'
attachment: 'all',
// e.g. ['es256', 'rs256']
//algorithms,
// e.g. 'preferred'
discoverable_credential: 'preferred',
}),
});
const registrationOptionsJSON = await apiRegOptsResp.json();
console.log('REGISTRATION OPTIONS');
console.log(JSON.stringify(registrationOptionsJSON, null, 2));
// Start WebAuthn registration
const regResp = await SimpleWebAuthnBrowser.startRegistration(registrationOptionsJSON);
console.log('REGISTRATION RESPONSE');
console.log(JSON.stringify(regResp, null, 2));
// Submit response
const apiRegVerResp = await fetch('https://webauthn.io/registration/verification', {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({
username,
response: regResp,
}),
});
const verificationJSON = await apiRegVerResp.json()
// Display outcome
if (verificationJSON.verified === true) {
console.log('Success! Now try to authenticate...');
} else {
console.error(`Registration failed: ${verificationJSON.error}`);
}
}
window.startAuthentication = async function startAuthentication(startConditionalUI = false) {
const username = document.getElementById('username').value;
if (!username) {
console.error('Please enter a username to register');
return;
}
// Submit options
const apiAuthOptsResp = await fetch('https://webauthn.io/authentication/options', {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({
username,
user_verification: 'preferred',
}),
});
const authenticationOptionsJSON = await apiAuthOptsResp.json();
console.log('AUTHENTICATION OPTIONS');
console.log(JSON.stringify(authenticationOptionsJSON, null, 2));
if (authenticationOptionsJSON.error) {
console.error(authenticationOptionsJSON.error);
return;
}
// Start WebAuthn authentication
const authResp = await SimpleWebAuthnBrowser.startAuthentication(authenticationOptionsJSON, startConditionalUI);
console.log('AUTHENTICATION RESPONSE');
console.log(JSON.stringify(authResp, null, 2));
// Submit response
const apiAuthVerResp = await fetch('https://webauthn.io/authentication/verification', {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({
username,
response: authResp,
}),
});
const verificationJSON = await apiAuthVerResp.json()
if (verificationJSON.verified === true) {
console.log('Authentication Success!');
} else {
console.error(`Authentication failed: ${verificationJSON.error}`);
}
}
Raw
styles.css
/* styles.css */
/* Add styles here to customize the appearance of your app */
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment