~/talk

Testing Passwordless Authentication Flows

on YouTube 18m
Talkat CypressConf 2023 · on Tuesday, 2023-10-17· [security, testing]

speakers

name:Allison Chuang
links:none on file
name:Maxwell Gerber
links:none on file

resources

video:https://youtu.be/_5heL1qZQZc
slides:none on file

summary

Step-by-step methods for testing email magic links, SMS OTPs and WebAuthn/passkeys with concrete tools and code: use Cypress + mosur to provision test inboxes and phone numbers, capture a magic link or OTP and complete a headless end-to-end login; leverage the Chrome DevTools protocol to create virtual authenticators and run WebAuthn registration/assertion flows in tests; note the claim that 82% of breaches stem from poor passwords and that Google is rolling passkeys to default—example Cypress tests and a demo repo are linked on GitHub.

AI-written summary · about

chapters (7)

  1. 0:00Introduction to the team
  2. 0:43The rise of passwordless
  3. 2:01Testing email magic links
  4. 5:13Testing SMS passcodes
  5. 7:55WebAuthn and passkeys
  6. 12:58Testing WebAuthn
  7. 17:01Conclusion and resources

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.