No browser, no password, no problem
summary
Claims a mobile app can do OAuth/OpenID without a browser by using a hypermedia API backed by the authorization server, and combine that with WebAuthn passkeys for phishing‑resistant passwordless. Demonstrated: an iOS demo app (GitHub available) that performs native passkey auth and returns an access token and refresh token (ID token too) — it works in the simulator. Notes migration work: needs device secure enclave support, dynamic client registration and browser fallbacks for older devices.
AI-written summary · about
chapters (8)
- 0:00Introduction and welcome
- 1:00Hypermedia API concepts
- 3:43Drivers and benefits
- 6:03Authentication workflow
- 10:22WebAuthn and passkeys
- 12:40Native demo application
- 14:31Conclusion and summary
- 16:15Q&A and closing
related talks
39mNo passwords, no problem: move beyond passwords with webauthn and passkeys
21mPasswordless Earth 
25mMove over passwords, passkeys are my new best friend!
59mPasswordless Future: Using WebAuthn And Passkeys In Practice
21mPasswords are so 1990
31mGetting Started with Passkeys and WebAuthn
43mPasskeys in practice: implementing passwordless apps
35mNo More Passwords: How I Got Passkeys Working (Without Losing My Mind)