Password-less apps: implementing WebAuthN by Daniel Garnier-Moiroux
HTML-код
- Опубликовано: 11 сен 2024
- Passwords. They're everywhere, they get leaked... A security nightmare! A work-around is to a delegate authentication to a third party, for example using OpenID Connect. But sometimes you can't or don't want to do that - can you go password-less, with user-friendly flows?
WebAuthN is a browser-based technology that allows you to log in using physical devices, such as a Yubikey, or MacOS's TouchID or iOS' FaceID. It has been well-supported by browsers for multiple years now. With this technology, we can make our apps authenticate users without a password.
In this presentation, we will discuss learn the basics of WebAuthN, and do some live-coding to add WebAuthN to an existing Spring Boot application.
Awesome presentation! Dude was clearly well prepared navigating through all that code.
source code?