Passwordless Java SDK

The official Bitwarden Passwordless.dev Java library, for Java 8+ runtime.

Installation

Maven: add to the <dependencies> in pom.xml file:

<dependency>
    <groupId>com.bitwarden</groupId>
    <artifactId>passwordless</artifactId>
    <version>1.2.4</version>
</dependency>

Gradle: add to the dependencies in gradle.build file:

implementation group: 'com.bitwarden', name: 'passwordless', version: '1.2.4'

Dependencies

• Apache HttpClient for HTTP API
• FasterXML jackson-databind for JSON (de)serialization

Getting Started

Follow the Get started guide.

Create PasswordlessClient instance:

import com.bitwarden.passwordless.*;

import java.io.*;

public class PasswordlessJavaSdkExample implements Closeable {

    private final PasswordlessClient client;

    public PasswordlessClientExample() {
        PasswordlessOptions options = PasswordlessOptions.builder()
                .apiSecret("your_api_secret")
                .build();

        client = PasswordlessClientBuilder.create(options)
                .build();
    }

    @Override
    public void close() throws IOException {
        client.close();
    }
}

Note: You need to close the underlying http client resources when you are done using PasswordlessClient with close method.

Register a passkey

import com.bitwarden.passwordless.*;
import com.bitwarden.passwordless.error.*;
import com.bitwarden.passwordless.model.*;

import java.io.*;
import java.util.*;

public class PasswordlessJavaSdkExample {

    private final PasswordlessClient client;

    // Constructor

    public String getRegisterToken(String alias) throws PasswordlessApiException, IOException {

        // Get existing userid from session or create a new user.
        String userId = UUID.randomUUID().toString();

        // Options to give the Api
        RegisterToken registerToken = RegisterToken.builder()
                // your user id
                .userId(userId)
                // e.g. user email, is shown in browser ui
                .username(alias)
                // Optional: Link this userid to an alias (e.g. email)
                .aliases(Arrays.asList(alias))
                .build();

        RegisteredToken response = client.registerToken(registerToken);

        // return this token
        return response.getToken();
    }
}

Verify user

import com.bitwarden.passwordless.*;
import com.bitwarden.passwordless.error.*;
import com.bitwarden.passwordless.model.*;

import java.io.*;

public class PasswordlessJavaSdkExample {

    private final PasswordlessClient client;

    // Constructor

    public VerifiedUser verifySignInToken(String token) throws PasswordlessApiException, IOException {

        VerifySignIn signInVerify = VerifySignIn.builder()
                .token(token)
                .build();

        // Sign the user in, set a cookie, etc,
        return client.signIn(signInVerify);
    }
}

Customization

Customize PasswordlessOptions by providing apiSecret with your Application's Private API Key. You can also change the apiUrl if you prefer to self-host.

Customize PasswordlessClientBuilder by providing httpClient CloseableHttpClient instance and objectMapper ObjectMapper.

Examples

See Passwordless Example for Spring Boot 3 application using Java 17 runtime.

Documentation

For a comprehensive list of examples, check out the API documentation.

Contributing

This library compiles to a Java 8 compatible runtime and requires JDK 8 or newer installed. Tested up to JDK 25.

Download and install JDK 8 if you do not have a compatible JDK.

The JAVA_HOME environment variable needs to contain installed JDK path.

Build using Maven wrapper:

./mvnw clean install

(Or mvwnw.cmd for Windows)