World ID Web Authenticator

Unlock your World ID wallet with a passkey and approve requests from apps. Deployment settings select staging or production services: VITE_APP_ENV is baked into the browser build and APP_ENV configures the API/Worker. Both accept staging or production; local development defaults to staging. The hostname is validated against that setting and cannot switch networks. Production releases set both to production for web.world.org; staging uses authenticator.toolsforhumanity.dev.

Dependencies

• WalletKit — @worldcoin/walletkit-web@0.27.1 for wallet storage, registration and proofs.
• Biometrics TEE — intended for face processing; not integrated yet.

Local Development

Install Bun 1.4.2, then:

bun install --frozen-lockfile
bun run dev

Open localhost:4173 in a browser with WebAuthn PRF support.

Repository Structure

web/         React UI, browser logic and public assets
api/         Bun HTTP server and API routes
packages/    Shared contracts and browser admission policy
tests/       Browser tests and integration fixtures

web/ and api/ own their dependencies. Bun serves both from one origin.

Running Tests

bun run test
bun x playwright install chromium webkit # First run only
bun run test:browser

Static checks:

bun run lint
bun run typecheck

Build and Run

bun run build
bun run start

Container instructions · App request format