Add passkeys.tools and learning.passkeys.tools

[lonetis]

No description provided.

[Copilot]

Pull request overview

This PR adds two new resources related to passkeys and WebAuthn to the README: a security testing toolkit (passkeys.tools) and an interactive learning platform (learning.passkeys.tools). Both entries are added to appropriate sections of the resource list.

Changes:

• Added passkeys.tools to the Tools section as a comprehensive security testing and development toolkit
• Added learning.passkeys.tools to both the Demos/Playground and Tutorials sections as an interactive learning platform

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[yackermann]

@lonetis few things:

1. Remove the specification, and server librarier. This is just tool.
2. learning.passkeys.tools is a platform about... FLAGS???
3. I like the idea for passkeys.tools, but want to ask you for a change: Add large text input field above the decoders, instead of awkward edit button. Just make it large text area, and watch for changes. When someone drops new JSON, try decoding it. This is one of my most favorite tools: https://lapo.it/asn1js/

[lonetis]

@yackermann

Remove the specification, and server librarier. This is just tool.

I added passkeys.tools to the Dev Tools section and learning.passkeys.tools to the Demos and Tutorials sections (as it fits both). I did not add anything to the spec and server libs sections.

learning.passkeys.tools is a platform about... FLAGS???

Not directly; it's a CTF-style platform in which users can collect flags when solving different passkey security challenges, just for the "fun" part :). I enhanced the description to make it clearer.

I like the idea for passkeys.tools, but want to ask you for a change [...]

Thanks for the feedback. I use a library that automatically generates this HTML form out of a JSON schema (I mapped all WebAuthn objects and parameters to a JSON schema). But I will add your suggestion to my list and consider adding it.