01 THE PROBLEM & MOTIVATION
Why we had to
build this.
Vorflux is a distributed, privacy-preserving session and authentication mesh designed for low-latency edge deployment. It supports passwordless WebAuthn/Passkeys, multi-factor TOTP, and hardware-backed JWT validation without hitting a central database on every request.
The Core Problem:
Centralized auth services add 100-200ms latency to every web request and create single points of failure. Vorflux brings cryptographic verification to the nearest edge node, ensuring zero-latency route authorization.
Who it is built for:
- Edge-first Next.js and Cloudflare Workers architectures
- Teams requiring passkey and biometrics as first-class auth
- Security teams mandating zero database lookups on authenticated GET routes
02 SYSTEM ARCHITECTURE
How the pieces
fit together.
Local WebAuthn credential ceremony at browser level verified via ed25519 asymmetric signatures on edge isolates, with encrypted state cookies.
Browser Passkey Client
Native WebAuthn biometrics and credential creation
Edge Verifier
Sub-millisecond cryptographic signature verification
Session Token Ring
Encrypted sliding session cookies with automatic rotation
03 CORE CAPABILITIES
Designed for
real production.
Native Passkeys & WebAuthn
Biometric fingerprint and FaceID login with zero passwords stored on servers.
Sub-millisecond Edge Verification
Verify JWT and session claims inside edge middleware before request reaches server code.
const { authorized, user } = await verifyEdgeSession(request)
if (!authorized) return redirect('/sign-in')Anti-Session Hijacking Fingerprint
Cryptographic binding between TLS connection fingerprint and session token.
Near instant
OWASP compliant
On static & edge routes
04 PUBLIC ROADMAP
What's shipped and
what is next.
WebAuthn Passkey Ceremony
Full biometric registration and authentication flow.
Cross-Domain Single Sign-On
Zero-trust cookie propagation across subdomains.
Hardware Security Key (FIDO2) Attestation
YubiKey enterprise compliance checks.
05 JOIN THE LAB
Contribute to
Vorflux.
Whether you want to file an issue, submit a design example, optimize an edge route, or write documentation, all contributions are welcomed and credited.