// HTTP4K PRO

Kill the password. Ship passkeys.

http4k WebAuthn gives your users phishing-resistant passwordless login with FIDO2 passkeys - the complete registration and authentication ceremonies, handled for you and fully testable.

Read the docs →

Highlights

Truly
Passwordless

Let users sign in with a fingerprint, face, security key, or device PIN. No passwords to store, leak, reset, or phish. Supports passkey-only signup or adding a passkey to an existing login.

Standards
Based

Full W3C WebAuthn / FIDO2 registration and authentication ceremonies, backed by WebAuthn4j and BouncyCastle for attestation, signature, challenge, origin, and sign-counter (clone detection) verification.

Pluggable
By Design

Three small interfaces compose the flow - PasskeyVerifier, PasskeyPersistence, and Principals. Swap in your own credential store and session strategy without touching the ceremony logic.

Testable
In Memory

Ships with InsecurePasskeyVerifier, InMemoryPasskeyPersistence, and a fake authenticator so you can drive the entire passkey flow in fast, out-of-container tests - the http4k way.

Passkeys, start to finish

Instantiate - provide a verifier, credential store, session strategy and choose a user mode. That’s the whole setup.

Instantiate Passkeys

Mount the pre-wired registration & authentication routes into your app, and use a filter to protect resources.

Mount the passkey routes

Register - the browser prompts the user to create a passkey with their fingerprint, face, or device PIN.

Passkey registration prompt

Sign in - one tap. The user authenticates with the passkey and your server establishes the session.

Passkey sign-in prompt
// PRICING

Pricing

http4k WebAuthn is available under the http4k Commercial License. Free for qualifying small businesses (under $1M ARR), non-commercial, non-profit, and research use. Checkout is handled securely by Stripe.

All http4k Pro modules are also automatically included with the Enterprise Edition. Need bulk seats, team licensing, or custom terms? Get in touch.

pumb
scarf