siketyan/verify-me

Verify me is a small, minimal implementation of something called the Email Verification Protocol, built to run on Cloudflare Workers alongside Cloudflare's Zero Trust access control product. The Email Verification Protocol is an emerging web standard, referenced in the README through links to Chrome developer documentation, an IETF draft, a W3C specification, and a working group page, that lets a website prove a visitor controls a given email address without a traditional password based login flow. The README is short and mainly a deployment guide rather than an explanation of how the protocol works internally. To run your own copy, you need a Cloudflare account with Zero Trust configured, and you deploy the project to Cloudflare Workers after editing configuration variables in a file called wrangler.jsonc. Three specific routes, accounts, login, and verify-email, need to be protected behind Zero Trust, and the authorisation cookie needs a particular SameSite setting changed in Cloudflare's dashboard. You also need to create a special file at a fixed well-known path on your top level domain, then log in through a browser using the login endpoint before trying a linked live demo with your own email address. The README includes a short code snippet showing how to generate an EdDSA cryptographic key pair using the jose JavaScript library, noting which resulting value is the private key and which is the public key, since the project needs such a key pair to operate. Beyond the deployment steps, reference links, and key generation snippet, the README does not go into detail about the codebase's internal structure, and it does not state what license the project is released under.