Web SDK

The FIDO2 Web SDK (idc-fido2-web-js-lib-bundle.js) is a browser-only JavaScript library that simplifies the integration of FIDO2 authentication in web applications. Rather than calling the WebAuthn API directly, you can use this SDK to handle credential creation, authentication, and Device Bound Key (DBK) management through a consistent, high-level interface.

What the SDK provides

The SDK handles:

• Generating WebAuthn credential responses from FIDO2 Server challenges
• Managing Device Bound Keys (DBK) for device-specific cryptographic operations
• Bridging your web application with the FIDO2 Server API
• Handling cryptographic operations securely in the browser (IndexedDB, Web Crypto API)

When to use this SDK

Use this SDK when:

• Building web applications that integrate with the IDCloud FIDO2 Server
• Implementing passwordless authentication
• Adding FIDO2 or WebAuthn support to a browser-based application
• Requiring device-bound cryptographic keys alongside FIDO2 credentials

This SDK is not intended for:

• Node.js or server-side JavaScript environments
• Server-side rendering (SSR) frameworks such as Next.js or Nuxt.js
• Mobile native applications — use platform-specific WebAuthn APIs instead
• Non-browser JavaScript runtimes (Deno, Bun, and similar)

Integration architecture

Browser (Your Web Application)
  - FIDO2 Web SDK
  - WebAuthn API (browser native)
  - IndexedDB (Device Bound Key storage)
        |
        | HTTPS
        v
Your Relying Party Backend
  - REST API endpoints
  - Session management
        |
        | HTTPS
        v
IDCloud FIDO2 Server
  - /attestation/options
  - /attestation/result
  - /assertion/options
  - /assertion/result

The SDK runs entirely in the browser. Your Relying Party backend acts as an intermediary between the browser and the FIDO2 Server. The FIDO2 Server is never accessed directly from the browser.

SDK documentation

• Getting started: Download, installation, setup, and initialization
• API reference: Complete API documentation for all public functions
• Integration guide: Step-by-step integration for registration, authentication, and Device Bound Key flows
• Error handling: Error categories, codes, and handling patterns
• Browser compatibility: Browser and platform requirements
• Troubleshooting: Common issues, debugging tips, and FAQ

Related documentation

• FIDO authentication overview: Concepts, authenticator types, and credential types
• Device Bound Key extension: Server-side configuration for the DBK extension
• FIDO authentication APIs: FIDO2 Server REST API reference
• FIDO authentication release notes: Version history including Web SDK releases