The WebAuthn protocol is more than 200 pages long, it's complex and gets constantly tweaked. Moreover, the reality of browsers and authenticators have their own quirks and deviate from the official RFC. As such, all information on the web should be t...
This minimal example shows an integration between FastAPI and Passwordless.ID. Source code: https://github.com/passwordless-id/fast-api-demo Running it To run it: uvicorn main:app And open http://localhost:8000/docs For authentication, you can choos...
This minimalistic repository shows how to use Passwordless.ID to authenticate users. Demo source code: https://github.com/passwordless-id/spring-boot-demo Dependencies Spring Boot already has everything needed built-in for OpenID authentication. Th...
I'll start this blog entry with a question I received in the Discord chat last week. I would like to automatically log out the current user if there is no activity for x time. Haven't thought of the implementation, but is there an API for that? Bef...
In case you heard about Passkeys and WebAuthn, you might wonder what are the differences, or their relationship. This article tries to clarify what both are and shares some personal opinions about the implications of Passkeys. What is WebAuthn? WebAu...
Passwordless authentication using your phone's fingerprint sensor, or face recognition using your webcam is now possible in the browser thanks to the WebAuthn protocol. It is not only more comfortable for users but also more secure since it is two-fa...
