authkeep-web

Reference web UI server for Login with SIG protocol flows.

The authkeep-web binary serves a reference browser flow and backend endpoints for challenge creation and attestation verification.

Endpoints

  • GET / serves the embedded reference UI.
  • GET /healthz health check endpoint.
  • POST /v1/auth/challenge/create issues a challenge bound to audience, nonce, scopes, and expiry.
  • POST /v1/auth/attestation/verify verifies challenge/attestation binding and replay constraints.

Current Behavior

  • challenge single-use replay protection
  • scope subset enforcement
  • nonce/audience/expiry checks
  • reference-grade validation path for auth UX testing

Run

cargo run -p authkeep-web -- --addr 127.0.0.1:8090

Then open:

  • http://127.0.0.1:8090/