Repository navigation
🚀 ZeroAuth v1.0.0 — Stable General Availability (GA)
ZeroAuth is a lightweight, zero-dependency, self-hosted Passkeys & WebAuthn authentication engine designed for modern web apps, indie hackers, and privacy-first architectures.
🌟 What's New in v1.0.0
- 🧩 Zero-Dependency Core (@zeroauth/core): Under 1,000 LOC, standalone zero-dependency CBOR decoder, COSE/WebCrypto validator (ES256, Ed25519), and AAGUID hardware identification (Apple TouchID/FaceID, Windows Hello, YubiKey, Google Titan).
- 🛡️ Enterprise Security & Universal Server (@zeroauth/server): Built-in anti-phishing origin checks, anti-replay challenge verification, cloned authenticator detection via signature counters, in-memory sliding sessions, and token-bucket rate limiting.
- 🔌 Pluggable Storage Adapters: Native SQLite via
ode:sqlite\ (zero native compilation required) and PostgreSQL adapter for distributed production setups. - 🌐 Universal Web Handler: One-line handler (\createZeroAuthHandler) conforming to Web Standards (\Request\ / \Response), compatible with Next.js (App Router), Remix, Astro, SvelteKit, Express, and Fastify.
- ⚛️ Modern React SDK (@zeroauth/react): Ready-to-use hooks (\usePasskey, \useZeroAuth) and plug-and-play UI components (<PasskeyButton>, <PasskeyList>).
- 🎮 Standalone Demo App: Runnable live sandbox demonstrating multi-passkey registration, cross-device authentication, renaming, and credential revocation.
- 📖 Bilingual Documentation: Full documentation and quickstarts available in both English and Italian.
📦 Packages Included
- @zeroauth/core@1.0.0\
- @zeroauth/server@1.0.0\
- @zeroauth/client@1.0.0\
- @zeroauth/react@1.0.0\
🤝 Sponsorship & Commercial Licensing
ZeroAuth is dual-licensed under GNU AGPLv3 (for open source projects) and a Commercial License (for proprietary/closed-source SaaS products or IP acquisition).
Support ongoing development:
- GitHub Sponsors: github.com/sponsors/MRJonam91
- Ko-fi: ko-fi.com/mrjonam
- Buy Me a Coffee: buymeacoffee.com/mrjonam
- PayPal: paypal.me/manorollo