You're assuming the client-side PAKE implementation must be provided by JS sent from the server. Why not implement a client-side PAKE API in the browser? It co

You're assuming the client-side PAKE implementation must be provided by JS sent from the server. Why not implement a client-side PAKE API in the browser? It could be designed to disallow any server-sent code from accessing client credentials in plaintext, while still allowing styling and layout of credentials fields (this might be impossible, though). Or alternatively, let the browser handle the login/credentials UI, and build in a seamless password manager integration.