Passkeys in practice: implementing passwordless apps
summary
Claims that WebAuthn passkeys let apps go passwordless using asymmetric keys, demonstrated with Spring Security + the webauthn4j Java library and Spring Boot support (RP ID/origins configured). Demo shows register/login with Touch ID, YubiKey USB, and phone QR/Bluetooth, public keys kept server‑side (currently in memory; JDBC storage planned), and a custom login page attempt that partially fails. Notes ~27 verification steps in verification flow and that major providers already support passkeys. webauthn4j public key stored in memory YubiKey USB
AI-written summary · about
chapters (13)
- 0:00Introduction
- 1:09Passwordless apps matter
- 6:09What are passkeys
- 10:21Passkeys and asymmetric crypto
- 13:36Passkey registration flow
- 18:35Passkey auth flow
- 20:43Spring Security setup
- 25:03Storing passkeys in DB
- 27:31Passkey attestation objects
- 30:16Custom login UI
- 33:07JavaScript integration
- 38:55Implementation tips
- 40:40Q&A
related talks
49mA Passwordless Future! WebAuthn for Java Developers
51mA Passwordless Future! Passkeys for Java Developers
47mPasswordless apps: Passkeys in practice
52mA Passwordless Future! Passkeys for Java Developers
45mPassword-less apps: implementing WebAuthN
37mA Passwordless Future! Passkeys for Java Developers
59mPasswordless Future: Using WebAuthn And Passkeys In Practice
46mPassword-less apps: implementing WebAuthN