Universal 2nd Factor NodeJS Demo

Requirements

• 1 U2F device (e.g. Yubikey)

Quick Start

npm install

Import keystore/server.crt into your keychain. (It's the certificate for HTTPS)

Mark the imported certificate as trusted.

npm start

Then open https://localhost:8001

dev notes

NPMs postinstall script will automatically generate the SSL certificate. But you can also generate the https server credentials manually in ./keystore directory.

openssl req -x509 -out server.crt -keyout server.key \
  -newkey rsa:2048 -nodes -sha256 \
  -subj '/CN=localhost' -extensions EXT -config <( \
   printf "[dn]\nCN=localhost\n[req]\ndistinguished_name = dn\n[EXT]\nsubjectAltName=DNS:localhost\nkeyUsage=digitalSignature\nextendedKeyUsage=serverAuth")

Further reading

For interaction between a yubikey and nodejs directly, see u2f-host-node This is beyond the sope of this demo but nice to read.