Webauthn Laravel Package

In light of the recent release of the official Laravel Passkeys implementation, this package is now unmaintained.

Project maintainers should migrate to the official library.

The current laragear/webauthn will not be updated any longer. It will remain as-is.

[!WARNING]

This library is considered abandoned for all purposes. Security patches won't be released in the future.

What's Changed

• Fix/5.x/challenge serialization by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/117

Full Changelog: https://github.com/Laragear/WebAuthn/compare/v5.0.0...v5.0.1

Full Changelog: https://github.com/Laragear/WebAuthn/compare/v4.1.0...v5.0.0

What's Changed

• [4.x] Fix number order in README.md by @Reddishye in https://github.com/Laragear/WebAuthn/pull/108
• [4.x] Adds custom validation callback by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/111
• [4.x] Adds custom validation callback by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/112

New Contributors

• @Reddishye made their first contribution in https://github.com/Laragear/WebAuthn/pull/108

Full Changelog: https://github.com/Laragear/WebAuthn/compare/v4.0.1...v4.1.0

What's Changed

• [4.x] Fixes using callbacks for login by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/105
• [4.x] Fixes Android Attestation by setting Resident Key to preferred by default by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/106

Full Changelog: https://github.com/Laragear/WebAuthn/compare/v4.0.0...v4.0.1

What's Changed

• [3.x] User Provider: Do not access rehash function in L10 by @saibotk in https://github.com/Laragear/WebAuthn/pull/101

New Contributors

• @saibotk made their first contribution in https://github.com/Laragear/WebAuthn/pull/101

Give me a TLDR

These are the (mostly) breaking changes:

• Out PHP 8.1, in PHP 8.4, and Laravel 12.x.
• The webAuthnData() method for the user no longer returns an array, now it should return a Laragear\WebAuthn\WebAuthnData instance
• You can change that object (user name and display name) from the Attestation.
• Model migration and customization has been simplified.
• All Enum case have been normalized to PascalCase.

Full Changelog: https://github.com/Laragear/WebAuthn/compare/v3.1.0...v4.0.0

What's Changed

• [3.x] User Provider: Do not access rehash function in L10 by @saibotk in https://github.com/Laragear/WebAuthn/pull/101
• [3.x] PHP 9.4 support by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/102

New Contributors

• @saibotk made their first contribution in https://github.com/Laragear/WebAuthn/pull/101

Full Changelog: https://github.com/Laragear/WebAuthn/compare/v3.1.0...v3.1.1

What's Changed

• [3.x] Adds Login Callbacks by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/95

Full Changelog: https://github.com/Laragear/WebAuthn/compare/v3.0.2...v3.1.0

What's Changed

• [3.x] FIX: userHandle compatibility between webauthn.js and Webpass by @Tugzrida in https://github.com/Laragear/WebAuthn/pull/94

New Contributors

• @Tugzrida made their first contribution in https://github.com/Laragear/WebAuthn/pull/94

Full Changelog: https://github.com/Laragear/WebAuthn/compare/v3.0.1...v3.0.2

What's Changed

• [3.x] Removes lingering error-prone string by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/92

Full Changelog: https://github.com/Laragear/WebAuthn/compare/v3.0.0...v3.0.1

What's Changed

• [3.x] Fixes Challenge expiration type return by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/89
• [3.x] Fixes userHandle UUID not being normalized by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/90
• [3.x] Feat flexible origins by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/91

Full Changelog: https://github.com/Laragear/WebAuthn/compare/v2.0.3...v3.0.0

What's Changed

• [2.x] Fixes database test by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/78
• [2.x] Adds ability to modify registered routes. by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/77

Full Changelog: https://github.com/Laragear/WebAuthn/compare/v2.0.2...v2.0.3

Fixes https://github.com/Laragear/webpass/issues/10

What's Changed

• [1.x] Fixes webpass version [skip-ci] by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/75
• [2.x] Fixes not decoding using BASE64 URL by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/76

Full Changelog: https://github.com/Laragear/WebAuthn/compare/v2.0.1...v2.0.2

What's Changed

• Apply fixes from StyleCI by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/72
• [2.x] Fixes database index name being too long by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/74

Full Changelog: https://github.com/Laragear/WebAuthn/compare/v2.0.0...v2.0.1

Full Changelog: https://github.com/Laragear/WebAuthn/compare/v1.2.4...v2.0.0

What's Changed

• [1.x] Restores original PHP compatibility. by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/70

Full Changelog: https://github.com/Laragear/WebAuthn/compare/v1.2.3...v1.2.4

What's Changed

• [1.x] Removes unnecessary trait by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/67
• [1.x] Updates workflow by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/68
• [1.x] Encourages new WebAuthn JS helper. by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/69

Full Changelog: https://github.com/Laragear/WebAuthn/compare/v1.2.2...v1.2.3

What's Changed

• Use laravel-constraint in CI by @szepeviktor in https://github.com/Laragear/WebAuthn/pull/41
• Update README.md by @tobz-nz in https://github.com/Laragear/WebAuthn/pull/45
• [1.x] Correct support links in composer.json by @donatj in https://github.com/Laragear/WebAuthn/pull/54
• [1.x] Fixes userHandle required even with identified user. by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/66
• [1.x] Fixes Relying Party custom ID by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/65
• [1.x] Remove unused JetBrains Attributes by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/64

New Contributors

• @tobz-nz made their first contribution in https://github.com/Laragear/WebAuthn/pull/45
• @donatj made their first contribution in https://github.com/Laragear/WebAuthn/pull/54

Full Changelog: https://github.com/Laragear/WebAuthn/compare/v1.2.1...v1.2.2

What's Changed

• [1.x] Fixes id length limitation #38 by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/39
• [1.x] Removes internal tag #35 [skip ci] by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/40

Full Changelog: https://github.com/Laragear/WebAuthn/compare/v1.2.0...v1.2.1

What's Changed

• [1.x] Adds PHP 8.2, Laravel 10 Support by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/34

Full Changelog: https://github.com/Laragear/WebAuthn/compare/v1.1.5...v1.2.0

What's Changed

• Update webauthn.js to prevent wrong request urls by @deibertf in https://github.com/Laragear/WebAuthn/pull/30

New Contributors

• @deibertf made their first contribution in https://github.com/Laragear/WebAuthn/pull/30

Full Changelog: https://github.com/Laragear/WebAuthn/compare/v1.1.4...v1.1.5

What's Changed

• [1.1.3] FIX: Query error when disabling all credentials by @Bubka in https://github.com/Laragear/WebAuthn/pull/23
• [1.x] Adds tests for trait, fixing some methods. by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/24

Full Changelog: https://github.com/Laragear/WebAuthn/compare/v1.1.3...v1.1.4

What's Changed

• FIX: relaying_party typo by @Bubka in https://github.com/Laragear/WebAuthn/pull/20
• [minor] correct publishing the config file not working by @fidelisepeter in https://github.com/Laragear/WebAuthn/pull/22

New Contributors

• @Bubka made their first contribution in https://github.com/Laragear/WebAuthn/pull/20
• @fidelisepeter made their first contribution in https://github.com/Laragear/WebAuthn/pull/22

Full Changelog: https://github.com/Laragear/WebAuthn/compare/v1.1.2...v1.1.3

What's Changed

• [1.x] FIX #10 - missing jetbrains/phpstorm-attributes dependency by @ildyria in https://github.com/Laragear/WebAuthn/pull/11
• [1.x] FIX #6 - use class_implements as intended by @ildyria in https://github.com/Laragear/WebAuthn/pull/8
• [1.x] Fix typos in readme. by @ildyria in https://github.com/Laragear/WebAuthn/pull/12
• [1.x] Fix: support for xcrf token by @ildyria in https://github.com/Laragear/WebAuthn/pull/14
• [1.x] Improve CI by @DarkGhostHunter in https://github.com/Laragear/WebAuthn/pull/15
• [1.x] Allow user credential to have id = 0 by @ildyria in https://github.com/Laragear/WebAuthn/pull/16

New Contributors

• @ildyria made their first contribution in https://github.com/Laragear/WebAuthn/pull/11
• @DarkGhostHunter made their first contribution in https://github.com/Laragear/WebAuthn/pull/15

Full Changelog: https://github.com/Laragear/WebAuthn/compare/v1.1.1...v1.1.2

This release fixes #3 , where the morph index is deemed too large for some databases.

Before, you had to publish the routes and register them manually.

Now, this step is simplified: only use WebAuthn::routes() to register a default set of routes.

The previous method will still be available for version 1.x

Start authenticating!