App domain (SSO client)

You are on www.passkey.rndtestwide.biz as app site-a. This site does not run WebAuthn. Login goes through the middle auth domain.

Session

Not logged in.

Login via auth domain

How to test (different root domains)

  1. Deploy this project on the broker domain with role=broker, set rp_id to that auth domain’s parent, enable MySQL, set shared_secret + client_apps.
  2. Register a passkey on the broker index.php.
  3. Deploy on site-a and site-b with role=client, different app_id / public_base_url, same shared_secret and broker.base_url.
  4. Open this app → Login → passkey on broker → return here logged in.
  5. Repeat on the other root domain with the same passkey.

Broker: https://passkey.potenzia.biz/