@authnomicon/prompts

Prompt components for the Authnomicon project.

@authnomicon/prompts is a set of components for prompting the user within a web browser.

The prompts form a challenge-response protocol to authenticate the user. Prompts may also perform related access control operations, such as identity proofing or obtaining authorization for third-party access.

Prompts are presented in a web browser, and as such present challenges to the user by rendering HTML. The user provides a response by submitting an HTML form. Sequences of prompts are strung together using a series of redirects. Optionally, prompts may be progressively enhanced using client-side JavaScript to enhance the user experience and take advantage of richer capabilities.

Within the context of a overarching authentication or authorization protocol, a prompt or sequence of prompts is often referred to as a "flow" (in the case of OAuth) or a "ceremony" (in the case of WebAuthn). Such flows often require relatively complex per-request state management, which is accomplished using flowstate.

See Also

• @authnomicon/prompts-oob - Components to present prompts to the user via out-of-band channels. Typically used when authorization is needed in non-web-based environments, such as point-of-sale transactions with a cashier or teller and self-service kiosks.

Authors

• Jared Hanson { }

License

The MIT License

Copyright (c) Jared Hanson