@authnomicon/prompts v0.0.4
@authnomicon/prompts
Prompt components for the Authnomicon project.
@authnomicon/prompts is a set of components for prompting the user within a
web browser.
The prompts form a challenge-response protocol to authenticate the user. Prompts may also perform related access control operations, such as identity proofing or obtaining authorization for third-party access.
Prompts are presented in a web browser, and as such present challenges to the user by rendering HTML. The user provides a response by submitting an HTML form. Sequences of prompts are strung together using a series of redirects. Optionally, prompts may be progressively enhanced using client-side JavaScript to enhance the user experience and take advantage of richer capabilities.
Within the context of a overarching authentication or authorization protocol,
a prompt or sequence of prompts is often referred to as a "flow" (in the case of
OAuth) or a "ceremony" (in the
case of WebAuthn). Such flows often
require relatively complex per-request state management, which is accomplished
using flowstate.
See Also
- @authnomicon/prompts-oob - Components to present prompts to the user via out-of-band channels. Typically used when authorization is needed in non-web-based environments, such as point-of-sale transactions with a cashier or teller and self-service kiosks.
Authors
- Jared Hanson {
}
License
Copyright (c) Jared Hanson