Introducing Ithibati: passkey authentication for Elixir

Since July I've been working on Chapisho, a self-hostable blog engine written in Elixir and Phoenix. Its repository is still private. Like most things I build for myself, it needed a way to sign in. And as with Burrow, the Go web framework I wrote earlier this year, I didn't want passwords anywhere near it.So Chapisho got passkey login early on. At some point I noticed that the identity part had very little to do with blogging. It knew about accounts, passkeys, sessions and invitations, and nothing about posts or themes. So I moved it into its own library, and that became Ithibati.The name is Swahili and means proof or evidence. In WebAuthn's own vocabulary, that's attestation. Chapisho is Swahili too, for publication. I've liked the language since I studied computational linguistics and tried to speak it in a seminar. So my recent projects all have Swahili names: Chapisho, Ithibati, Sikio and Jibu.Why passkeys, and why a libraryI simply like passkeys. Passwords get forgotten and…