Passlock
A TypeScript library simplifying passkeys, social logins, and user management for web apps, with strong Svelte/SvelteKit support.

Integrate Modern Authentication: Passlock for Passkeys & Social Logins
Passlock is a developer-focused TypeScript library designed to streamline the implementation of cutting-edge authentication mechanisms. It empowers developers to easily add passkey (WebAuthn) functionality, social logins with providers like Apple and Google, and robust user management to their web applications. While offering a framework-agnostic client, it provides specialized tools and a CLI wizard for SvelteKit users, simplifying the creation of secure, user-friendly login experiences with features like biometric authentication.
Features:
- Flexible Passkey Implementation: Utilize passkeys as a primary login method or as a second authentication factor.
- Social Authentication Connectors: Integrate with popular social identity providers such as Apple and Google, with GitHub support forthcoming.
- Biometric User Verification: Incorporate frictionless user authentication through facial or fingerprint recognition technologies.
- Administrative User Control: Manage users effectively with a console for actions like account suspension and passkey revocation.
- Comprehensive Activity Logging: Maintain a detailed audit trail of authentication events for every user account.
- Developer Diagnostics Tool: Access a dedicated web console for inspecting and troubleshooting authentication flows.
- Customizable UI Integration: Retain full control over the user interface with headless component architecture.
- SvelteKit Project Starter: Expedite SvelteKit app development with a CLI wizard that sets up authentication and offers UI templates (Daisy UI, Preline, Shadcn).
- Cross-Framework Client Library: The core client library is designed for compatibility with various JavaScript frontend environments.
- SvelteKit-Specific Enhancements: Benefit from a dedicated wrapper for SvelteKit, providing UI components, form action helpers, and Superforms support.
- Secure Backend Verification: Validate authentication tokens on your server using either a REST API endpoint or the provided Node.js library.
- Cross-Device Authentication Flow: Allow users to authenticate on one device (e.g., desktop) using another (e.g., mobile biometrics).
- Inherent Phishing Resistance: Leverage the security model of passkeys, which are designed to prevent phishing attacks.
Summary:
Passlock provides a comprehensive toolkit for integrating modern authentication solutions like passkeys and social logins into web projects, with a particular focus on simplifying development for SvelteKit applications. It offers client-side libraries for token generation, backend utilities for verification, a user management console, and a CLI for quick project initialization. By abstracting the complexities of WebAuthn and providing flexible UI options, Passlock helps developers build secure and seamless authentication flows.