WebAuthn Automation using Selenium
summary
Demonstrates using Selenium 4 VirtualAuthenticator API to automate WebAuthn flows against demo sites (webauthn.io / webauthn.me), showing registration and login succeed and the credential signature count increments on each use. Chromium browsers provide a built‑in virtual authenticator; Selenium 3 requires a hacky Selenium 3 HTTP command to inject virtual authenticators. Java implementation is native in Selenium 4 (Python gets a patch release), sample tests and code are published on GitHub and run successfully.
AI-written summary · about
chapters (13)
- 0:00Start
- 4:24U2f
- 6:56Protection against Phishing
- 8:08Impact of Data Breaches
- 13:41Authenticators
- 14:39Platform Authenticators
- 14:54Examples of Platform Authenticators
- 15:53Roaming Authenticators
- 17:04Virtual Authenticator
- 20:59Attestation Type
- 21:50Authenticator Type
- 32:49Selenium 4 Project
- 36:19How Long Would the Authenticator Be Available on a Particular Browser
related talks
29mAutomated Testing 101/Testing Web Apps 101
30mWebAuthn Rocks! Stop authenticating as if it were the 60s
01h 14mWebAuthn: Theory and practice
26mWebAuthn 101 - Demystifying WebAuthn
53mUser-friendly, phishing-proof 2FA with WebAuthn
20mWebAuthn: The Revival of Authentication
40mGoing passwordless with Web Authentication
45mSecure your application with WebAuthn