- Some requests (e.g. logging in) can be made to the Passkey API directly from the frontend. These do not require a secret API key.
- All other requests that require a secret API key (e.g. registering a new passkey) should only be made from your backend. You should never leak that secret API key to the client.
Next steps
Set up a Passkey API project
Set up a Passkey API project on Hanko Cloud.
Example implementation
A Node.js example showcasing implementation of the Passkey API without any
SDK.
JavaScript/TypeScript SDK
If you’re already using JS/TS for your backend, you can use our SDK to
easily integrate the Passkey API.