Web Authentication APIs

• Understanding Web Authentication Options: Learn about various authentication methods available in modern web browsers, from basic password forms to advanced federated logins.
• Implementing Secure Authentication Systems: Gain insights into implementing secure authentication solutions, including two-factor and multi-factor authentication, JSON web tokens, and passwordless systems.
• Exploring WebAuthn and Passkeys: Discover how to utilize the latest WebAuthn API and Passkeys to enable biometric authentication and eliminate the need for passwords in web applications.
• Enhancing User Experience and Security: Develop skills to enhance login forms for better accessibility, usability, and security using best practices and advanced techniques.

This course, led by independent consultant Maximiliano Firtman, explores the diverse authentication options in modern web development. It guides you through transforming basic login forms into secure, passwordless systems using the latest Web Authentication technologies, including WebAuthn and Passkeys, to improve both security and user experience.

• Frontend developers looking to improve web application security.
• Developers interested in modern authentication methods and technologies.
• Professionals aiming to implement passwordless authentication solutions.
• Anyone keen on learning about biometric authentication and advanced web APIs.

• Basic understanding of HTML, CSS, and JavaScript.
• Familiarity with web development concepts and APIs.
• Experience with server-side programming is beneficial but not required.

• Introduction: Gain insights from Maximiliano's experience with progressive web applications and authentication systems. Access resources, including slides and the course repository.
• Authentication Concepts: Understand core authentication techniques, including multi-factor authentication, JSON web tokens, and public key cryptography.
• Web Authentication Strategies: Learn about HTTP Auth, password security, and the benefits of passwordless authentication to enhance web application security.
• Classic Login Flow: Improve login forms for accessibility and user experience, setting up projects, and handling registration and login processes securely.
• Credential Management: Explore the Credential Management API for auto-login capabilities and securely saving and retrieving credentials.
• Federated Login: Implement federated login with providers like Google, enhancing user experience by integrating third-party authentication systems.
• WebAuthn: Discover WebAuthn workflows and implement registration and authentication endpoints for passwordless login using authenticators like FaceID.
• Passkeys: Learn about passwordless options, including magic links and passkeys, that provide a device-agnostic solution for secure authentication.
• Next Steps & Best Practices: Explore best practices for authentication in native apps, user experience enhancements, and privacy considerations.