1. User enters email
2. SDK calls POST /auth/passkey/login/options
3. If user exists → browser prompts for passkey → verify → JWT
4. If user is new (404) → browser prompts to create passkey → register → JWT

import { StewardAuth } from "@stwd/sdk";

const auth = new StewardAuth({
  baseUrl: "https://api.steward.fi",
  storage: localStorage,
});

// One call handles both registration and login
const result = await auth.signInWithPasskey("user@example.com");

console.log(result);
// {
//   token: "eyJhbGci...",        // 15-min access token
//   refreshToken: "stwd_rt_...", // 30-day refresh token
//   expiresIn: 900,
//   user: { id: "usr_...", email: "user@example.com", walletAddress: "0x..." }
// }

import { StewardProvider, StewardLogin } from "@stwd/react";

function LoginPage() {
  return (
    <StewardProvider
      client={client}
      agentId="my-agent"
      auth={{ baseUrl: "https://api.steward.fi" }}
    >
      <StewardLogin
        showPasskey       // enabled by default
        showEmail={false} // hide email if you only want passkeys
        showGoogle={false}
        showDiscord={false}
        title="Welcome"
        onSuccess={(result) => console.log("Signed in:", result.user)}
      />
    </StewardProvider>
  );
}

npm install @simplewebauthn/browser

# The relying party ID — usually your domain (no protocol, no port)
PASSKEY_RP_ID=myapp.com

# The expected origin for WebAuthn ceremonies
PASSKEY_ORIGIN=https://myapp.com

# Display name shown in the browser's passkey dialog
PASSKEY_RP_NAME="My App"