KERIAuth

KERI Auth Browser Extension

The KERI Auth Browser Extension works with the KERI suite for decentralized identity and authentication, the GLEIF vLEI credential ecosystem, and supporting websites.

KERI Auth allows users to create and manage their own digital identifiers, and to use these and credentials issued to them to authenticate themselves with websites and services.

KERI Auth beta is available via the Chrome Web Store.

Context

KERI Auth provides supporting websites and their services with cryptographically assured authentic user interactions, while avoiding weaker security methods including username/password, shared secrets (including one-time passwords), or access tokens (federated identity).

Instead, website resource interaction requests can be conveniently cryptographically signed by the user, and along with credentials provide clear authenticity of the user.

The solution works in the context shown below, consistent with GLEIF’s vLEI Ecosystem:

Features

We are preparing for an upcoming beta release to be published on the Chrome Web Store.

General

• Extension for Chromium-based desktop browsers
• All signing keys are derived from the user’s cryptographically strong passcode, which is stored only by the user.
• Interact with a KERI Agent to create identifiers
• Credentials
  • Able to import or use an ACDC credential that may be stored in KERIA
  • Third-party KERI component source can issue a credential (in ACDC format) to extension holder.

User Experience

• Configure connection and passcode to KERI Agent (KERIA)
• Optionally configure to use one or more Webauthn Authenticators for secure and convenient unlocking of KERI Auth.

• Authorize for website using KERI Identifier or Credential.

• View all credentials issued to you (shown in light and dark themes)

• Approve website interactions (via signed HTTP Header Requests, shown interacting with https://github.com/gleiF-IT/reg-pilot-webapp)

• Website validates request (including the Credential issuee’s signature, and deep validation of credential provenance via the https://github.com/GLEIF-IT/vlei-verifier service).

Open Source

The KERI Auth browser extension is open source and available at https://github.com/KERIAuth/keriauth-blazor-wasm