All these values would be returned from some server that you host.

1 min readApr 16, 2019

All these values would be returned from some server that you host. You would fetch it yourself with a GET or POST request to your server or any protocol you like. The FIDO API does not do any of this for you

Here are a few open source example servers that you can use or look at:

A demonstration of the WebAuthn specification

Demonstration of the WebAuthn specification.

webauthn.io

WebAuthn demo

This demo will let you create a user and register using WebAuthn, then authenticate yourself without a password.

webauthn.org

WebAuthn checker - W3C CR Mode

This is the CR attestation mode checker. It's a work-in-progress.. Code is on Github, though deployment is manual.

webauthn.bin.coffee

Sign in - Google Accounts

Edit description

webauthndemo.appspot.com