Passbolt Keynote
summary
Passbolt is an open‑source team password manager that integrates with KPHP and GPG and actually uses a shared token table with explicit expiry timestamps so reset links, email validations and device registrations can be purged and marked used. Server uses PHP password_ (bcrypt) and recommends zxcvbn for contextual strength checks; TOTP provisioning renders QR codes from KPHP view cells and the implementation example uses navigator.credentials.get for WebAuthn assertions. Notes: League OAuth2 client is used for OIDC but does not verify JWT signatures, and a U2F key practical limit is 25 passkeys per U2F key*.
AI-written summary · about
chapters (12)
- 0:00Welcome and introduction
- 2:10Authentication fundamentals
- 10:43Password validation with zxcvbn
- 12:07Account recovery mechanisms
- 15:21Token reuse and context
- 17:54SMS and TOTP authentication
- 25:20OpenID Connect and SSO
- 34:22Future of authentication
- 44:23Passkeys deep dive
- 53:58Passkeys challenges and risks
- 1:00:02Passkeys adoption and future
- 1:05:46Q&A and closing
