Password-less apps: implementing WebAuthN

on YouTube ↗45m

" summary

Shows how to replace passwords with WebAuthN using Spring Boot and Spring Security, demonstrating Touch ID, YubiKey and iPhone QR pairing, JavaScript calls navigator.credentials.create and get, and a server that verifies signatures with libraries like webauthn4j or Yubico’s server SDK. Builds a runnable demo that registers a credential, stores the public key, then logs in with a signed challenge — it compiles and authenticates locally. Feature lands in Spring Security after 6.3 (aiming 6.4).

AI-written summary · about

" chapters (9)

1. 0:00Introduction and setup
2. 3:57What are pass keys
3. 8:56How WebAuthN works
4. 10:39Demo setup and passwordless login
5. 12:44Registering a pass key
6. 22:46Validating a pass key
7. 33:57Observations and security notes
8. 35:44Spring Security implementation
9. 43:17Live demo and conclusion

" related talks

• 46mPassword-less apps: implementing WebAuthNDaniel Garnier-Moiroux · Voxxed Days Zürich 2024
• 43mPasskeys in practice: implementing passwordless appsDaniel Garnier-Moiroux · Voxxed Days Ticino 2025
• 49mA Passwordless Future! WebAuthn for Java DevelopersDeepu K Sasidharan · J-Fall 2023
• 40mGoing passwordless with Web AuthenticationBogdan Arvinte, Mihaita Tinta · Voxxed Days Bucharest 2022
• 45mSecure your application with WebAuthnArnaud Locquet · Devoxx France 2021
• 39mPasswords are so 1990 - Sam Bellen - PHP UK 2022Sam Bellen · PHP UK Conference 2022
• 30mWebAuthn Rocks! Stop authenticating as if it were the 60sRuben Restrepo · revo.js 2019
• 45mPasswords Are So 1990Sam Bellen · Voxxed Days Banff 2019