A Developers Guide to WebAuthn
summary
Clear claim: WebAuthn replaces passwords with public‑key authentication using browser APIs. Shows concrete code paths — navigator.credentials.create and navigator.credentials.get — with server‑generated challenges, RP and user id handling, alg (e.g. -7) and authenticatorSelection (userVerification vs userPresence, authenticatorAttachment, timeout). Demonstrates sending credentials to the server for signature verification, explains requireResidentKey=true for discoverable credentials (no username) and states not all browsers support it yet, touting phishing resistant and breach reduction.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 5:26Passwordless future
- 7:14What is WebAuthn
- 9:45WebAuthn benefits
- 10:06WebAuthn registration
- 13:55WebAuthn authentication
- 14:59Discoverable credentials
- 16:24Resources
related talks
27mSay Goodbye to Passwords and Hello to WebAuthn
20mWebAuthn: The Revival of Authentication
30mWebAuthn Rocks! Stop authenticating as if it were the 60s
42mBeyond Passwords: How WebAuthn Actually Works
45mPasswords Are So 1990
01h 14mWebAuthn: Theory and practice
44mWebAuthn: Strong Authentication vs Privacy vs Convenience
26mWebAuthn 101 - Demystifying WebAuthn