From f9d21f4d1f882eb7c16a7df18b9cc435b361cd40 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Matej=20Ba=C4=8Do?= <matejbaco2000@gmail.com>
Date: Sat, 10 Feb 2024 12:26:43 +0000
Subject: [PATCH 1/6] WIP: Implement auth with passkey in Node

---
 node/authenticate-with-passkey/.gitignore     | 130 ++++++
 .../.prettierrc.json                          |   6 +
 node/authenticate-with-passkey/README.md      |  21 +
 node/authenticate-with-passkey/appwrite.json  |  26 ++
 .../package-lock.json                         | 430 ++++++++++++++++++
 node/authenticate-with-passkey/package.json   |  18 +
 node/authenticate-with-passkey/setup/setup.sh |   1 +
 .../authenticate-with-passkey/src/appwrite.js |  51 +++
 node/authenticate-with-passkey/src/main.js    | 108 +++++
 node/authenticate-with-passkey/src/utils.js   |  64 +++
 .../static/index.html                         | 175 +++++++
 11 files changed, 1030 insertions(+)
 create mode 100644 node/authenticate-with-passkey/.gitignore
 create mode 100644 node/authenticate-with-passkey/.prettierrc.json
 create mode 100644 node/authenticate-with-passkey/README.md
 create mode 100644 node/authenticate-with-passkey/appwrite.json
 create mode 100644 node/authenticate-with-passkey/package-lock.json
 create mode 100644 node/authenticate-with-passkey/package.json
 create mode 100644 node/authenticate-with-passkey/setup/setup.sh
 create mode 100644 node/authenticate-with-passkey/src/appwrite.js
 create mode 100644 node/authenticate-with-passkey/src/main.js
 create mode 100644 node/authenticate-with-passkey/src/utils.js
 create mode 100644 node/authenticate-with-passkey/static/index.html

diff --git a/node/authenticate-with-passkey/.gitignore b/node/authenticate-with-passkey/.gitignore
new file mode 100644
index 00000000..6a7d6d8e
--- /dev/null
+++ b/node/authenticate-with-passkey/.gitignore
@@ -0,0 +1,130 @@
+# Logs
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+.pnpm-debug.log*
+
+# Diagnostic reports (https://nodejs.org/api/report.html)
+report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
+
+# Runtime data
+pids
+*.pid
+*.seed
+*.pid.lock
+
+# Directory for instrumented libs generated by jscoverage/JSCover
+lib-cov
+
+# Coverage directory used by tools like istanbul
+coverage
+*.lcov
+
+# nyc test coverage
+.nyc_output
+
+# Grunt intermediate storage (https://gruntjs.com/creating-plugins#storing-task-files)
+.grunt
+
+# Bower dependency directory (https://bower.io/)
+bower_components
+
+# node-waf configuration
+.lock-wscript
+
+# Compiled binary addons (https://nodejs.org/api/addons.html)
+build/Release
+
+# Dependency directories
+node_modules/
+jspm_packages/
+
+# Snowpack dependency directory (https://snowpack.dev/)
+web_modules/
+
+# TypeScript cache
+*.tsbuildinfo
+
+# Optional npm cache directory
+.npm
+
+# Optional eslint cache
+.eslintcache
+
+# Optional stylelint cache
+.stylelintcache
+
+# Microbundle cache
+.rpt2_cache/
+.rts2_cache_cjs/
+.rts2_cache_es/
+.rts2_cache_umd/
+
+# Optional REPL history
+.node_repl_history
+
+# Output of 'npm pack'
+*.tgz
+
+# Yarn Integrity file
+.yarn-integrity
+
+# dotenv environment variable files
+.env
+.env.development.local
+.env.test.local
+.env.production.local
+.env.local
+
+# parcel-bundler cache (https://parceljs.org/)
+.cache
+.parcel-cache
+
+# Next.js build output
+.next
+out
+
+# Nuxt.js build / generate output
+.nuxt
+dist
+
+# Gatsby files
+.cache/
+# Comment in the public line in if your project uses Gatsby and not Next.js
+# https://nextjs.org/blog/next-9-1#public-directory-support
+# public
+
+# vuepress build output
+.vuepress/dist
+
+# vuepress v2.x temp and cache directory
+.temp
+.cache
+
+# Docusaurus cache and generated files
+.docusaurus
+
+# Serverless directories
+.serverless/
+
+# FuseBox cache
+.fusebox/
+
+# DynamoDB Local files
+.dynamodb/
+
+# TernJS port file
+.tern-port
+
+# Stores VSCode versions used for testing VSCode extensions
+.vscode-test
+
+# yarn v2
+.yarn/cache
+.yarn/unplugged
+.yarn/build-state.yml
+.yarn/install-state.gz
+.pnp.*
\ No newline at end of file
diff --git a/node/authenticate-with-passkey/.prettierrc.json b/node/authenticate-with-passkey/.prettierrc.json
new file mode 100644
index 00000000..0a725205
--- /dev/null
+++ b/node/authenticate-with-passkey/.prettierrc.json
@@ -0,0 +1,6 @@
+{
+  "trailingComma": "es5",
+  "tabWidth": 2,
+  "semi": true,
+  "singleQuote": true
+}
diff --git a/node/authenticate-with-passkey/README.md b/node/authenticate-with-passkey/README.md
new file mode 100644
index 00000000..3614c805
--- /dev/null
+++ b/node/authenticate-with-passkey/README.md
@@ -0,0 +1,21 @@
+# 📬 Node.js Authenticate with Passkey
+
+Sign-in with passkey into Appwrite Account.
+
+## 🧰 Usage
+
+TODO
+
+## ⚙️ Configuration
+
+| Setting           | Value           |
+| ----------------- | --------------- |
+| Runtime           | Node (18.0)     |
+| Entrypoint        | `src/main.js`   |
+| Build Commands    | `npm install && npm run setup` |
+| Permissions       | `any`           |
+| Timeout (Seconds) | 15              |
+
+## 🔒 Environment Variables
+
+TODO (APPWRITE_API_KEY, RP_NAME, RP_ID, APPWRITE_ENDPOINT, ALLOWED_ORIGIN)
\ No newline at end of file
diff --git a/node/authenticate-with-passkey/appwrite.json b/node/authenticate-with-passkey/appwrite.json
new file mode 100644
index 00000000..9783a03e
--- /dev/null
+++ b/node/authenticate-with-passkey/appwrite.json
@@ -0,0 +1,26 @@
+{
+    "projectId": "65c767c0831640a7a150",
+    "projectName": "Passkey",
+    "functions": [
+        {
+            "$id": "authenticateWithPasskey",
+            "name": "authenticateWithPasskey",
+            "runtime": "node-18.0",
+            "execute": [
+                "any"
+            ],
+            "events": [],
+            "schedule": "",
+            "timeout": 15,
+            "enabled": true,
+            "logging": true,
+            "entrypoint": "src/main.js",
+            "commands": "npm install && npm run setup",
+            "ignore": [
+                "node_modules",
+                ".npm"
+            ],
+            "path": "./"
+        }
+    ]
+}
\ No newline at end of file
diff --git a/node/authenticate-with-passkey/package-lock.json b/node/authenticate-with-passkey/package-lock.json
new file mode 100644
index 00000000..8b4632cd
--- /dev/null
+++ b/node/authenticate-with-passkey/package-lock.json
@@ -0,0 +1,430 @@
+{
+  "name": "authenticate-with-passkey",
+  "version": "1.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "authenticate-with-passkey",
+      "version": "1.0.0",
+      "dependencies": {
+        "@simplewebauthn/server": "^9.0.2",
+        "node-appwrite": "npm:@appwrite.io/console@0.6.0-rc.8"
+      },
+      "devDependencies": {
+        "prettier": "^3.0.0"
+      }
+    },
+    "node_modules/@cbor-extract/cbor-extract-darwin-arm64": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/@cbor-extract/cbor-extract-darwin-arm64/-/cbor-extract-darwin-arm64-2.2.0.tgz",
+      "integrity": "sha512-P7swiOAdF7aSi0H+tHtHtr6zrpF3aAq/W9FXx5HektRvLTM2O89xCyXF3pk7pLc7QpaY7AoaE8UowVf9QBdh3w==",
+      "cpu": [
+        "arm64"
+      ],
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@cbor-extract/cbor-extract-darwin-x64": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/@cbor-extract/cbor-extract-darwin-x64/-/cbor-extract-darwin-x64-2.2.0.tgz",
+      "integrity": "sha512-1liF6fgowph0JxBbYnAS7ZlqNYLf000Qnj4KjqPNW4GViKrEql2MgZnAsExhY9LSy8dnvA4C0qHEBgPrll0z0w==",
+      "cpu": [
+        "x64"
+      ],
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@cbor-extract/cbor-extract-linux-arm": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/@cbor-extract/cbor-extract-linux-arm/-/cbor-extract-linux-arm-2.2.0.tgz",
+      "integrity": "sha512-QeBcBXk964zOytiedMPQNZr7sg0TNavZeuUCD6ON4vEOU/25+pLhNN6EDIKJ9VLTKaZ7K7EaAriyYQ1NQ05s/Q==",
+      "cpu": [
+        "arm"
+      ],
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@cbor-extract/cbor-extract-linux-arm64": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/@cbor-extract/cbor-extract-linux-arm64/-/cbor-extract-linux-arm64-2.2.0.tgz",
+      "integrity": "sha512-rQvhNmDuhjTVXSPFLolmQ47/ydGOFXtbR7+wgkSY0bdOxCFept1hvg59uiLPT2fVDuJFuEy16EImo5tE2x3RsQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@cbor-extract/cbor-extract-linux-x64": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/@cbor-extract/cbor-extract-linux-x64/-/cbor-extract-linux-x64-2.2.0.tgz",
+      "integrity": "sha512-cWLAWtT3kNLHSvP4RKDzSTX9o0wvQEEAj4SKvhWuOVZxiDAeQazr9A+PSiRILK1VYMLeDml89ohxCnUNQNQNCw==",
+      "cpu": [
+        "x64"
+      ],
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@cbor-extract/cbor-extract-win32-x64": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/@cbor-extract/cbor-extract-win32-x64/-/cbor-extract-win32-x64-2.2.0.tgz",
+      "integrity": "sha512-l2M+Z8DO2vbvADOBNLbbh9y5ST1RY5sqkWOg/58GkUPBYou/cuNZ68SGQ644f1CvZ8kcOxyZtw06+dxWHIoN/w==",
+      "cpu": [
+        "x64"
+      ],
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@hexagon/base64": {
+      "version": "1.1.28",
+      "resolved": "https://registry.npmjs.org/@hexagon/base64/-/base64-1.1.28.tgz",
+      "integrity": "sha512-lhqDEAvWixy3bZ+UOYbPwUbBkwBq5C1LAJ/xPC8Oi+lL54oyakv/npbA0aU2hgCsx/1NUd4IBvV03+aUBWxerw=="
+    },
+    "node_modules/@peculiar/asn1-android": {
+      "version": "2.3.10",
+      "resolved": "https://registry.npmjs.org/@peculiar/asn1-android/-/asn1-android-2.3.10.tgz",
+      "integrity": "sha512-z9Rx9cFJv7UUablZISe7uksNbFJCq13hO0yEAOoIpAymALTLlvUOSLnGiQS7okPaM5dP42oTLhezH6XDXRXjGw==",
+      "dependencies": {
+        "@peculiar/asn1-schema": "^2.3.8",
+        "asn1js": "^3.0.5",
+        "tslib": "^2.6.2"
+      }
+    },
+    "node_modules/@peculiar/asn1-ecc": {
+      "version": "2.3.8",
+      "resolved": "https://registry.npmjs.org/@peculiar/asn1-ecc/-/asn1-ecc-2.3.8.tgz",
+      "integrity": "sha512-Ah/Q15y3A/CtxbPibiLM/LKcMbnLTdUdLHUgdpB5f60sSvGkXzxJCu5ezGTFHogZXWNX3KSmYqilCrfdmBc6pQ==",
+      "dependencies": {
+        "@peculiar/asn1-schema": "^2.3.8",
+        "@peculiar/asn1-x509": "^2.3.8",
+        "asn1js": "^3.0.5",
+        "tslib": "^2.6.2"
+      }
+    },
+    "node_modules/@peculiar/asn1-rsa": {
+      "version": "2.3.8",
+      "resolved": "https://registry.npmjs.org/@peculiar/asn1-rsa/-/asn1-rsa-2.3.8.tgz",
+      "integrity": "sha512-ES/RVEHu8VMYXgrg3gjb1m/XG0KJWnV4qyZZ7mAg7rrF3VTmRbLxO8mk+uy0Hme7geSMebp+Wvi2U6RLLEs12Q==",
+      "dependencies": {
+        "@peculiar/asn1-schema": "^2.3.8",
+        "@peculiar/asn1-x509": "^2.3.8",
+        "asn1js": "^3.0.5",
+        "tslib": "^2.6.2"
+      }
+    },
+    "node_modules/@peculiar/asn1-schema": {
+      "version": "2.3.8",
+      "resolved": "https://registry.npmjs.org/@peculiar/asn1-schema/-/asn1-schema-2.3.8.tgz",
+      "integrity": "sha512-ULB1XqHKx1WBU/tTFIA+uARuRoBVZ4pNdOA878RDrRbBfBGcSzi5HBkdScC6ZbHn8z7L8gmKCgPC1LHRrP46tA==",
+      "dependencies": {
+        "asn1js": "^3.0.5",
+        "pvtsutils": "^1.3.5",
+        "tslib": "^2.6.2"
+      }
+    },
+    "node_modules/@peculiar/asn1-x509": {
+      "version": "2.3.8",
+      "resolved": "https://registry.npmjs.org/@peculiar/asn1-x509/-/asn1-x509-2.3.8.tgz",
+      "integrity": "sha512-voKxGfDU1c6r9mKiN5ZUsZWh3Dy1BABvTM3cimf0tztNwyMJPhiXY94eRTgsMQe6ViLfT6EoXxkWVzcm3mFAFw==",
+      "dependencies": {
+        "@peculiar/asn1-schema": "^2.3.8",
+        "asn1js": "^3.0.5",
+        "ipaddr.js": "^2.1.0",
+        "pvtsutils": "^1.3.5",
+        "tslib": "^2.6.2"
+      }
+    },
+    "node_modules/@simplewebauthn/server": {
+      "version": "9.0.2",
+      "resolved": "https://registry.npmjs.org/@simplewebauthn/server/-/server-9.0.2.tgz",
+      "integrity": "sha512-aaWA+qVOU4byk5IDb/l+M1+7dmrAJhTb4ISJHucpsgRQcMMEes76tbGIqO2JQuA7N50tc/OBrnGKBjoKYG1kSw==",
+      "dependencies": {
+        "@hexagon/base64": "^1.1.27",
+        "@peculiar/asn1-android": "^2.3.10",
+        "@peculiar/asn1-ecc": "^2.3.8",
+        "@peculiar/asn1-rsa": "^2.3.8",
+        "@peculiar/asn1-schema": "^2.3.8",
+        "@peculiar/asn1-x509": "^2.3.8",
+        "@simplewebauthn/types": "^9.0.1",
+        "cbor-x": "^1.5.2",
+        "cross-fetch": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=16.0.0"
+      }
+    },
+    "node_modules/@simplewebauthn/types": {
+      "version": "9.0.1",
+      "resolved": "https://registry.npmjs.org/@simplewebauthn/types/-/types-9.0.1.tgz",
+      "integrity": "sha512-tGSRP1QvsAvsJmnOlRQyw/mvK9gnPtjEc5fg2+m8n+QUa+D7rvrKkOYyfpy42GTs90X3RDOnqJgfHt+qO67/+w=="
+    },
+    "node_modules/asn1js": {
+      "version": "3.0.5",
+      "resolved": "https://registry.npmjs.org/asn1js/-/asn1js-3.0.5.tgz",
+      "integrity": "sha512-FVnvrKJwpt9LP2lAMl8qZswRNm3T4q9CON+bxldk2iwk3FFpuwhx2FfinyitizWHsVYyaY+y5JzDR0rCMV5yTQ==",
+      "dependencies": {
+        "pvtsutils": "^1.3.2",
+        "pvutils": "^1.1.3",
+        "tslib": "^2.4.0"
+      },
+      "engines": {
+        "node": ">=12.0.0"
+      }
+    },
+    "node_modules/asynckit": {
+      "version": "0.4.0",
+      "resolved": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz",
+      "integrity": "sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q=="
+    },
+    "node_modules/cbor-extract": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/cbor-extract/-/cbor-extract-2.2.0.tgz",
+      "integrity": "sha512-Ig1zM66BjLfTXpNgKpvBePq271BPOvu8MR0Jl080yG7Jsl+wAZunfrwiwA+9ruzm/WEdIV5QF/bjDZTqyAIVHA==",
+      "hasInstallScript": true,
+      "optional": true,
+      "dependencies": {
+        "node-gyp-build-optional-packages": "5.1.1"
+      },
+      "bin": {
+        "download-cbor-prebuilds": "bin/download-prebuilds.js"
+      },
+      "optionalDependencies": {
+        "@cbor-extract/cbor-extract-darwin-arm64": "2.2.0",
+        "@cbor-extract/cbor-extract-darwin-x64": "2.2.0",
+        "@cbor-extract/cbor-extract-linux-arm": "2.2.0",
+        "@cbor-extract/cbor-extract-linux-arm64": "2.2.0",
+        "@cbor-extract/cbor-extract-linux-x64": "2.2.0",
+        "@cbor-extract/cbor-extract-win32-x64": "2.2.0"
+      }
+    },
+    "node_modules/cbor-x": {
+      "version": "1.5.8",
+      "resolved": "https://registry.npmjs.org/cbor-x/-/cbor-x-1.5.8.tgz",
+      "integrity": "sha512-gc3bHBsvG6GClCY6c0/iip+ghlqizkVp+TtaL927lwvP4VP9xBdi1HmqPR5uj/Mj/0TOlngMkIYa25wKg+VNrQ==",
+      "optionalDependencies": {
+        "cbor-extract": "^2.2.0"
+      }
+    },
+    "node_modules/combined-stream": {
+      "version": "1.0.8",
+      "resolved": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz",
+      "integrity": "sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==",
+      "dependencies": {
+        "delayed-stream": "~1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/cross-fetch": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/cross-fetch/-/cross-fetch-4.0.0.tgz",
+      "integrity": "sha512-e4a5N8lVvuLgAWgnCrLr2PP0YyDOTHa9H/Rj54dirp61qXnNq46m82bRhNqIA5VccJtWBvPTFRV3TtvHUKPB1g==",
+      "dependencies": {
+        "node-fetch": "^2.6.12"
+      }
+    },
+    "node_modules/delayed-stream": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz",
+      "integrity": "sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==",
+      "engines": {
+        "node": ">=0.4.0"
+      }
+    },
+    "node_modules/detect-libc": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.0.2.tgz",
+      "integrity": "sha512-UX6sGumvvqSaXgdKGUsgZWqcUyIXZ/vZTrlRT/iobiKhGL0zL4d3osHj3uqllWJK+i+sixDS/3COVEOFbupFyw==",
+      "optional": true,
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/form-data": {
+      "version": "2.5.1",
+      "resolved": "https://registry.npmjs.org/form-data/-/form-data-2.5.1.tgz",
+      "integrity": "sha512-m21N3WOmEEURgk6B9GLOE4RuWOFf28Lhh9qGYeNlGq4VDXUlJy2th2slBNU8Gp8EzloYZOibZJ7t5ecIrFSjVA==",
+      "dependencies": {
+        "asynckit": "^0.4.0",
+        "combined-stream": "^1.0.6",
+        "mime-types": "^2.1.12"
+      },
+      "engines": {
+        "node": ">= 0.12"
+      }
+    },
+    "node_modules/ipaddr.js": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-2.1.0.tgz",
+      "integrity": "sha512-LlbxQ7xKzfBusov6UMi4MFpEg0m+mAm9xyNGEduwXMEDuf4WfzB/RZwMVYEd7IKGvh4IUkEXYxtAVu9T3OelJQ==",
+      "engines": {
+        "node": ">= 10"
+      }
+    },
+    "node_modules/isomorphic-form-data": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/isomorphic-form-data/-/isomorphic-form-data-2.0.0.tgz",
+      "integrity": "sha512-TYgVnXWeESVmQSg4GLVbalmQ+B4NPi/H4eWxqALKj63KsUrcu301YDjBqaOw3h+cbak7Na4Xyps3BiptHtxTfg==",
+      "dependencies": {
+        "form-data": "^2.3.2"
+      }
+    },
+    "node_modules/mime-db": {
+      "version": "1.52.0",
+      "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
+      "integrity": "sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/mime-types": {
+      "version": "2.1.35",
+      "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
+      "integrity": "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==",
+      "dependencies": {
+        "mime-db": "1.52.0"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/node-appwrite": {
+      "name": "@appwrite.io/console",
+      "version": "0.6.0-rc.8",
+      "resolved": "https://registry.npmjs.org/@appwrite.io/console/-/console-0.6.0-rc.8.tgz",
+      "integrity": "sha512-VVOAk5PhfD017U/vVdfzecbhJEXx2w243hoZum0KgnhJAxWDYjkrFSvO5GxTZNsrC0pYvtogGKrYYBxQ3QpfqQ==",
+      "dependencies": {
+        "cross-fetch": "3.1.5",
+        "isomorphic-form-data": "2.0.0"
+      }
+    },
+    "node_modules/node-appwrite/node_modules/cross-fetch": {
+      "version": "3.1.5",
+      "resolved": "https://registry.npmjs.org/cross-fetch/-/cross-fetch-3.1.5.tgz",
+      "integrity": "sha512-lvb1SBsI0Z7GDwmuid+mU3kWVBwTVUbe7S0H52yaaAdQOXq2YktTCZdlAcNKFzE6QtRz0snpw9bNiPeOIkkQvw==",
+      "dependencies": {
+        "node-fetch": "2.6.7"
+      }
+    },
+    "node_modules/node-appwrite/node_modules/node-fetch": {
+      "version": "2.6.7",
+      "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.7.tgz",
+      "integrity": "sha512-ZjMPFEfVx5j+y2yF35Kzx5sF7kDzxuDj6ziH4FFbOp87zKDZNx8yExJIb05OGF4Nlt9IHFIMBkRl41VdvcNdbQ==",
+      "dependencies": {
+        "whatwg-url": "^5.0.0"
+      },
+      "engines": {
+        "node": "4.x || >=6.0.0"
+      },
+      "peerDependencies": {
+        "encoding": "^0.1.0"
+      },
+      "peerDependenciesMeta": {
+        "encoding": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/node-fetch": {
+      "version": "2.7.0",
+      "resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.7.0.tgz",
+      "integrity": "sha512-c4FRfUm/dbcWZ7U+1Wq0AwCyFL+3nt2bEw05wfxSz+DWpWsitgmSgYmy2dQdWyKC1694ELPqMs/YzUSNozLt8A==",
+      "dependencies": {
+        "whatwg-url": "^5.0.0"
+      },
+      "engines": {
+        "node": "4.x || >=6.0.0"
+      },
+      "peerDependencies": {
+        "encoding": "^0.1.0"
+      },
+      "peerDependenciesMeta": {
+        "encoding": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/node-gyp-build-optional-packages": {
+      "version": "5.1.1",
+      "resolved": "https://registry.npmjs.org/node-gyp-build-optional-packages/-/node-gyp-build-optional-packages-5.1.1.tgz",
+      "integrity": "sha512-+P72GAjVAbTxjjwUmwjVrqrdZROD4nf8KgpBoDxqXXTiYZZt/ud60dE5yvCSr9lRO8e8yv6kgJIC0K0PfZFVQw==",
+      "optional": true,
+      "dependencies": {
+        "detect-libc": "^2.0.1"
+      },
+      "bin": {
+        "node-gyp-build-optional-packages": "bin.js",
+        "node-gyp-build-optional-packages-optional": "optional.js",
+        "node-gyp-build-optional-packages-test": "build-test.js"
+      }
+    },
+    "node_modules/prettier": {
+      "version": "3.2.5",
+      "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.2.5.tgz",
+      "integrity": "sha512-3/GWa9aOC0YeD7LUfvOG2NiDyhOWRvt1k+rcKhOuYnMY24iiCphgneUfJDyFXd6rZCAnuLBv6UeAULtrhT/F4A==",
+      "dev": true,
+      "bin": {
+        "prettier": "bin/prettier.cjs"
+      },
+      "engines": {
+        "node": ">=14"
+      },
+      "funding": {
+        "url": "https://github.com/prettier/prettier?sponsor=1"
+      }
+    },
+    "node_modules/pvtsutils": {
+      "version": "1.3.5",
+      "resolved": "https://registry.npmjs.org/pvtsutils/-/pvtsutils-1.3.5.tgz",
+      "integrity": "sha512-ARvb14YB9Nm2Xi6nBq1ZX6dAM0FsJnuk+31aUp4TrcZEdKUlSqOqsxJHUPJDNE3qiIp+iUPEIeR6Je/tgV7zsA==",
+      "dependencies": {
+        "tslib": "^2.6.1"
+      }
+    },
+    "node_modules/pvutils": {
+      "version": "1.1.3",
+      "resolved": "https://registry.npmjs.org/pvutils/-/pvutils-1.1.3.tgz",
+      "integrity": "sha512-pMpnA0qRdFp32b1sJl1wOJNxZLQ2cbQx+k6tjNtZ8CpvVhNqEPRgivZ2WOUev2YMajecdH7ctUPDvEe87nariQ==",
+      "engines": {
+        "node": ">=6.0.0"
+      }
+    },
+    "node_modules/tr46": {
+      "version": "0.0.3",
+      "resolved": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz",
+      "integrity": "sha512-N3WMsuqV66lT30CrXNbEjx4GEwlow3v6rr4mCcv6prnfwhS01rkgyFdjPNBYd9br7LpXV1+Emh01fHnq2Gdgrw=="
+    },
+    "node_modules/tslib": {
+      "version": "2.6.2",
+      "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.6.2.tgz",
+      "integrity": "sha512-AEYxH93jGFPn/a2iVAwW87VuUIkR1FVUKB77NwMF7nBTDkDrrT/Hpt/IrCJ0QXhW27jTBDcf5ZY7w6RiqTMw2Q=="
+    },
+    "node_modules/webidl-conversions": {
+      "version": "3.0.1",
+      "resolved": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz",
+      "integrity": "sha512-2JAn3z8AR6rjK8Sm8orRC0h/bcl/DqL7tRPdGZ4I1CjdF+EaMLmYxBHyXuKL849eucPFhvBoxMsflfOb8kxaeQ=="
+    },
+    "node_modules/whatwg-url": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-5.0.0.tgz",
+      "integrity": "sha512-saE57nupxk6v3HY35+jzBwYa0rKSy0XR8JSxZPwgLr7ys0IBzhGviA1/TUGJLmSVqs8pb9AnvICXEuOHLprYTw==",
+      "dependencies": {
+        "tr46": "~0.0.3",
+        "webidl-conversions": "^3.0.0"
+      }
+    }
+  }
+}
diff --git a/node/authenticate-with-passkey/package.json b/node/authenticate-with-passkey/package.json
new file mode 100644
index 00000000..17bfc1d4
--- /dev/null
+++ b/node/authenticate-with-passkey/package.json
@@ -0,0 +1,18 @@
+{
+  "name": "authenticate-with-passkey",
+  "version": "1.0.0",
+  "description": "",
+  "main": "src/main.js",
+  "type": "module",
+  "scripts": {
+    "format": "prettier --write .",
+    "setup": "sh setup/setup.sh"
+  },
+  "dependencies": {
+    "@simplewebauthn/server": "^9.0.2",
+		"node-appwrite": "npm:@appwrite.io/console@0.6.0-rc.9"
+  },
+  "devDependencies": {
+    "prettier": "^3.0.0"
+  }
+}
diff --git a/node/authenticate-with-passkey/setup/setup.sh b/node/authenticate-with-passkey/setup/setup.sh
new file mode 100644
index 00000000..e68be563
--- /dev/null
+++ b/node/authenticate-with-passkey/setup/setup.sh
@@ -0,0 +1 @@
+echo 'TODO: Create collections'
\ No newline at end of file
diff --git a/node/authenticate-with-passkey/src/appwrite.js b/node/authenticate-with-passkey/src/appwrite.js
new file mode 100644
index 00000000..d4574431
--- /dev/null
+++ b/node/authenticate-with-passkey/src/appwrite.js
@@ -0,0 +1,51 @@
+import { Client, Users, ID, Databases, Query } from 'node-appwrite';
+
+class AppwriteService {
+  constructor() {
+    const client = new Client();
+    client
+      .setEndpoint(
+        process.env.APPWRITE_ENDPOINT ?? 'https://cloud.appwrite.io/v1'
+      )
+      .setProject(process.env.APPWRITE_FUNCTION_PROJECT_ID)
+      .setKey(process.env.APPWRITE_API_KEY);
+
+    this.users = new Users(client);
+    this.databases = new Databases(client);
+  }
+
+  async prepareUser(email) {
+    const response = await this.users.list([ Query.equal('email', email), Query.limit(1) ]);
+    let user = response.users[0] ?? null;
+
+    if(!user) {
+      user = await this.users.create(ID.unique(), email);
+    }
+    
+    return user;
+  }
+
+  async createChallenge(userId, token) {
+    return await this.databases.createDocument('main', 'challenges', ID.unique(), {
+      userId: userId,
+      token
+    });
+  }
+
+  async getChallenge(challengeId) {
+    return await this.databases.getDocument('main', 'challenges', challengeId);
+  }
+
+  async deleteChallenge(challengeId) {
+    return await this.databases.deleteDocument('main', 'challenges', challengeId);
+  }
+
+  async createCredentials(userId, credentials) {
+    return await this.databases.createDocument('main', 'credentials', ID.unique(), {
+      userId,
+      credentials
+    });
+  }
+}
+
+export default AppwriteService;
diff --git a/node/authenticate-with-passkey/src/main.js b/node/authenticate-with-passkey/src/main.js
new file mode 100644
index 00000000..27f11fbb
--- /dev/null
+++ b/node/authenticate-with-passkey/src/main.js
@@ -0,0 +1,108 @@
+import {
+  getStaticFile,
+  throwIfMissing,
+  convertChallenge,
+  getNewChallenge,
+  getRegistrationCredentials
+} from './utils.js';
+import AppwriteService from './appwrite.js';
+import * as SimpleWebAuthnServer from '@simplewebauthn/server';
+
+export default async ({ req, res, log }) => {
+  throwIfMissing(process.env, [
+    'APPWRITE_API_KEY',
+    'ALLOWED_ORIGIN'
+  ]);
+
+  const appwrite = new AppwriteService();
+
+  if (req.path === '/' && req.method === 'GET') {
+    return res.send(getStaticFile('index.html'), 200, {
+      'Content-Type': 'text/html; charset=utf-8',
+    });
+  }
+
+  if (req.path === '/register/start' && req.method === 'POST') {
+    try {
+      throwIfMissing(req.body, ['email']);
+    } catch (error) {
+      log(error);
+      return res.send('Please provide email.', 400);
+    }
+
+    const email = req.body.email;
+
+    const token = getNewChallenge();
+    const converted = convertChallenge(token);
+
+    const user = await appwrite.prepareUser(email);
+    const challenge = await appwrite.createChallenge(user.$id, converted);
+
+    const rpId = process.env.RP_ID ?? 'localhost';
+    const rpName = process.env.RP_NAME ?? 'webauthn-appwrite';
+
+    return res.json({
+      challengeId: challenge.$id,
+      challenge: token,
+      rp: { id: rpId, name: rpName },
+      user: { id: user.$id, name: email, displayName: email },
+      pubKeyCredParams: [
+        { type: 'public-key', alg: -7 },
+        { type: 'public-key', alg: -257 },
+      ],
+      authenticatorSelection: {
+        authenticatorAttachment: 'platform',
+        userVerification: 'required',
+        residentKey: 'preferred',
+        requireResidentKey: false,
+      }
+    });
+  }
+
+  if (req.path === '/register/finish' && req.method === 'POST') {
+    try {
+      throwIfMissing(req.body, ['challengeId', 'data']);
+    } catch (error) {
+      log(error);
+      return res.send('Please provide challengeId and data.', 400);
+    }
+
+    const { challengeId, data } = req.body;
+
+    let challenge;
+
+    try {
+      challenge = await appwrite.getChallenge(challengeId);
+    } catch(error) {
+      log(error);
+      return res.send('Challenge not found. Please start over.', 400);
+    }
+
+    let verification;
+    try {
+        verification = await SimpleWebAuthnServer.verifyRegistrationResponse({
+            response: data,
+            expectedChallenge: challenge.token,
+            expectedOrigin: process.env.ALLOWED_ORIGIN
+        });
+    } catch (error) {
+        log(error);
+        return res.send('Could not finish registration process.', 400);
+    }
+
+    const { verified, registrationInfo } = verification;
+
+    if(!verified) {
+      log(verification);
+      return res.send('Unexpected server error.', 500);
+    }
+
+    const credentials = getRegistrationCredentials(registrationInfo);
+    await appwrite.createCredentials(challenge.userId, credentials);
+    await appwrite.deleteChallenge(challenge.$id);
+
+    return res.send('OK', 200);
+  }
+
+  return res.send('Not found.', 404);
+};
diff --git a/node/authenticate-with-passkey/src/utils.js b/node/authenticate-with-passkey/src/utils.js
new file mode 100644
index 00000000..3c597c32
--- /dev/null
+++ b/node/authenticate-with-passkey/src/utils.js
@@ -0,0 +1,64 @@
+import path from 'path';
+import { fileURLToPath } from 'url';
+import fs from 'fs';
+
+/**
+ * Throws an error if any of the keys are missing from the object
+ * @param {*} obj
+ * @param {string[]} keys
+ * @throws {Error}
+ */
+export function throwIfMissing(obj, keys) {
+  const missing = [];
+  for (let key of keys) {
+    if (!(key in obj) || !obj[key]) {
+      missing.push(key);
+    }
+  }
+  if (missing.length > 0) {
+    throw new Error(`Missing required fields: ${missing.join(', ')}`);
+  }
+}
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+const staticFolder = path.join(__dirname, '../static');
+
+/**
+ * Returns the contents of a file in the static folder
+ * @param {string} fileName
+ * @returns {string} Contents of static/{fileName}
+ */
+export function getStaticFile(fileName) {
+  return fs.readFileSync(path.join(staticFolder, fileName)).toString();
+}
+
+/**
+ * Returns a new unique challenge for client to use when creating passkey
+ * @returns {string} Unique challenge token
+ */
+export function getNewChallenge() {
+  return Math.random().toString(36).substring(2);
+}
+
+/**
+ * Converts challenge token to safely storable token
+ * @param {string} challenge challenge token from getNewChallenge()
+ * @returns {string} Encoded challenge safe to store in database
+ */
+export function convertChallenge(challenge) {
+  return btoa(challenge).replaceAll('=', '');
+}
+
+/**
+ * Extracts useful information from registration info.
+ * @returns {*} Object with info nessessary for later sign-in
+ */
+export function getRegistrationCredentials(registrationInfo) {
+  const {credentialPublicKey, counter, credentialID} = registrationInfo;
+  return {
+      credentialID: uintToString(credentialID),
+      credentialPublicKey: uintToString(credentialPublicKey),
+      counter,
+  }
+}
diff --git a/node/authenticate-with-passkey/static/index.html b/node/authenticate-with-passkey/static/index.html
new file mode 100644
index 00000000..18f26e12
--- /dev/null
+++ b/node/authenticate-with-passkey/static/index.html
@@ -0,0 +1,175 @@
+<!doctype html>
+<html lang="en">
+
+<head>
+  <meta charset="UTF-8" />
+  <meta http-equiv="X-UA-Compatible" content="IE=edge" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>Demo | Authenticate with passkey</title>
+  <link rel="stylesheet" href="https://unpkg.com/@appwrite.io/pink" />
+  <link rel="stylesheet" href="https://unpkg.com/@appwrite.io/pink-icons" />
+  <script src="//unpkg.com/alpinejs" defer></script>
+
+  <script>
+    document.addEventListener('alpine:init', () => {
+      Alpine.data('app', () => ({
+        email: '',
+        tab: 'signup',
+        goToTab: function (tab) {
+          this.tab = tab;
+        },
+        onSignUp: function() {
+          
+        },
+        onSignIn: function() {
+
+        }
+      }))
+    })
+  </script>
+</head>
+
+<body class="theme-dark" x-data="app">
+  <div class="grid">
+    <header class="main-header u-padding-inline-end-0">
+      <h4 class="heading-level-6">Passkey authentication</h4>
+      <div class="main-header-end u-margin-inline-end-16">
+        <ul class="buttons-list is-with-padding">
+          <li class="buttons-list-item is-not-mobile u-padding-inline-0">
+            <a href="https://github.com/appwrite/templates/tree/main/node/authenticate-with-passkey" target="_blank"
+              class="button is-secondary is-not-mobile"><span class="text">View on GitHub</span></a>
+          </li>
+        </ul>
+      </div>
+    </header>
+
+    <main class="main-content u-margin-block-start-24">
+      <div class="container hero-top-container u-max-width-650">
+        <div class="hero u-text-center">
+          <section class="u-margin-inline-auto">
+            <svg style="width: 10rem; opacity: 0.5;" class="u-margin-block-start-16" xmlns="http://www.w3.org/2000/svg"
+              fill="none" viewBox="0 -1 158 160" stroke-width="0.5" stroke="currentColor">
+              <g filter="url(#filter0_b_6_2371)">
+                <circle cx="78.871" cy="78.871" r="78.871" transform="matrix(1 0 0 -1 0.257996 157.742)"
+                  fill="url(#paint0_linear_6_2371)" />
+                <circle cx="78.871" cy="78.871" r="77.9758" transform="matrix(1 0 0 -1 0.257996 157.742)"
+                  stroke="url(#paint1_linear_6_2371)" stroke-opacity="0.1" stroke-width="1.79037" />
+              </g>
+              <mask id="path-3-inside-1_6_2371" fill="white">
+                <path
+                  d="M64.3407 63.801V52.8467C64.3407 49.2151 65.8987 45.7323 68.6721 43.1644C71.4454 40.5964 75.2069 39.1538 79.129 39.1538C83.0511 39.1538 86.8126 40.5964 89.5859 43.1644C92.3593 45.7323 93.9173 49.2151 93.9173 52.8467V63.801" />
+              </mask>
+              <path
+                d="M64.3407 52.8467H61.6366H64.3407ZM67.0448 63.801V52.8467H61.6366V63.801H67.0448ZM67.0448 52.8467C67.0448 50.0024 68.2632 47.2283 70.5093 45.1486L66.8349 41.1802C63.5343 44.2363 61.6366 48.4278 61.6366 52.8467L67.0448 52.8467ZM70.5093 45.1486C72.7624 43.0624 75.8598 41.858 79.129 41.858V36.4497C74.554 36.4497 70.1285 38.1305 66.8349 41.1802L70.5093 45.1486ZM79.129 41.858C82.3982 41.858 85.4956 43.0624 87.7487 45.1486L91.4231 41.1802C88.1295 38.1305 83.704 36.4497 79.129 36.4497V41.858ZM87.7487 45.1486C89.9948 47.2283 91.2132 50.0024 91.2132 52.8467H96.6215C96.6215 48.4278 94.7238 44.2363 91.4231 41.1802L87.7487 45.1486ZM91.2132 52.8467V63.801H96.6215V52.8467H91.2132Z"
+                fill="#E4E4E7" mask="url(#path-3-inside-1_6_2371)" />
+              <path
+                d="M52.2909 65.1529H105.967C109.159 65.1529 112.283 68.6256 112.283 73.6597V108.166C112.283 113.2 109.159 116.672 105.967 116.672H52.2909C49.0993 116.672 45.975 113.2 45.975 108.166V73.6597C45.975 68.6256 49.0993 65.1529 52.2909 65.1529Z"
+                stroke="#E4E4E7" stroke-width="2.70415" />
+              <mask id="path-6-inside-2_6_2371" fill="white">
+                <path fill-rule="evenodd" clip-rule="evenodd"
+                  d="M84.0794 92.5576C86.6596 90.918 88.3717 88.0344 88.3717 84.751C88.3717 79.6464 84.2336 75.5083 79.129 75.5083C74.0244 75.5083 69.8863 79.6464 69.8863 84.751C69.8863 88.0345 71.5985 90.9182 74.1788 92.5577L71.4269 106.317H86.8314L84.0794 92.5576Z" />
+              </mask>
+              <path
+                d="M84.0794 92.5576L82.6291 90.2753L81.0641 91.2697L81.4278 93.0879L84.0794 92.5576ZM74.1788 92.5577L76.8305 93.088L77.1941 91.2698L75.6291 90.2754L74.1788 92.5577ZM71.4269 106.317L68.7752 105.787L68.1283 109.022H71.4269V106.317ZM86.8314 106.317V109.022H90.1299L89.483 105.787L86.8314 106.317ZM85.6675 84.751C85.6675 87.0709 84.4613 89.1109 82.6291 90.2753L85.5297 94.8399C88.8578 92.725 91.0758 88.998 91.0758 84.751H85.6675ZM79.129 78.2124C82.7401 78.2124 85.6675 81.1399 85.6675 84.751H91.0758C91.0758 78.1529 85.727 72.8042 79.129 72.8042V78.2124ZM72.5904 84.751C72.5904 81.1399 75.5178 78.2124 79.129 78.2124V72.8042C72.5309 72.8042 67.1821 78.1529 67.1821 84.751H72.5904ZM75.6291 90.2754C73.7967 89.111 72.5904 87.071 72.5904 84.751H67.1821C67.1821 88.9981 69.4003 92.7253 72.7286 94.8401L75.6291 90.2754ZM74.0785 106.848L76.8305 93.088L71.5272 92.0274L68.7752 105.787L74.0785 106.848ZM86.8314 103.613H71.4269V109.022H86.8314V103.613ZM81.4278 93.0879L84.1797 106.848L89.483 105.787L86.731 92.0272L81.4278 93.0879Z"
+                fill="#E4E4E7" mask="url(#path-6-inside-2_6_2371)" />
+              <defs>
+                <filter id="filter0_b_6_2371" x="-35.5493" y="-35.8073" width="229.357" height="229.357"
+                  filterUnits="userSpaceOnUse" color-interpolation-filters="sRGB">
+                  <feFlood flood-opacity="0" result="BackgroundImageFix" />
+                  <feGaussianBlur in="BackgroundImageFix" stdDeviation="17.9037" />
+                  <feComposite in2="SourceAlpha" operator="in" result="effect1_backgroundBlur_6_2371" />
+                  <feBlend mode="normal" in="SourceGraphic" in2="effect1_backgroundBlur_6_2371" result="shape" />
+                </filter>
+                <linearGradient id="paint0_linear_6_2371" x1="157.742" y1="4.70108e-06" x2="-4.32264e-06" y2="153.986"
+                  gradientUnits="userSpaceOnUse">
+                  <stop stop-color="white" stop-opacity="0.12" />
+                  <stop offset="0.615652" stop-color="white" stop-opacity="0.04" />
+                </linearGradient>
+                <linearGradient id="paint1_linear_6_2371" x1="0" y1="157.742" x2="157.742" y2="0"
+                  gradientUnits="userSpaceOnUse">
+                  <stop stop-color="white" stop-opacity="0" />
+                  <stop offset="1" stop-color="white" stop-opacity="0.54" />
+                </linearGradient>
+              </defs>
+            </svg>
+            <h1 class="eyebrow-heading-3 u-margin-block-start-52 u-color-text-pink">Biometric authentication</h1>
+            <h2 class="heading-level-1 u-margin-block-start-16">
+              Get started with passkeys
+            </h2>
+            <p class="body-text-1 u-small u-margin-block-start-16">
+              Passkeys provide authentication method that does not require users to remember something. Instead, a
+              combination of owning something (a device with private key) and being something (fingerprint, face, voice)
+              is used to authenticate.
+            </p>
+          </section>
+        </div>
+
+        <div class="card is-normal u-margin-block-start-52" style="padding-top: 16px;">
+          <div class="tabs u-flex u-gap-16">
+            <ul class="tabs-list">
+              <li class="tabs-item"><button @click="goToTab('signin')" :class="{ 'is-selected': tab === 'signin' }"
+                  class="tabs-button" type="button">Sign in</button></li>
+              <li class="tabs-item"><button @click="goToTab('signup')" :class="{ 'is-selected': tab === 'signup' }"
+                  class="tabs-button" type="button">Sign up</button></li>
+            </ul>
+          </div>
+          <template x-if="tab === 'signin'">
+            <form @submit.prevent="onSignIn()" class="form u-width-full-line u-padding-block-start-16">
+              <ul class="form-list">
+                <li class="form-item">
+                  <h2 class="heading-level-6 u-margin-block-start-16">
+                    Login to existing account
+                  </h2>
+                </li>
+                <li class="form-item">
+                  <label class="label">E-mail</label>
+                  <div class="input-text-wrapper">
+                    <input type="email" x-model="email" required="true" class="input-text" placeholder="Your e-mail" />
+                  </div>
+                </li>
+
+                <li class="form-item">
+                  <button class="button is-primary" type="submit">
+                    <span class="icon-finger-print" aria-hidden="true"></span>
+                    <span class="text">Sign in</span>
+                  </button>
+                </li>
+              </ul>
+            </form>
+          </template>
+
+          <template x-if="tab === 'signup'">
+            <form @submit.prevent="onSignUp()" class="form u-width-full-line u-padding-block-start-16">
+              <ul class="form-list">
+                <li class="form-item">
+                  <h2 class="heading-level-6 u-margin-block-start-16">
+                    Create new account
+                  </h2>
+                </li>
+                <li class="form-item">
+                  <label class="label">E-mail</label>
+                  <div class="input-text-wrapper">
+                    <input x-model="email" type="email" required="true" class="input-text" placeholder="Your e-mail" />
+                  </div>
+                </li>
+
+                <li class="form-item">
+                  <button class="button is-primary" type="submit">
+                    <span class="icon-finger-print" aria-hidden="true"></span>
+                    <span class="text">Sign Up</span>
+                  </button>
+                </li>
+              </ul>
+            </form>
+          </template>
+
+        </div>
+      </div>
+    </main>
+  </div>
+
+  <div class="u-margin-block-start-52" style="opacity: 0">.</div>
+  <div class="u-margin-block-start-52" style="opacity: 0">.</div>
+</body>
+
+</html>
\ No newline at end of file

From 05975e11b44ac4181f86998643b95f8eea5f03e0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Matej=20Ba=C4=8Do?= <matejbaco2000@gmail.com>
Date: Sat, 10 Feb 2024 12:37:46 +0000
Subject: [PATCH 2/6] Mark down TODOs

---
 node/authenticate-with-passkey/README.md         | 9 +++++++++
 node/authenticate-with-passkey/static/index.html | 5 +++--
 2 files changed, 12 insertions(+), 2 deletions(-)

diff --git a/node/authenticate-with-passkey/README.md b/node/authenticate-with-passkey/README.md
index 3614c805..9e80300b 100644
--- a/node/authenticate-with-passkey/README.md
+++ b/node/authenticate-with-passkey/README.md
@@ -1,3 +1,12 @@
+TODO: Finish based on:
+- https://www.passkeys.com/guides
+- https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API
+
+- Implement regsitration on frontend
+- Ensure /register/finish works
+- Implement login
+- Fix all `TODO`
+
 # 📬 Node.js Authenticate with Passkey
 
 Sign-in with passkey into Appwrite Account.
diff --git a/node/authenticate-with-passkey/static/index.html b/node/authenticate-with-passkey/static/index.html
index 18f26e12..0ef7d75c 100644
--- a/node/authenticate-with-passkey/static/index.html
+++ b/node/authenticate-with-passkey/static/index.html
@@ -13,16 +13,17 @@
   <script>
     document.addEventListener('alpine:init', () => {
       Alpine.data('app', () => ({
+        // TODO: Disable form button if submitting
         email: '',
         tab: 'signup',
         goToTab: function (tab) {
           this.tab = tab;
         },
         onSignUp: function() {
-          
+          // TODO: Implement
         },
         onSignIn: function() {
-
+          // TODO: Implement
         }
       }))
     })

From 938fd5f862194ceb9714b934388e62d9a680c290 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Matej=20Ba=C4=8Do?= <matejbaco2000@gmail.com>
Date: Sat, 10 Feb 2024 16:12:47 +0000
Subject: [PATCH 3/6] Finish passkey implementation

---
 node/authenticate-with-passkey/README.md      |   2 +-
 .../authenticate-with-passkey/src/appwrite.js |  15 +-
 node/authenticate-with-passkey/src/main.js    | 205 ++++++++++++++----
 node/authenticate-with-passkey/src/utils.js   |  31 +--
 .../static/index.html                         | 112 ++++++++--
 5 files changed, 273 insertions(+), 92 deletions(-)

diff --git a/node/authenticate-with-passkey/README.md b/node/authenticate-with-passkey/README.md
index 9e80300b..0cec5023 100644
--- a/node/authenticate-with-passkey/README.md
+++ b/node/authenticate-with-passkey/README.md
@@ -27,4 +27,4 @@ TODO
 
 ## 🔒 Environment Variables
 
-TODO (APPWRITE_API_KEY, RP_NAME, RP_ID, APPWRITE_ENDPOINT, ALLOWED_ORIGIN)
\ No newline at end of file
+TODO (APPWRITE_API_KEY, APPWRITE_ENDPOINT, ALLOWED_ORIGIN)
\ No newline at end of file
diff --git a/node/authenticate-with-passkey/src/appwrite.js b/node/authenticate-with-passkey/src/appwrite.js
index d4574431..f8ef8b01 100644
--- a/node/authenticate-with-passkey/src/appwrite.js
+++ b/node/authenticate-with-passkey/src/appwrite.js
@@ -25,6 +25,10 @@ class AppwriteService {
     return user;
   }
 
+  async createSessionToken(userId) {
+    return await this.users.createToken(userId, 64, 60);
+  }
+
   async createChallenge(userId, token) {
     return await this.databases.createDocument('main', 'challenges', ID.unique(), {
       userId: userId,
@@ -43,9 +47,18 @@ class AppwriteService {
   async createCredentials(userId, credentials) {
     return await this.databases.createDocument('main', 'credentials', ID.unique(), {
       userId,
-      credentials
+      credentials: JSON.stringify(credentials)
     });
   }
+
+  async getCredential(userId) {
+    const documents = (await this.databases.listDocuments('main', 'credentials', [
+      Query.equal('userId', userId),
+      Query.limit(1)
+    ])).documents;
+
+    return documents[0];
+  }
 }
 
 export default AppwriteService;
diff --git a/node/authenticate-with-passkey/src/main.js b/node/authenticate-with-passkey/src/main.js
index 27f11fbb..dbe933dd 100644
--- a/node/authenticate-with-passkey/src/main.js
+++ b/node/authenticate-with-passkey/src/main.js
@@ -1,108 +1,219 @@
 import {
   getStaticFile,
-  throwIfMissing,
-  convertChallenge,
-  getNewChallenge,
-  getRegistrationCredentials
+  throwIfMissing
 } from './utils.js';
 import AppwriteService from './appwrite.js';
 import * as SimpleWebAuthnServer from '@simplewebauthn/server';
+import * as SimpleWebAuthnServerHelpers from '@simplewebauthn/server/helpers';
 
 export default async ({ req, res, log }) => {
   throwIfMissing(process.env, [
     'APPWRITE_API_KEY',
-    'ALLOWED_ORIGIN'
+    'ALLOWED_HOSTNAME'
   ]);
 
+  const corsHeaders = {
+    'Access-Control-Allow-Origin': 'https://' + process.env.ALLOWED_HOSTNAME,
+    'Access-Control-Allow-Methods': 'GET, POST, PATCH, PUT, DELETE, OPTIONS',
+    'Access-Control-Allow-Headers': 'Origin, Content-Type'
+  };
+
   const appwrite = new AppwriteService();
 
+  if (req.method === 'OPTIONS') {
+    return res.send('', 200, corsHeaders);
+  }
+
   if (req.path === '/' && req.method === 'GET') {
     return res.send(getStaticFile('index.html'), 200, {
       'Content-Type': 'text/html; charset=utf-8',
+      ...corsHeaders
     });
   }
 
-  if (req.path === '/register/start' && req.method === 'POST') {
+  if (req.path === '/v1/challenges' && req.method === 'POST') {
     try {
       throwIfMissing(req.body, ['email']);
     } catch (error) {
       log(error);
-      return res.send('Please provide email.', 400);
+      return res.send('Please provide email.', 400, corsHeaders);
     }
 
-    const email = req.body.email;
-
-    const token = getNewChallenge();
-    const converted = convertChallenge(token);
+    const user = await appwrite.prepareUser(req.body.email);
 
-    const user = await appwrite.prepareUser(email);
-    const challenge = await appwrite.createChallenge(user.$id, converted);
+    const credential = await appwrite.getCredential(user.$id);
 
-    const rpId = process.env.RP_ID ?? 'localhost';
-    const rpName = process.env.RP_NAME ?? 'webauthn-appwrite';
+    if(credential) {
+      return res.send('You already have passkey. Please sign in.', 400, corsHeaders);
+    }
 
-    return res.json({
-      challengeId: challenge.$id,
-      challenge: token,
-      rp: { id: rpId, name: rpName },
-      user: { id: user.$id, name: email, displayName: email },
-      pubKeyCredParams: [
-        { type: 'public-key', alg: -7 },
-        { type: 'public-key', alg: -257 },
-      ],
+    const options = await SimpleWebAuthnServer.generateRegistrationOptions({
+      rpName: 'Passkeys Demo (Appwrite)',
+      rpID: process.env.ALLOWED_HOSTNAME,
+      userID: user.$id,
+      userName: req.body.email,
+      userDisplayName: req.body.email,
+      attestationType: 'none',
       authenticatorSelection: {
-        authenticatorAttachment: 'platform',
-        userVerification: 'required',
         residentKey: 'preferred',
-        requireResidentKey: false,
-      }
+        userVerification: 'preferred',
+        authenticatorAttachment: 'platform',
+      },
     });
+
+    const challenge = await appwrite.createChallenge(user.$id, options.challenge);
+
+    return res.json({
+      challengeId: challenge.$id,
+      options
+    }, 200, corsHeaders);
   }
 
-  if (req.path === '/register/finish' && req.method === 'POST') {
+  if (req.path === '/v1/challenges' && req.method === 'PUT') {
     try {
-      throwIfMissing(req.body, ['challengeId', 'data']);
+      throwIfMissing(req.body, ['challengeId', 'registration']);
     } catch (error) {
       log(error);
-      return res.send('Please provide challengeId and data.', 400);
+      return res.send('Please provide challengeId and registration.', 400, corsHeaders);
     }
 
-    const { challengeId, data } = req.body;
+    const { challengeId, registration } = req.body;
 
     let challenge;
 
     try {
       challenge = await appwrite.getChallenge(challengeId);
-    } catch(error) {
+    } catch (error) {
       log(error);
-      return res.send('Challenge not found. Please start over.', 400);
+      return res.send('Challenge not found. Please start over.', 400, corsHeaders);
     }
 
     let verification;
     try {
-        verification = await SimpleWebAuthnServer.verifyRegistrationResponse({
-            response: data,
-            expectedChallenge: challenge.token,
-            expectedOrigin: process.env.ALLOWED_ORIGIN
-        });
+      verification = await SimpleWebAuthnServer.verifyRegistrationResponse({
+        response: registration,
+        expectedChallenge: challenge.token,
+        expectedOrigin: 'https://' + process.env.ALLOWED_HOSTNAME,
+        expectedRPID: process.env.ALLOWED_HOSTNAME
+      });
     } catch (error) {
-        log(error);
-        return res.send('Could not finish registration process.', 400);
+      log(error);
+      return res.send('Could not finish registration process.', 400, corsHeaders);
     }
 
     const { verified, registrationInfo } = verification;
 
-    if(!verified) {
+    if (!verified) {
       log(verification);
-      return res.send('Unexpected server error.', 500);
+      return res.send('Incorrect passkey.', 500, corsHeaders);
     }
 
-    const credentials = getRegistrationCredentials(registrationInfo);
-    await appwrite.createCredentials(challenge.userId, credentials);
+    await appwrite.createCredentials(challenge.userId, {
+      credentialID: SimpleWebAuthnServerHelpers.isoUint8Array.toHex(registrationInfo.credentialID),
+      credentialPublicKey: SimpleWebAuthnServerHelpers.isoUint8Array.toHex(registrationInfo.credentialPublicKey),
+      counter: registrationInfo.counter,
+      credentialDeviceType: registrationInfo.credentialDeviceType,
+      credentialBackedUp: registrationInfo.credentialBackedUp,
+      transports: registration.response.transports
+    });
     await appwrite.deleteChallenge(challenge.$id);
 
-    return res.send('OK', 200);
+    return res.send('OK', 200, corsHeaders);
+  }
+
+  if (req.path === '/v1/tokens' && req.method === 'POST') {
+    try {
+      throwIfMissing(req.body, ['email']);
+    } catch (error) {
+      log(error);
+      return res.send('Please provide email.', 400, corsHeaders);
+    }
+
+    const user = await appwrite.prepareUser(req.body.email);
+
+    const options = await SimpleWebAuthnServer.generateAuthenticationOptions({
+      rpID: process.env.ALLOWED_HOSTNAME,
+      userVerification: 'preferred',
+      // TODO: Suggest with allowCredentials
+      /*
+      allowCredentials: credentials.map(credential => {
+        const json = JSON.parse(credential.credentials);
+        return {
+          id: atob(json.credentialID),
+          type: 'public-key',
+          transports: json.transports
+        }
+      }),
+      */
+    });
+
+    const challenge = await appwrite.createChallenge(user.$id, options.challenge);
+
+    return res.json({
+      challengeId: challenge.$id,
+      options
+    }, 200, corsHeaders);
+  }
+
+  if (req.path === '/v1/tokens' && req.method === 'PUT') {
+    try {
+      throwIfMissing(req.body, ['challengeId', 'authentication']);
+    } catch (error) {
+      log(error);
+      return res.send('Please provide challengeId and authentication.', 400, corsHeaders);
+    }
+
+    const { challengeId, authentication } = req.body;
+
+    let challenge;
+    try {
+      challenge = await appwrite.getChallenge(challengeId);
+    } catch (error) {
+      log(error);
+      return res.send('Challenge not found. Please start over.', 400, corsHeaders);
+    }
+
+    let credential;
+    try {
+      credential = await appwrite.getCredential(challenge.userId);
+    } catch (error) {
+      log(error);
+      return res.send('You do not have passkey yet. Please sign up.', 400, corsHeaders);
+    }
+
+    let verification;
+    try {
+      const authenticator = JSON.parse(credential.credentials);
+      authenticator.credentialID = SimpleWebAuthnServerHelpers.isoUint8Array.fromHex(authenticator.credentialID);
+      authenticator.credentialPublicKey = SimpleWebAuthnServerHelpers.isoUint8Array.fromHex(authenticator.credentialPublicKey);
+
+      verification = await SimpleWebAuthnServer.verifyAuthenticationResponse({
+        response: authentication,
+        expectedChallenge: challenge.token,
+        expectedOrigin: 'https://' + process.env.ALLOWED_HOSTNAME,
+        expectedRPID: process.env.ALLOWED_HOSTNAME,
+        authenticator
+      });
+    } catch (error) {
+      log(error);
+      log(error.message);
+      log(error.stack);
+      return res.send('Could not finish authentication process.', 400, corsHeaders);
+    }
+
+    const { verified } = verification;
+
+    if (!verified) {
+      log(verification);
+      return res.send('Incorrect passkey.', 400, corsHeaders);
+    }
+
+    const token = await appwrite.createSessionToken(challenge.userId);
+
+    return res.json({
+      secret: token.secret
+    }, 200, corsHeaders);
   }
 
-  return res.send('Not found.', 404);
+  return res.send('Not found.', 404, corsHeaders);
 };
diff --git a/node/authenticate-with-passkey/src/utils.js b/node/authenticate-with-passkey/src/utils.js
index 3c597c32..11c3437b 100644
--- a/node/authenticate-with-passkey/src/utils.js
+++ b/node/authenticate-with-passkey/src/utils.js
@@ -1,6 +1,7 @@
 import path from 'path';
 import { fileURLToPath } from 'url';
 import fs from 'fs';
+import crypto from 'crypto';
 
 /**
  * Throws an error if any of the keys are missing from the object
@@ -32,33 +33,3 @@ const staticFolder = path.join(__dirname, '../static');
 export function getStaticFile(fileName) {
   return fs.readFileSync(path.join(staticFolder, fileName)).toString();
 }
-
-/**
- * Returns a new unique challenge for client to use when creating passkey
- * @returns {string} Unique challenge token
- */
-export function getNewChallenge() {
-  return Math.random().toString(36).substring(2);
-}
-
-/**
- * Converts challenge token to safely storable token
- * @param {string} challenge challenge token from getNewChallenge()
- * @returns {string} Encoded challenge safe to store in database
- */
-export function convertChallenge(challenge) {
-  return btoa(challenge).replaceAll('=', '');
-}
-
-/**
- * Extracts useful information from registration info.
- * @returns {*} Object with info nessessary for later sign-in
- */
-export function getRegistrationCredentials(registrationInfo) {
-  const {credentialPublicKey, counter, credentialID} = registrationInfo;
-  return {
-      credentialID: uintToString(credentialID),
-      credentialPublicKey: uintToString(credentialPublicKey),
-      counter,
-  }
-}
diff --git a/node/authenticate-with-passkey/static/index.html b/node/authenticate-with-passkey/static/index.html
index 0ef7d75c..e4a52dc9 100644
--- a/node/authenticate-with-passkey/static/index.html
+++ b/node/authenticate-with-passkey/static/index.html
@@ -9,21 +9,108 @@
   <link rel="stylesheet" href="https://unpkg.com/@appwrite.io/pink" />
   <link rel="stylesheet" href="https://unpkg.com/@appwrite.io/pink-icons" />
   <script src="//unpkg.com/alpinejs" defer></script>
+  <script src="https://unpkg.com/@simplewebauthn/browser/dist/bundle/index.umd.min.js"></script>
 
   <script>
     document.addEventListener('alpine:init', () => {
       Alpine.data('app', () => ({
-        // TODO: Disable form button if submitting
+        submitting: false,
         email: '',
-        tab: 'signup',
+        tab: 'signin',
         goToTab: function (tab) {
           this.tab = tab;
         },
-        onSignUp: function() {
-          // TODO: Implement
+        onSignUp: async function () {
+          if (this.submitting) {
+            return;
+          }
+
+          this.submitting = true;
+
+          try {
+            const responseStart = await fetch('https://passkey.functions.qa.appwrite.org/v1/challenges', {
+              method: 'POST',
+              body: JSON.stringify({ email: this.email }),
+              headers: {
+                'Content-type': 'application/json'
+              }
+            });
+
+            if (!responseStart.ok) {
+              throw new Error(await responseStart.text());
+            }
+
+            const body = await responseStart.json();
+
+            const registration = await SimpleWebAuthnBrowser.startRegistration(body.options);
+
+            const responseFinish = await fetch('https://passkey.functions.qa.appwrite.org/v1/challenges', {
+              method: 'PUT',
+              body: JSON.stringify({ challengeId: body.challengeId, registration }),
+              headers: {
+                'Content-type': 'application/json'
+              }
+            });
+
+            if (!responseFinish.ok) {
+              throw new Error(await responseFinish.text());
+            }
+
+            this.tab = 'signin';
+          } catch (err) {
+            console.log(err);
+            alert(err.message);
+          } finally {
+            this.submitting = false;
+          }
         },
-        onSignIn: function() {
-          // TODO: Implement
+        onSignIn: async function () {
+          if (this.submitting) {
+            return;
+          }
+
+          this.submitting = true;
+
+          try {
+            const responseStart = await fetch('https://passkey.functions.qa.appwrite.org/v1/tokens', {
+              method: 'POST',
+              body: JSON.stringify({ email: this.email }),
+              headers: {
+                'Content-type': 'application/json'
+              }
+            });
+
+            if (!responseStart.ok) {
+              throw new Error(await responseStart.text());
+            }
+
+            const body = await responseStart.json();
+
+            const authentication = await SimpleWebAuthnBrowser.startAuthentication(body.options);
+
+            const responseFinish = await fetch('https://passkey.functions.qa.appwrite.org/v1/tokens', {
+              method: 'PUT',
+              body: JSON.stringify({ challengeId: body.challengeId, authentication }),
+              headers: {
+                'Content-type': 'application/json'
+              }
+            });
+
+            if (!responseFinish.ok) {
+              throw new Error(await responseFinish.text());
+            }
+
+            const token = await responseFinish.json();
+
+            // TODO: Create session
+            console.log(token.secret);
+            
+          } catch (err) {
+            console.log(err);
+            alert(err.message);
+          } finally {
+            this.submitting = false;
+          }
         }
       }))
     })
@@ -45,10 +132,10 @@ <h4 class="heading-level-6">Passkey authentication</h4>
     </header>
 
     <main class="main-content u-margin-block-start-24">
-      <div class="container hero-top-container u-max-width-650">
+      <div class="container hero-top-container u-max-width-650" style="padding-top: 0px;">
         <div class="hero u-text-center">
           <section class="u-margin-inline-auto">
-            <svg style="width: 10rem; opacity: 0.5;" class="u-margin-block-start-16" xmlns="http://www.w3.org/2000/svg"
+            <svg style="width: 10rem; opacity: 0.5;" class="u-margin-block-start-0" xmlns="http://www.w3.org/2000/svg"
               fill="none" viewBox="0 -1 158 160" stroke-width="0.5" stroke="currentColor">
               <g filter="url(#filter0_b_6_2371)">
                 <circle cx="78.871" cy="78.871" r="78.871" transform="matrix(1 0 0 -1 0.257996 157.742)"
@@ -93,9 +180,8 @@ <h4 class="heading-level-6">Passkey authentication</h4>
                 </linearGradient>
               </defs>
             </svg>
-            <h1 class="eyebrow-heading-3 u-margin-block-start-52 u-color-text-pink">Biometric authentication</h1>
             <h2 class="heading-level-1 u-margin-block-start-16">
-              Get started with passkeys
+              Biometric authentication
             </h2>
             <p class="body-text-1 u-small u-margin-block-start-16">
               Passkeys provide authentication method that does not require users to remember something. Instead, a
@@ -130,7 +216,7 @@ <h2 class="heading-level-6 u-margin-block-start-16">
                 </li>
 
                 <li class="form-item">
-                  <button class="button is-primary" type="submit">
+                  <button :disabled="submitting" class="button is-primary" type="submit">
                     <span class="icon-finger-print" aria-hidden="true"></span>
                     <span class="text">Sign in</span>
                   </button>
@@ -144,7 +230,7 @@ <h2 class="heading-level-6 u-margin-block-start-16">
               <ul class="form-list">
                 <li class="form-item">
                   <h2 class="heading-level-6 u-margin-block-start-16">
-                    Create new account
+                    Create a new account
                   </h2>
                 </li>
                 <li class="form-item">
@@ -155,7 +241,7 @@ <h2 class="heading-level-6 u-margin-block-start-16">
                 </li>
 
                 <li class="form-item">
-                  <button class="button is-primary" type="submit">
+                  <button :disabled="submitting" class="button is-primary" type="submit">
                     <span class="icon-finger-print" aria-hidden="true"></span>
                     <span class="text">Sign Up</span>
                   </button>

From 8a6b43ca27f08d7e766879912fa38c8074bde598 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Matej=20Ba=C4=8Do?= <matejbaco2000@gmail.com>
Date: Sat, 10 Feb 2024 18:22:18 +0000
Subject: [PATCH 4/6] Cleanup readme

---
 node/authenticate-with-passkey/README.md   |  9 -------
 node/authenticate-with-passkey/src/main.js | 28 ++++++++++++----------
 2 files changed, 16 insertions(+), 21 deletions(-)

diff --git a/node/authenticate-with-passkey/README.md b/node/authenticate-with-passkey/README.md
index 0cec5023..c4fe0042 100644
--- a/node/authenticate-with-passkey/README.md
+++ b/node/authenticate-with-passkey/README.md
@@ -1,12 +1,3 @@
-TODO: Finish based on:
-- https://www.passkeys.com/guides
-- https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API
-
-- Implement regsitration on frontend
-- Ensure /register/finish works
-- Implement login
-- Fix all `TODO`
-
 # 📬 Node.js Authenticate with Passkey
 
 Sign-in with passkey into Appwrite Account.
diff --git a/node/authenticate-with-passkey/src/main.js b/node/authenticate-with-passkey/src/main.js
index dbe933dd..95c890a2 100644
--- a/node/authenticate-with-passkey/src/main.js
+++ b/node/authenticate-with-passkey/src/main.js
@@ -43,7 +43,7 @@ export default async ({ req, res, log }) => {
 
     const credential = await appwrite.getCredential(user.$id);
 
-    if(credential) {
+    if (credential) {
       return res.send('You already have passkey. Please sign in.', 400, corsHeaders);
     }
 
@@ -131,20 +131,24 @@ export default async ({ req, res, log }) => {
 
     const user = await appwrite.prepareUser(req.body.email);
 
+    let credential;
+    try {
+      credential = await appwrite.getCredential(user.$id);
+    } catch (error) {
+      log(error);
+      return res.send('You do not have passkey yet. Please sign up.', 400, corsHeaders);
+    }
+
+    const authenticator = JSON.parse(credential.credentials);
+
     const options = await SimpleWebAuthnServer.generateAuthenticationOptions({
       rpID: process.env.ALLOWED_HOSTNAME,
       userVerification: 'preferred',
-      // TODO: Suggest with allowCredentials
-      /*
-      allowCredentials: credentials.map(credential => {
-        const json = JSON.parse(credential.credentials);
-        return {
-          id: atob(json.credentialID),
-          type: 'public-key',
-          transports: json.transports
-        }
-      }),
-      */
+      allowCredentials: [{
+        id: SimpleWebAuthnServerHelpers.isoUint8Array.fromHex(authenticator.credentialID),
+        type: 'public-key',
+        transports: authenticator.transports
+      }]
     });
 
     const challenge = await appwrite.createChallenge(user.$id, options.challenge);

From 20c3c66d6b8510ddff3b03406b2c5aa28e164157 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Matej=20Ba=C4=8Do?= <matejbaco2000@gmail.com>
Date: Sat, 10 Feb 2024 19:56:16 +0000
Subject: [PATCH 5/6] Add account page

---
 node/authenticate-with-passkey/src/main.js    |  18 +--
 .../static/index.html                         | 108 +++++++++++++++++-
 2 files changed, 109 insertions(+), 17 deletions(-)

diff --git a/node/authenticate-with-passkey/src/main.js b/node/authenticate-with-passkey/src/main.js
index 95c890a2..23ecf161 100644
--- a/node/authenticate-with-passkey/src/main.js
+++ b/node/authenticate-with-passkey/src/main.js
@@ -42,7 +42,6 @@ export default async ({ req, res, log }) => {
     const user = await appwrite.prepareUser(req.body.email);
 
     const credential = await appwrite.getCredential(user.$id);
-
     if (credential) {
       return res.send('You already have passkey. Please sign in.', 400, corsHeaders);
     }
@@ -131,11 +130,8 @@ export default async ({ req, res, log }) => {
 
     const user = await appwrite.prepareUser(req.body.email);
 
-    let credential;
-    try {
-      credential = await appwrite.getCredential(user.$id);
-    } catch (error) {
-      log(error);
+    const credential = await appwrite.getCredential(user.$id);
+    if(!credential) {
       return res.send('You do not have passkey yet. Please sign up.', 400, corsHeaders);
     }
 
@@ -177,11 +173,8 @@ export default async ({ req, res, log }) => {
       return res.send('Challenge not found. Please start over.', 400, corsHeaders);
     }
 
-    let credential;
-    try {
-      credential = await appwrite.getCredential(challenge.userId);
-    } catch (error) {
-      log(error);
+    const credential = await appwrite.getCredential(challenge.userId);
+    if(!credential) {
       return res.send('You do not have passkey yet. Please sign up.', 400, corsHeaders);
     }
 
@@ -215,7 +208,8 @@ export default async ({ req, res, log }) => {
     const token = await appwrite.createSessionToken(challenge.userId);
 
     return res.json({
-      secret: token.secret
+      secret: token.secret,
+      userId: challenge.userId
     }, 200, corsHeaders);
   }
 
diff --git a/node/authenticate-with-passkey/static/index.html b/node/authenticate-with-passkey/static/index.html
index e4a52dc9..d20e414a 100644
--- a/node/authenticate-with-passkey/static/index.html
+++ b/node/authenticate-with-passkey/static/index.html
@@ -10,15 +10,35 @@
   <link rel="stylesheet" href="https://unpkg.com/@appwrite.io/pink-icons" />
   <script src="//unpkg.com/alpinejs" defer></script>
   <script src="https://unpkg.com/@simplewebauthn/browser/dist/bundle/index.umd.min.js"></script>
+  <script src="https://cdn.jsdelivr.net/npm/matej-15-qa-appwrite@14.0.0-rc.1"></script>
 
   <script>
+    const client = new Appwrite.Client();
+    client
+      .setEndpoint('https://qa.appwrite.org/v1')
+      .setProject('65c767c0831640a7a150');
+
+    const account = new Appwrite.Account(client);
+
     document.addEventListener('alpine:init', () => {
       Alpine.data('app', () => ({
         submitting: false,
         email: '',
         tab: 'signin',
-        goToTab: function (tab) {
+        user: undefined,
+        goToTab: async function (tab) {
           this.tab = tab;
+
+          if (tab === 'myAccount') {
+            this.user = null;
+
+            try {
+              this.user = await account.get();
+            } catch (err) {
+              console.log(err);
+              this.user = null;
+            }
+          }
         },
         onSignUp: async function () {
           if (this.submitting) {
@@ -56,7 +76,7 @@
               throw new Error(await responseFinish.text());
             }
 
-            this.tab = 'signin';
+            this.goToTab('signin');
           } catch (err) {
             console.log(err);
             alert(err.message);
@@ -102,9 +122,26 @@
 
             const token = await responseFinish.json();
 
-            // TODO: Create session
-            console.log(token.secret);
-            
+            await account.createSession(token.userId, token.secret);
+            this.goToTab('myAccount');
+          } catch (err) {
+            console.log(err);
+            alert(err.message);
+          } finally {
+            this.submitting = false;
+          }
+        },
+        onSignOut: async function () {
+          if (this.submitting) {
+            return;
+          }
+
+          this.submitting = true;
+
+          try {
+            await account.deleteSession('current');
+            this.user = null;
+            this.goToTab('signin');
           } catch (err) {
             console.log(err);
             alert(err.message);
@@ -198,6 +235,9 @@ <h2 class="heading-level-1 u-margin-block-start-16">
                   class="tabs-button" type="button">Sign in</button></li>
               <li class="tabs-item"><button @click="goToTab('signup')" :class="{ 'is-selected': tab === 'signup' }"
                   class="tabs-button" type="button">Sign up</button></li>
+              <li class="tabs-item"><button @click="goToTab('myAccount')"
+                  :class="{ 'is-selected': tab === 'myAccount' }" class="tabs-button" type="button">My Account</button>
+              </li>
             </ul>
           </div>
           <template x-if="tab === 'signin'">
@@ -250,6 +290,64 @@ <h2 class="heading-level-6 u-margin-block-start-16">
             </form>
           </template>
 
+          <template x-if="tab === 'myAccount'">
+            <div>
+              <template x-if="user === undefined">
+                <div class="u-width-full-line card u-margin-block-start-16">
+                  <div class="grid-item-1">
+                    <div class="grid-item-1-start-start">
+                      <div class="eyebrow-heading-3">Please wait</div>
+                      <h2 class="heading-level-6 u-margin-block-start-4">Loading ...</h2>
+                    </div>
+                  </div>
+                </div>
+              </template>
+              <template x-if="user === null">
+                <div class="u-width-full-line card u-margin-block-start-16">
+                  <div class="grid-item-1">
+                    <div class="grid-item-1-start-start">
+                      <div class="eyebrow-heading-3">Sorry</div>
+                      <h2 class="heading-level-6 u-margin-block-start-4">You are not logged in yet.</h2>
+                    </div>
+                  </div>
+                  <div class="grid-item-1-end-start">
+                    <div class="u-flex u-gap-16 u-flex-wrap">
+                      <button @click="goToTab('signin')" class="button is-secondary">
+                        <span class="icon-lock-open" aria-hidden="true"></span>
+                        <span class="text">Sign in</span>
+                      </button>
+                    </div>
+                  </div>
+                </div>
+              </template>
+
+              <template x-if="user !== null && user !== undefined">
+                <div class="u-width-full-line card u-margin-block-start-16">
+                  <div class="grid-item-1">
+                    <div class="grid-item-1-start-start">
+                      <div class="eyebrow-heading-3">Welcome!</div>
+                      <h2 class="heading-level-6 u-margin-block-start-4">Signed in as <code class="inline-code" x-text="user.email"></code>
+                      </h2>
+                      <p class="u-flex u-cross-baseline u-gap-4 u-margin-block-start-16">
+                        <span class="icon-info u-color-text-info" aria-hidden="true"></span>
+                        <span class="u-color-light-only-text-neutral-70 u-color-dark-only-text-neutral-50">
+                          Your user ID is <code class="inline-code" x-text="user.$id"></code>
+                        </span>
+                      </p>
+                    </div>
+                    <div class="grid-item-1-end-start">
+                      <div class="u-flex u-gap-16 u-flex-wrap">
+                        <button :disabled="submitting" @click="onSignOut()" class="button is-secondary">
+                          <span class="icon-logout-left" aria-hidden="true"></span>
+                          <span class="text">Sign out</span>
+                        </button>
+                      </div>
+                    </div>
+                  </div>
+                </div>
+              </template>
+            </div>
+          </template>
         </div>
       </div>
     </main>

From 5e00f276a89e31ed4e4d15afa5bb0f72ad759d76 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Matej=20Ba=C4=8Do?= <matejbaco2000@gmail.com>
Date: Sun, 19 May 2024 10:26:58 +0200
Subject: [PATCH 6/6] Passkey update

---
 node/authenticate-with-passkey/README.md      | 30 +++++++++++++++++--
 node/authenticate-with-passkey/appwrite.json  | 26 ----------------
 node/authenticate-with-passkey/package.json   |  5 ++--
 node/authenticate-with-passkey/setup/setup.sh |  1 -
 .../static/index.html                         | 16 +++++-----
 5 files changed, 38 insertions(+), 40 deletions(-)
 delete mode 100644 node/authenticate-with-passkey/appwrite.json
 delete mode 100644 node/authenticate-with-passkey/setup/setup.sh

diff --git a/node/authenticate-with-passkey/README.md b/node/authenticate-with-passkey/README.md
index c4fe0042..3a6a63c7 100644
--- a/node/authenticate-with-passkey/README.md
+++ b/node/authenticate-with-passkey/README.md
@@ -4,7 +4,7 @@ Sign-in with passkey into Appwrite Account.
 
 ## 🧰 Usage
 
-TODO
+Read tutorial [article on Dev.to](https://dev.to/meldiron/biometric-authentication-with-passkeys-3e1) to learn more.
 
 ## ⚙️ Configuration
 
@@ -18,4 +18,30 @@ TODO
 
 ## 🔒 Environment Variables
 
-TODO (APPWRITE_API_KEY, APPWRITE_ENDPOINT, ALLOWED_ORIGIN)
\ No newline at end of file
+### ALLOWED_HOSTNAME
+
+Hostname (like `myapp.com`, without protocol or port) that is allowed to use passkey authentication.
+
+| Question     | Answer                         |
+| ------------ | ------------------------------ |
+| Required     | No                             |
+| Sample Value | `passkeydemo.appwrite.global` |
+
+### APPWRITE_API_KEY
+
+API Key to talk to Appwrite backend APIs.
+
+| Question      | Answer                                                                                             |
+| ------------- | -------------------------------------------------------------------------------------------------- |
+| Required      | Yes                                                                                                |
+| Sample Value  | `d1efb...aec35`                                                                                    |
+| Documentation | [Appwrite: Getting Started for Server](https://appwrite.io/docs/advanced/platform/api-keys) |
+
+### APPWRITE_ENDPOINT
+
+The URL endpoint of the Appwrite server. If not provided, it defaults to the Appwrite Cloud server: `https://cloud.appwrite.io/v1`.
+
+| Question     | Answer                         |
+| ------------ | ------------------------------ |
+| Required     | No                             |
+| Sample Value | `https://cloud.appwrite.io/v1` |
\ No newline at end of file
diff --git a/node/authenticate-with-passkey/appwrite.json b/node/authenticate-with-passkey/appwrite.json
deleted file mode 100644
index 9783a03e..00000000
--- a/node/authenticate-with-passkey/appwrite.json
+++ /dev/null
@@ -1,26 +0,0 @@
-{
-    "projectId": "65c767c0831640a7a150",
-    "projectName": "Passkey",
-    "functions": [
-        {
-            "$id": "authenticateWithPasskey",
-            "name": "authenticateWithPasskey",
-            "runtime": "node-18.0",
-            "execute": [
-                "any"
-            ],
-            "events": [],
-            "schedule": "",
-            "timeout": 15,
-            "enabled": true,
-            "logging": true,
-            "entrypoint": "src/main.js",
-            "commands": "npm install && npm run setup",
-            "ignore": [
-                "node_modules",
-                ".npm"
-            ],
-            "path": "./"
-        }
-    ]
-}
\ No newline at end of file
diff --git a/node/authenticate-with-passkey/package.json b/node/authenticate-with-passkey/package.json
index 17bfc1d4..d21f856e 100644
--- a/node/authenticate-with-passkey/package.json
+++ b/node/authenticate-with-passkey/package.json
@@ -5,12 +5,11 @@
   "main": "src/main.js",
   "type": "module",
   "scripts": {
-    "format": "prettier --write .",
-    "setup": "sh setup/setup.sh"
+    "format": "prettier --write ."
   },
   "dependencies": {
     "@simplewebauthn/server": "^9.0.2",
-		"node-appwrite": "npm:@appwrite.io/console@0.6.0-rc.9"
+		"node-appwrite": "^12.0.0"
   },
   "devDependencies": {
     "prettier": "^3.0.0"
diff --git a/node/authenticate-with-passkey/setup/setup.sh b/node/authenticate-with-passkey/setup/setup.sh
deleted file mode 100644
index e68be563..00000000
--- a/node/authenticate-with-passkey/setup/setup.sh
+++ /dev/null
@@ -1 +0,0 @@
-echo 'TODO: Create collections'
\ No newline at end of file
diff --git a/node/authenticate-with-passkey/static/index.html b/node/authenticate-with-passkey/static/index.html
index d20e414a..fa264667 100644
--- a/node/authenticate-with-passkey/static/index.html
+++ b/node/authenticate-with-passkey/static/index.html
@@ -10,13 +10,13 @@
   <link rel="stylesheet" href="https://unpkg.com/@appwrite.io/pink-icons" />
   <script src="//unpkg.com/alpinejs" defer></script>
   <script src="https://unpkg.com/@simplewebauthn/browser/dist/bundle/index.umd.min.js"></script>
-  <script src="https://cdn.jsdelivr.net/npm/matej-15-qa-appwrite@14.0.0-rc.1"></script>
+  <script src="https://cdn.jsdelivr.net/npm/appwrite@14.0.0"></script>
 
   <script>
     const client = new Appwrite.Client();
     client
-      .setEndpoint('https://qa.appwrite.org/v1')
-      .setProject('65c767c0831640a7a150');
+      .setEndpoint('https://cloud.appwrite.io/v1')
+      .setProject('[YOUR_PROJECT_ID]');
 
     const account = new Appwrite.Account(client);
 
@@ -48,7 +48,7 @@
           this.submitting = true;
 
           try {
-            const responseStart = await fetch('https://passkey.functions.qa.appwrite.org/v1/challenges', {
+            const responseStart = await fetch('/v1/challenges', {
               method: 'POST',
               body: JSON.stringify({ email: this.email }),
               headers: {
@@ -64,7 +64,7 @@
 
             const registration = await SimpleWebAuthnBrowser.startRegistration(body.options);
 
-            const responseFinish = await fetch('https://passkey.functions.qa.appwrite.org/v1/challenges', {
+            const responseFinish = await fetch('/v1/challenges', {
               method: 'PUT',
               body: JSON.stringify({ challengeId: body.challengeId, registration }),
               headers: {
@@ -92,7 +92,7 @@
           this.submitting = true;
 
           try {
-            const responseStart = await fetch('https://passkey.functions.qa.appwrite.org/v1/tokens', {
+            const responseStart = await fetch('/v1/tokens', {
               method: 'POST',
               body: JSON.stringify({ email: this.email }),
               headers: {
@@ -108,7 +108,7 @@
 
             const authentication = await SimpleWebAuthnBrowser.startAuthentication(body.options);
 
-            const responseFinish = await fetch('https://passkey.functions.qa.appwrite.org/v1/tokens', {
+            const responseFinish = await fetch('/v1/tokens', {
               method: 'PUT',
               body: JSON.stringify({ challengeId: body.challengeId, authentication }),
               headers: {
@@ -161,7 +161,7 @@ <h4 class="heading-level-6">Passkey authentication</h4>
       <div class="main-header-end u-margin-inline-end-16">
         <ul class="buttons-list is-with-padding">
           <li class="buttons-list-item is-not-mobile u-padding-inline-0">
-            <a href="https://github.com/appwrite/templates/tree/main/node/authenticate-with-passkey" target="_blank"
+            <a href="https://github.com/meldiron/authenticate-with-passkey" target="_blank"
               class="button is-secondary is-not-mobile"><span class="text">View on GitHub</span></a>
           </li>
         </ul>