English versionEN

Authentication Beyond Passwords

Please sign in to watch this workshop.

Passwords have long been the keys to our kingdoms. However, they often become the weak points in our armor — forgotten, misused, or exploited. Our Next apps often make use of passwords to authenticate users, but what would a world with no passwords look like? And how we can start driving into that future today?

This workshop has been presented at React Day Berlin 2023, check out the latest edition of this React Conference.

FAQ

Juan enjoys software engineering because he loves to build stuff, particularly software.

Passkeys are a method of passwordless authentication that use unique private-public key pairs for each service. They are phishing-resistant and provide a better user experience by eliminating the need for passwords.

WebAuthn is a W3C recommendation for defining an API that lives in browsers for the creation of strong, attested, scoped, public key-based credentials. It uses private-public key cryptography to provide a strong method of authentication.

You can find Juan online on most social media platforms at @BAJCMartinez.

Traditional passwords are easy to forget, guess, or crack. People often use simple passwords or reuse the same password across multiple services, which can be compromised if leaked.

Platforms that currently support passkeys include Auth0 by Okta, Google, Apple, and GitHub.

Alternatives to traditional passwords mentioned include multifactor authentication, one-time passwords, biometrics, hardware keys, magic links, social logins, and WebAuthn.

Juan has been a software engineer for over 20 years.

The primary focus of Juan's workshop is the future of authentication, specifically passwordless authentication. Participants will implement a Next.js application that allows users to sign up and log in using passwordless authentication flows.

Juan experienced a scenario where he was on a train and needed to show his ticket but couldn't remember his password, causing a frustrating situation. This highlights how passwords are easy to forget and can cause inconvenient situations.

authentication

Juan Cruz Martinez

127 min

06 Dec, 2023

Comments

Available in other languages:

Watch more workshops on topic

0 to Auth in an hour with ReactJS

React Summit 2023

56 min

0 to Auth in an hour with ReactJS

Workshop

Kevin Gao

Passwordless authentication may seem complex, but it is simple to add it to any app using the right tool. There are multiple alternatives that are much better than passwords to identify and authenticate your users - including SSO, SAML, OAuth, Magic Links, One-Time Passwords, and Authenticator Apps.
While addressing security aspects and avoiding common pitfalls, we will enhance a full-stack JS application (Node.js backend + React frontend) to authenticate users with OAuth (social login) and One Time Passwords (email), including:- User authentication - Managing user interactions, returning session / refresh JWTs- Session management and validation - Storing the session securely for subsequent client requests, validating / refreshing sessions- Basic Authorization - extracting and validating claims from the session token JWT and handling authorization in backend flows
At the end of the workshop, we will also touch other approaches of authentication implementation with Descope - using frontend or backend SDKs.

react web development authentication security

0 to Auth in an Hour Using NodeJS SDK

Node Congress 2023

63 min

0 to Auth in an Hour Using NodeJS SDK

Workshop

Asaf Shen

Passwordless authentication may seem complex, but it is simple to add it to any app using the right tool.
We will enhance a full-stack JS application (Node.JS backend + React frontend) to authenticate users with OAuth (social login) and One Time Passwords (email), including:- User authentication - Managing user interactions, returning session / refresh JWTs- Session management and validation - Storing the session for subsequent client requests, validating / refreshing sessions
At the end of the workshop, we will also touch on another approach to code authentication using frontend Descope Flows (drag-and-drop workflows), while keeping only session validation in the backend. With this, we will also show how easy it is to enable biometrics and other passwordless authentication methods.
Table of contents- A quick intro to core authentication concepts- Coding- Why passwordless matters
Prerequisites- IDE for your choice- Node 18 or higher

node.js javascript authentication

0 To Auth In An Hour For Your JavaScript App

JSNation 2023

57 min

0 To Auth In An Hour For Your JavaScript App

Workshop

Asaf Shen

Passwordless authentication may seem complex, but it is simple to add it to any app using the right tool.
We will enhance a full-stack JS application (Node.js backend + Vanilla JS frontend) to authenticate users with One Time Passwords (email) and OAuth, including:
- User authentication – Managing user interactions, returning session / refresh JWTs- Session management and validation – Storing the session securely for subsequent client requests, validating / refreshing sessions
At the end of the workshop, we will also touch on another approach to code authentication using frontend Descope Flows (drag-and-drop workflows), while keeping only session validation in the backend. With this, we will also show how easy it is to enable biometrics and other passwordless authentication methods.

authentication case study

Managing Authentication in Next.js

Node Congress 2022

155 min

Managing Authentication in Next.js

Workshop

Michele Riva

Next.js is a compelling framework that makes many tasks effortless providing many out-of-the-box solutions. But when it comes to authentication and user security, it's our mission to make it reliable, secure, and efficient. In this workshop, we'll focus on different user authentication and session management approaches, starting from a custom authentication strategy (that we will build together), and ending learning how to identify and integrate the right auth provider (Auth0, Firebase, etc.) for any app.
Table of contents:- A brief introduction to Next.js- Building an authentication mechanism from scratch- Why we should avoid custom authentication- How to identify the proper authentication mechanism and provider- Integrating NextAuth.js, Auth0, Firebase, or any other provider

next.js node.js authentication

Building a Realtime App with Remix and Supabase

Remix Conf Europe 2022

156 min

Building a Realtime App with Remix and Supabase

Workshop

Jon Meyers

Supabase and Remix make building fullstack apps easy. In this workshop, we are going to learn how to use Supabase to implement authentication and authorization into a realtime Remix application. Join Jon Meyers as he steps through building this app from scratch and demonstrating how you can harness the power of relational databases!

remix authentication database

Server-side Authentication in GraphQL

GraphQL Galaxy 2020

40 min

Server-side Authentication in GraphQL

Workshop

Roy Derks

A hands-on workshop about handling authentication and authorization in GraphQL. During this 3 hour workshop you’ll learn how to add authentication to a GraphQL server using JWTs, and handle query responses with user roles. As a bonus we’ll be adding an authentication server with Auth0.The contents: - Authentication with JWTs - Handling query responses and user roles - Auth0Prerequisites: - JavaScript (preferably TypeScript) - GraphQL

graphql authentication

Check out more articles and videos

We constantly think of articles and videos that might spark Git people interest / skill us up or help building a stellar career

The State of Passwordless Auth on the Web

JSNation 2023

30 min

The State of Passwordless Auth on the Web

Phil Nash

DataStax

Passwords are terrible and easily hacked, with most people not using password managers. The credential management API and autocomplete attribute can improve user experience and security. Two-factor authentication enhances security but regresses user experience. Passkeys offer a seamless and secure login experience, but browser support may be limited. Recommendations include detecting Passkey support and offering fallbacks to passwords and two-factor authentication.

authentication security

Server-side Auth with Remix, Prisma, and the Web Platform

Node Congress 2022

34 min

Server-side Auth with Remix, Prisma, and the Web Platform

Top Content

Kent C. Dodds

Creator of EpicWeb.dev, EpicReact.Dev, TestingJavaScript.com

This Talk is about server-side authentication with Remix, Prisma, and the web platform. It covers adding authentication to a Remix app, troubleshooting and login setup, handling user login and session creation, creating user sessions and redirects, handling user ID retrieval and validation, and working with cookies in Remix. The speaker emphasizes that Remix is ready for production and suitable for enterprise apps. Remix simplifies the mental model and improves performance by bridging the network gap between the front end and back end.

remix node.js authentication prisma

GraphQL Authentication and Authorization at Scale

GraphQL Galaxy 2021

22 min

GraphQL Authentication and Authorization at Scale

Jonny Green

Unity Technologies

This talk discusses the implementation of GraphQL Authentication and Authorization at scale at Unity. The speaker explains how they use GraphQL Federation to expose business functionality through a centralized schema and the challenges they faced in handling auth at scale. They describe how they simplified configuration and scaling using Mercurius and implemented hooks and an Orth plugin. The implementation at Unity involves a Unity Orth endpoint and a central Unity Orth directive definition. The talk also covers the implementation of AuthPolicyHandler and AuthDirective for downstream services and showcases different access levels. The Mercurius Auth plugin provides a scalable approach to authentication and ongoing improvements include adding support for a filter schema.

graphql authentication automation

Who Are Vue? Authn In Vue, The Important Parts

Vue.js Live 2024

23 min

Who Are Vue? Authn In Vue, The Important Parts

Ramona Schwering

Developer Advocate @ Auth0, GDE in Web Technologies and a Women Techmaker and Cypress Ambassador.

This Talk introduces authentication in Vue.js and emphasizes that it is not as difficult as it may seem. The speaker explains the concept of authentication and its importance. A code example is used to demonstrate how to implement authentication in Vue.js, including separate UI parts for login, home, and dashboard views. The Talk also covers handling authentication in the Vue.js router, including defining routes, accessing user credentials, and making requests to the backend.

vue security testing authentication security