Vue.js: Building Secure Applications
summary
Explains concrete replacement for passwords: implement WebAuthn public/private key flow in a Vue front end, call navigator.credentials.create and get assertions on login, post a server-generated challenge, store only the public key in the database, and validate signatures server-side to issue tokens. Lists three main threats: brute force, credential stuffing, phishing. Shows working Vue register/login code (~60% of full stack), notes broad Chromium support, mentions Auth0/SDK helpers and that most heavy lifting lives in the browser/platform.
AI-written summary · about
chapters (5)
- 0:00Intro
- 0:50Security is not an easy subject
- 1:08Biggest App Threats today
- 3:20Today's solutions
- 10:42Recap
related talks
29mWho Are Vue? Authn In Vue, The Important Parts
28mWho are vue? Authn in Vue, the important parts
35mVue Fortified: Best Practices for Web App Security
45mPasswords Are So 1990
39mPasswords are so 1990 - Sam Bellen - PHP UK 2022
40mGoing passwordless with Web Authentication
18mA Developers Guide to WebAuthn
10mGetting Started: Amplify Authenticator for Vue