Prerequisites

Lit Auth Server URLs. Please refer to Auth Services section.

1a. Register a new WebAuthn credential using the options obtained from the server. This will prompt you to use your device’s authentication method (fingerprint, face ID, etc.). Then, we immediately mint a PKP and associate it with it.1b. If you already have a registered WebAuthn credential, you can authenticate with it directly.

Each WebAuthn credential is bound to a single PKP; you cannot mint another with it.

import { WebAuthnAuthenticator } from "@lit-protocol/auth";

const { pkpInfo, webAuthnPublicKey } = await WebAuthnAuthenticator.registerAndMintPKP({
  authServiceBaseUrl: "https://naga-auth-service.onrender.com",
  scopes: ["sign-anything"],
});

import { WebAuthnAuthenticator } from "@lit-protocol/auth";

const authData = await WebAuthnAuthenticator.authenticate({
  authServiceBaseUrl: "https://naga-auth-service.onrender.com",
});

Get your PKP

const result = await litClient.viewPKPsByAuthData({
  authData: {
    authMethodType: authData.authMethodType,
    authMethodId: authData.authMethodId,
  },
  pagination: {
    limit: 5,
    offset: 0,
  }
});

Generate Auth Context

Use your PKP’s public key to create an AuthContext. This method will cache two things:

session key pair - a temporary cryptographic key pair generated on the client side that acts as a temporary identity for the client application. It consists of:
- A public key - shared with the Lit nodes
- A secret key (private key) - kept securely on the client
Delegation AuthSig aka. the inner auth sig - a cryptographic attestation from the Lit Protocol nodes that authorises your session key to act on behalf of your PKP.

const authContext = await authManager.createPkpAuthContext({
  authData: authData, // <-- Retrieved earlier
  pkpPublicKey: pkpInfo.pubkey,
  authConfig: {
    resources: [
      ["pkp-signing", "*"],
      ["lit-action-execution", "*"],
    ],
    expiration: new Date(Date.now() + 1000 * 60 * 60 * 24).toISOString(),
    statement: "",
    domain: window.location.origin,
  },
  litClient: litClient,
});

⌘I

SDK

Getting Started

Authentication

Core API Methods

PKP Wallet Management

Utilities

Reference

Resources

Guides

FAQ

WebAuthn

Prerequisites

​Prerequisites

Prerequisites