Going passwordless with Web Authentication

on YouTube ↗40m

" summary

Walks through replacing passwords with WebAuthn using Spring Boot starter backend and reusable Web Components, demonstrating registration, challenge/response login, recovery tokens, and adding devices via WebSocket discovery then peer-to-peer WebRTC. Shows a live demo with a USB security key (YubiKey) and fingerprint platform authenticators, proves phishing fails because browsers enforce relying party id/domain and credential scoping, notes Chromium DevTools WebAuthn simulator for testing, and calls out gaps: desktop Linux TPM support and some Firefox/Mac combinations.

AI-written summary · about

" chapters (5)

1. 0:00Start
2. 1:39Authentication - Introduction
3. 2:05Authentication - How does it work?
4. 3:08Authentication. Challenges
5. 15:48WebAuth-Add a new device

" related talks

• 46mPassword-less apps: implementing WebAuthNDaniel Garnier-Moiroux · Voxxed Days Zürich 2024
• 45mPassword-less apps: implementing WebAuthNJosh Long, Daniel Garnier-Moiroux · Devoxx France 2024
• 49mA Passwordless Future! WebAuthn for Java DevelopersDeepu K Sasidharan · J-Fall 2023
• 45mPasswords Are So 1990Sam Bellen · Voxxed Days Banff 2019
• 30mWebAuthn Rocks! Stop authenticating as if it were the 60sRuben Restrepo · revo.js 2019
• 43mPasskeys in practice: implementing passwordless appsDaniel Garnier-Moiroux · Voxxed Days Ticino 2025
• 27mSay Goodbye to Passwords and Hello to WebAuthnBen Dechrai · JSConf Korea 2020 Home Edition
• 20mWebAuthn: The Revival of AuthenticationThomas Blaisot · DevFest Lille 2019