/ckey

Chrome Key - A Chrome Extension that emulates a Hardware Authentication Device

Primary LanguageTypeScript

Chrome Key

This is a Chrome Extension that emulates a hardware authentication device, allowing you to register with Webauthn-compatible websites without requiring an actual physical device.

Disclaimer

I cannot emphasize enough that this project by no means replaces a Hardware Authentication Device. The use of this extension is aimed exclusively at development, testing and debugging. If you use it in a production environment, do so at your own risk. We will elaborate on the guarantees (and lack of) that this project provides on the last post of the series.

Building

This project uses Webpack for its building pleasures.

$ npm run build

Or if you're iterating quickly...

$ npm run watch

Loading into the browser

You can load the project as an unpacked extension. Upon building, you may load the directory dist/chromium/ into your browser. More details on how to do this here.

PSK Protocol Support

  • Support for PSK WebAuthn Extension
  • Support for PSK Setup API

OS Support

The extension was tested with Ubuntu 18.04 and macOS 10.15.7

Windows 10 does not use the default Chrome popup to search for available authenticators, but uses a Windows Security popup that unfortunately disables the Chrome window until a certain timeout. Once the timeout is reached and the Chrome browser window becomes active again, you can interact the cKey extension.