Passki

WebAuthn / Passkey library for Rust

A simple and secure WebAuthn/Passkey authentication library for Rust. Passki lets you add passwordless, phishing-resistant login to your app without reimplementing the FIDO2 protocol yourself.

It follows a two-step, challenge-response model and covers the full passkey lifecycle: the server issues a challenge, the client signs it with the authenticator, and Passki validates the result for both registration and authentication flows.

  • Multiple algorithms: EdDSA, ES256/ES384, and RS256/RS384.
  • Signature-counter replay protection against cloned authenticators.
  • Flexible configuration for authenticator selection, user verification, and credential exclusion.
  • WebAuthn extensions support, including credProps and PRF.
  • Implements WebAuthn Specification Level 1, with Levels 2 and 3 in progress.
  • Framework-agnostic - works with any HTTP server (Axum, Actix, Rocket, and more).
  • Pure, memory-safe Rust with no unsafe code.
  • A type-safe API with comprehensive error handling.

Climate

Run containerized CLI tools natively

Climate lets you run containerized command-line tools as if they were installed natively. Think of it as Flatpak, but for the terminal—providing a seamless way to use tools without polluting your host system.

It functions as a self-contained container engine that pulls images and runs them in-process, eliminating the need for external daemons like Docker or Podman. By managing UID/GID mapping for bind-mounts, it ensures that files created by containerized tools maintain correct ownership on your host.

  • Single static binary: No dependency on heavy container runtimes.
  • Rootless execution: Tools run with your own user privileges.
  • Symlink shortcuts: Call containerized tools directly by name from your PATH, allowing them to feel like native binaries.
  • Flexible app definitions: Easy configuration via TOML files.