A minimal implementation of the Email Verification Protocol deployed on Cloudflare Workers with Zero Trust.

Stars

67

7-day growth

No data

Forks

0

Open issues

0

License

No data

Last updated

2026-07-13

AI repository intelligence
FR-AI / ANALYSIS

Why it is worth attention

It provides a deployable reference for the emerging Email Verification Protocol, integrating Cloudflare's edge computing and Zero Trust for secure email-based identity verification.

Who it is for

  • Cloudflare Workers developers
  • Identity providers implementing EVP
  • Web developers exploring FedCM and email verification
  • Security-conscious engineers seeking passwordless authentication

Use cases

  • Passwordless email login for web applications
  • Implementing an identity provider for FedCM
  • Verifying email ownership as part of account recovery or authorization
  • Demonstrating the Email Verification Protocol in production environments

Strengths

  • Simple deployment with clear step-by-step instructions
  • Leverages Cloudflare Zero Trust for endpoint protection
  • Uses EdDSA key pairs for secure signatures
  • References authoritative sources (Chrome, IETF, W3C)

Considerations

  • Requires a Cloudflare account and Zero Trust setup
  • Depends on an experimental protocol in origin trial
  • Limited documentation beyond deployment steps; no detailed API or code explanation

README quick start

Verify me!

Minimal implementation of the Email Verification Protocol on Cloudflare Workers + Zero Trust.

Deploy yours

  1. Prepare a Cloudflare account and configure Cloudflare Zero Trust.
  2. Deploy this project to Workers, changing variables in wrangler.jsonc.
  3. Protect the following endpoints in Zero Trust: /accounts, /login, and /verify-email.
  4. Make sure the authorisation Cookie is SameSite=None (Application > Additional settings > Cookie).
  5. Create .well-known/web-identity on your eTLD+1 domain name.
  6. Login using your browser via /login endpoint.
  7. Try the demo with your email address(es)!

How to create a EdDSA key pair

node <<EOT
const jose = await import("jose");
const keyPair = await jose.generateKeyPair("EdDSA", { extractable: true });
const jwk = await crypto.subtle.exportKey("jwk", keyPair.privateKey);
console.log(jwk);
EOT

The d value is a private key and the x value is a public key.

References

Description

Minimal implementation of the Email Verification Protocol on Cloudflare Workers + Zero Trust.

Related repositories

Similar projects matched by category, topics, and programming language.

TanStack
Featured
TanStack GitHub avatar

router

TanStack Router is a type-safe, data-driven React router with built-in caching, prefetching, and nested layouts, while TanStack Start extends it into a full-stack SSR framework.

Web DevelopmentFrontend Frameworks
14,861
vercel-labs
Featured
vercel-labs GitHub avatar

scriptc

scriptc compiles ordinary TypeScript into small, fast native executables without needing Node.js, V8, or any JavaScript runtime in the binary.

Developer ToolsCode Quality & Build
1,985
Jakubantalik
Featured
Jakubantalik GitHub avatar

thinking-orbs

A React component library that renders six hand-tuned animated thought orb loading indicators on a plain 2D canvas, with two purpose-tuned sizes and automatic theme detection for AI and agent UIs.

AI & Machine LearningAI Agents
1,191