Skip to content

v0.3.0 Beta - Multi-Passkey Management, AAGUID Resolver, Postgres & React UI

Choose a tag to compare

View all tags
@MRJonam91 MRJonam91 released this 26 Sep 09:49
· 5 commits to main since this release
v0.3.0-beta
c56154d

🚀 ZeroAuth v0.3.0 Beta Release

We are excited to announce ZeroAuth v0.3.0 Beta! This milestone delivers production-readiness with multi-device passkey backup management, hardware AAGUID model resolution, a production PostgreSQL adapter, sliding-window rate limiting, and ready-to-use React UI components.

✨ What's New in Beta

  1. 🔑 Multi-Passkey Management:

    • Register multiple backup passkeys per user account (e.g. MacBook Touch ID, iPhone Face ID, YubiKey 5 NFC).
    • Dedicated REST API routes: \GET /credentials, \PATCH /credentials\ (rename key), and \DELETE /credentials\ (revoke key).

  2. 🏷️ AAGUID Hardware Model Resolution:

    • Automatic identification of hardware authenticators: Apple iCloud Keychain, Touch ID / Face ID, Windows Hello, YubiKey 5 Series, and Google Password Manager.

  3. 🛡️ Built-in Rate Limiter (Anti-Abuse / DoS Mitigation):

    • Sliding-window rate limiter protecting challenge generation endpoints against brute-force attacks and resource exhaustion.

  4. 🐘 PostgreSQL Storage Adapter (\PostgresStorageAdapter):

    • Production SQL driver compatible with standard PostgreSQL, Supabase, Neon, and Vercel Postgres, complete with standard DDL in \docs/postgres-schema.sql.

  5. ⚛️ Pre-built React UI Components:

    • <PasskeyButton>: biometric styled button with customizable variants.
    • <PasskeyList>: full interactive passkey management list supporting renaming and revocation.

  6. 🧪 26 Automated Tests (100% Pass Rate):

    • Coverage for CBOR edge-cases, AAGUID resolution, multi-credential workflows, rate limiting, anti-phishing, anti-replay, and clone detection.

  7. 🪶 Ultra-compact Core Compliance:

    • @zeroauth/core\ remains at only 833 LOC, strictly adhering to the < 1,500 LOC rule for zero-bloat transparency.

💖 Support the Project

ZeroAuth is 100% free and open-source under a Dual-Licensing model.
If it saves your project expensive Auth0 / Clerk fees, support ongoing development:

💼 Commercial Licensing & Project Buyout

Distributed under GNU AGPLv3 with Commercial Proprietary Licensing available for closed-source SaaS applications and full IP acquisition: https://github.com/MRJonam91

Assets 2
Loading