Device Bound Session Credentials (DBSC) for Node.js — middleware that binds session cookies to a hardware TPM key to stop cookie theft, with a Web Crypto polyfill for Firefox & Safari.
nodejs express typescript authentication nextjs chromium session-management web-security tpm fastify hono secure-enclave webauthn dbsc cookie-theft session-security cookie-security device-bound-session-credentials
-
Updated
Sep 19, 2026 - TypeScript