WebAuthn As-A-Service Protocol

UIID PASSKEY
PROVIDER API &
WEBAUTHN ENGINE.

Outsource WebAuthn FIDO2 passkey infrastructure to UIID. Turn any third-party website into a passwordless platform in minutes with zero cryptographic overhead.

Get API Credentials See Architecture

WEBAUTHN INFRASTRUCTURE
IS COMPLEX & FRAGILE.

Implementing FIDO2 WebAuthn passkeys natively requires parsing raw COSE keys, decoding binary CBOR attestation objects, verifying AAGUID certificates, and tracking authenticator sign counters to prevent replay attacks.

A single flaw in origin validation, challenge entropy, or COSE key verification exposes third-party websites to account takeover vulnerabilities. Most teams waste months building custom WebAuthn parsers instead of shipping product features.

Heavy Cryptographic Overhead

Parsing WebAuthn binary CBOR payloads and COSE public key structures requires complex specialized server dependencies.

Origin & Relying Party Mismatches

Strict browser domain checks block WebAuthn authentication if RP ID or origin domains are misconfigured across staging and production.

OUTSOURCED WEBAUTHN
PASSKEY ENGINE.

UIID acts as an outsourced WebAuthn Relying Party (RP) provider. Register your application in your dashboard, receive API credentials, and delegate FIDO2 passkey registration and verification to UIID via REST API.

✓

Zero Crypto Libraries Required

UIID generates challenges, parses browser attestations, and validates Ed25519 / EC signatures on high-speed servers.

✓

Universal Device Support

Out-of-the-box support for Apple Touch ID / Face ID, Google Password Manager, Windows Hello, 1Password, and YubiKeys.

WEBAUTHN AS-A-SERVICE SPECS

HIGH PERFORMANCE

✓ REST API Endpoints (`/api/v1/passkey-provider/*`)
✓ Dynamic RP Domain & Origin Matching
✓ Sign Counter Replay Protection
✓ Client Credentials Authentication (`client_secret`)

HOW 3RD-PARTY WEBSITES INTEGRATE

1

Request Challenge

Your backend calls /register/begin or /authenticate/begin. UIID returns cryptographically secure WebAuthn options.

2

Biometric Prompt

Your frontend passes options to navigator.credentials.get() or create(). The user verifies via Touch ID or Face ID.

3

Verify Signature

Your backend posts the assertion response to UIID's /finish endpoint. UIID validates the signature and returns verified user claims.

DEVELOPER INTEGRATION EXAMPLE

Initiate passkey registration for external app users in 2 lines of cURL:

curl -X POST https://idp.uiid.linkspreed.com/api/v1/passkey-provider/register/begin \
  -H "Content-Type: application/json" \
  -d '{
    "client_id": "pk_app_your_client_id",
    "client_secret": "sk_app_your_client_secret",
    "external_user_id": "usr_987654",
    "external_user_name": "[email protected]"
  }'

FREQUENTLY ASKED QUESTIONS

No! When using UIID WebAuthn-as-a-Service, your users authenticate directly against your application using their own external user ID (external_user_id). UIID acts purely as the cryptographic WebAuthn Relying Party engine.

When you register your app in Passkey Vault, you specify your exact RP ID (domain name, e.g. acme.com) and Allowed Origins (e.g. https://app.acme.com). Browser security enclaves enforce that passkeys created for your domain can only be used on your domain.

UIID's Go 1.24 WebAuthn verification engine processes attestation and assertion signature checks in under 5 milliseconds.

ENABLE PASSKEYS TODAY.

Outsource your WebAuthn infrastructure to UIID and offer 1-click passwordless biometric authentication to your users.

Get API Key Free Open Passkey Vault

UIID PASSKEY PROVIDER API & WEBAUTHN ENGINE.

WEBAUTHN INFRASTRUCTURE IS COMPLEX & FRAGILE.