Post-Quantum WebAuthn Platform

Build and evaluate WebAuthn authentication flows with post-quantum resilience.

Start Here

• Project Overview — understand the platform goals, architecture, and scope.
• Installation & Setup — bootstrap a local environment in minutes.
• Technology Stack & Dependencies — review language, framework, and tooling decisions.
• Developer Guide — align on coding standards, workflows, and contribution expectations.
• Testing Strategy — learn how the project validates protocol and cryptographic changes.

Architecture & Cryptography

• Core Architecture and System Overview describe how components interact across the stack.
• Data Flow Architecture and Component Interaction Model map request lifecycles end to end.
• Design Patterns and Abstractions covers the guiding principles behind shared modules.
• Post-Quantum Cryptography Implementation details PQC integration, with deep dives into ML DSA Algorithm Integration and PQC Algorithm Detection and Selection.
• Security and Performance Considerations curates PQC-specific risk guidance alongside platform-wide Security Considerations.

Implementation Tracks

Authentication & Protocol

• FIDO2 Protocol Implementation and supporting CTAP2 Commands.
• Flow guides for Authentication Flows, Simple Authentication Interface, and Advanced Authentication Interface.
• Capability references for Authenticator Configuration, PIN_UV Authentication, Large Blob Storage, and Extension Support.

Server Platform

• Server Implementation and Flask Application Structure explain the runtime topology.
• Route Handlers, Shared Utilities & General Endpoints, and Configuration Management document server behavior.

Frontend Platform

• Frontend Implementation and JavaScript Architecture frame browser-side responsibilities.
• UI and state are covered in Template Structure, CSS Styling System, UI Components, UI Interaction Utilities, and State Management System.
• Shared Client Utilities, Form Handling and Input Validation, and Local Storage Implementation focus on operational tooling.
• Client Interfaces and Client Integration guide embedding with external applications.

Metadata Service (MDS)

• Start with Metadata Service (MDS) Integration and MDS Integration.
• Deep-dives include MDS3 Implementation, MDS Data Loading and Caching, MDS Filtering and Search, and Custom Metadata Management.
• Operational guides: MDS Snapshot Update Process, MDS UI State Management, and MDS Validation Errors.

Storage & Data

• Storage & Persistence, Storage Backend, and Credential Artifacts Management.
• Cloud, session, and schema coverage: Google Cloud Storage Integration, Session Metadata Store, and Data Schemas.
• Encoding references: Data Encoding & Transformation, Data Encoding Utilities, and CBOR Encoding_Decoding.

Cross-Platform & HID

• Platform-specific notes for Cross Platform Support, Linux HID Implementation, macOS HID Implementation, Windows HID Implementation, and BSD HID Implementations.
• Transport diagnostics: HID Transport Layer and HID Communication Failures.

Reference & Support

• API Reference consolidates endpoint contracts, with dedicated sections for Server Endpoints, Simple Authentication Flow Endpoints, Advanced Configuration Flow Endpoints, and General Application Endpoints.
• Resilience resources: Deployment & Operations, Troubleshooting, FIDO2 Error Handling, Client Errors, and WebAuthn Specific Errors.
• Terminology: Glossary & References.

---

Use the sidebar to drill into any topic, or jump directly into the areas above for curated entry points. Every guide now opens without redundant reference blocks so you can focus on the material that matters.