pasu
Self-hosted TOTP authenticator PWA with FIDO2 (WebAuthn)
Features
- 2FA secrets stored in your own server instead of your own device
- Codes are generated on server side and push to all clients via server-sent events
- Installable PWA
- Allow others to access the OTP of your accounts
- or, Secured by FIDO2 (WebAuthn)
- Support password-less login via Fingerprint/TouchID/Windows Hello/YubiKey/pin code via FIDO2
- User-Agent block list
- IP block list
Notes: FIDO2 (WebAuthn) is not enabled in demo server
Warning
This PWA is open to public by default.
Everyone is able to access your OTP. Do not use it for any serious businesses.
The author does not bear any losses caused by this app.
Demo
webauth-demo.mp4
Getting Started
Prerequisites: nodejs >= 16
git clone https://github.com/soruly/pasu.git
cd pasu
npm install
node server.js
Note: In order for PWA to work, you must host the server behind a reverse proxy (like nginx) with HTTPS
Example nginx config:
location / {
proxy_set_header Host $host;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection upgrade;
proxy_buffering off;
proxy_cache off;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_pass http://127.0.0.1:3000;
}
Environment Variables
- Copy
.env.exampleto.env - Edit
.envas you need
SERVER_PORT=3000 # (optional) Default: 3000
SERVER_ADDR=127.0.0.1 # (optional) Default: 127.0.0.1
SERVER_NAME=localhost # the app doesn't work without HTTPS, you need a valid hostname
#BLACKLIST_UA=Bot|MSIE|Bytespider|Baidu|Sogou|FB_AN|FB_IOS|FB_IAB|Instagram
#WHITELIST_COUNTRY=ZZ|HK|TW
#GEO_LITE_COUNTRY_PATH=/etc/GeoIP/GeoLite2-Country.mmdb
#GEO_LITE_ASN_PATH=/etc/GeoIP/GeoLite2-ASN.mmdb
#ENABLE_FIDO2=1 # when ENABLE_FIDO2 is not set (default), the server is public
#ALLOW_REGISTER=1 # when ALLOW_REGISTER is not set (default), no new devices can be registered
To register a new device with WebAuthn, turn on both ENABLE_FIDO2 and ALLOW_REGISTER, then visit https://your.server/reg to continue. It is suggested you turn off ALLOW_REGISTER when not needed.
Run by pm2
You also can use pm2 to run this in background.
Use below commands to start / restart / stop server.
npm run start
npm run stop
npm run reload
npm run restart
npm run delete
6 Aug 3, 2022
8 Aug 5, 2022
18 Dec 29, 2022
27.4k Jan 3, 2023
38 Oct 25, 2022
213 Dec 15, 2022
4 Apr 25, 2022
354 Jan 7, 2023
134 Dec 20, 2022
4.9k Jan 4, 2023
8 Nov 20, 2022
11 Dec 26, 2022
5 Dec 29, 2022
4 Jul 18, 2022
20 Dec 15, 2022
202 Dec 22, 2022
5 Sep 14, 2022
2 Sep 17, 2022
22 Dec 23, 2022