Demo relying party
A real WebAuthn server (SimpleWebAuthn) for the PassKi sample: server-side challenges (5 min, single use), signature verification and a clear verdict. Demo users are anonymous and expire after 24 h.
RP ID passki.alirezaiyan.com · Android package com.alirezaiyan.passki
Accepted origins:
https://passki.alirezaiyan.com android:apk-key-hash:yWQPamiQr2wmSdy7q5R5I5Nc_BCL3wMgeARgXFt5SQM
API
POST | /api/demo/register/options | {username?} → creation options; user.id is your demo user handle (24 h) |
POST | /api/demo/register/verify | RegistrationResponseJSON, or {response, capture: {platform}} to share it as a test fixture |
POST | /api/demo/login/options | {userHandle?} → request options (discoverable without a handle) |
POST | /api/demo/login/verify | AuthenticationResponseJSON → verdict with signCount |
GET | /api/demo/server-config | {rpId, origins} accepted by the demo |
GET | /api/demo/fixtures?platform=android | opt-in captured registration responses (last 20 per platform, 7 days) |
GET | /.well-known/assetlinks.json | demo package + fingerprints |
GET | /.well-known/apple-app-site-association | base app IDs + self-service entries |
iOS: add your Team ID to the demo domain
Your Team ID differs from ours, so the sample can't be signed for our AASA entry. Register your app ID here; it is listed in the demo AASA for 7 days. Use webcredentials:passki.alirezaiyan.com?mode=developer in your entitlements and enable Settings > Developer > Associated Domains Development, so the device reads the file directly instead of Apple's CDN.
Active entries on passki.alirezaiyan.com
None right now.