Rodauth is Ruby's most advanced authentication framework, designed to work in all rack applications. It's built using Roda and Sequel, but it can be used as middleware in front of web applications that use other web frameworks and database libraries. Rodauth aims to provide strong security for password storage by utilizing separate database accounts if possible on PostgreSQL, MySQL, and Microsoft SQL Server. Configuration is done via a DSL that makes it easy to override any part of the authentication process. Rodauth supports typical authentication features: such as login and logout, changing logins and passwords, and creating, verifying, unlocking, and resetting passwords for accounts. Rodauth also supports many advanced authentication features: * Secure password storage using security definer database functions * Multiple primary multifactor authentication methods (WebAuthn and TOTP), as well as backup multifactor authentication methods (SMS and recovery codes). * Passwordless authentication using email links and WebAuthn authenticators. * Both standard HTML form and JSON API support for all features.

Provides Rails integration for Rodauth.

Web-based WebAuthn (U2F) Helper for CLI operations (SSH login...)

Koi CMS admin framework

Devise is awesome, but we don't need all that UI/UX for PassKeys. This gem is to make it easy to provide a back end that authenticates a mobile front end with PassKeys.

Provides model mixin for Active Record and Sequel that defines password attribute and associations based on Rodauth configuration.

A Warden Strategy for WebAuthn

In Devise you own controllers, models and views. With Booth you don't own the models (much like ActiveStorage). The Controllers you do own, but the implementation is pretty much just calling Booth helpers. The views you own completely, just as in Devise.

Allow Devise users to authenticate via webauthn-compliant passkeys, like Yubikey, FaceID, etc.