wwpass-frontend

WWPass authentication and client-side encryption library.

Install

To install library dependencies, run:

npm install

To build a standalone library version, run:

npm run build

Usage

To initialize WWPass QR-code authentication use:

(NPM module, import with namespace)

import * as WWPass from 'wwpass-frontend';

WWPass.authInit({
  qrcode: document.querySelector('#qrcode-container'),
  ticketURL: `${urlBase}getticket.php`,
  callbackURL: `${urlBase}login.php`,
});

(NPM module, cherry-pick)

import { authInit }  from 'wwpass-frontend';

authInit({
  qrcode: document.querySelector('#qrcode-container'),
  ticketURL: `${urlBase}getticket.php`,
  callbackURL: `${urlBase}login.php`,
});

(Standalone script)

<script src="wwpass-frontend.js"></script>
<script>
WWPass.authInit({
  qrcode: document.querySelector('#qrcode'),
  passkey: document.querySelector('#button--login'),
  ticketURL: `${urlBase}getticket.php`,
  callbackURL: `${urlBase}login.php`,
});
</script>

authInit options

• qrcode: DOM element or query selector for authentication QRCode
• passkey: OPTIONAL DOM element or query selector that holds button for hardware PassKey authentication. If the element is empty, default "Authenticate with PassKey" button will be rendered.
• ticketURL: URL to request WWPass ticket for authentication. On request to this URL the server should get new ticket via WWPass server API and return json object with ticket and it's ttl in seconds ex.: {"ticket": "WWPass%20Developers:81f7ba34f27e9707787fd73d43463a3d4b9a0603@p-sp-02-20:16033", "ttl": 600}
• callbackURL: after successful WWPass authentication the user will be redirected to this URL. Following parameters will be appended to the URL:
  • wwp_version: current version of the protocol. For this library it's always 2
  • wwp_ticket: ticket used for authentication
  • wwp_status and wwp_reason: always 200, "OK" for successful authentications
  • wwp_hw: If it's present and != 0, a hardware WWPass key was used for authentication. waitForRemoval() may be called to detect when the user removes their WWPass key
• ppx: OPTIONAL Alternative prefix for callbackURL parameters. Defaults to wwp_
• forcePasskeyButton: OPTIONAL Always show a button for hardware PassKey authentication. If set to true (default for backward compatibility), the button will be always shown. If set to false (recommended), the button will only be shown if any means to communicate with a passKey is detected (WWPass Extention or NPAPI plugin)
• uiType: OPTIONAL type of UI to show. 'button' for authentication on the same mobile device, 'qrcode' to authenticate on other device, 'auto' (default) to use 'button' if mobile device is detected
• uiSwitch: OPTIONAL whether to show an option to switch between ui types (see uiType above). 'auto' (default) shows switch element if mobile device is detected, alternatives are 'always' or 'never'
• uiCallback: OPTIONAL a callback function that will be called when UI-related events happen. Signle argument is the data about the event:
  • { away: true }: User clicked "Login with WWPass button"
  • { refresh: true }: A QR code is about to be refreshed
  • { button: true }: A "Login with WWPass button" is about to be shown
  • { qrcode: true }: A QR code is about to be shown

Support

If you have any questions, contact us [email protected].

License

MIT © WWPass Corporation