Passkeys: Goodbye Passwords, Hello Security! (SpringOne)

Are you tired of juggling dozens of passwords? In 2022 alone, hackers exposed over 24 billion passwords, compromising personal identities, finances, and more. But what if there was a better way? Enter Passkeys. This cutting-edge solution not only offers robust multi-factor authentication but is now paving the way to replace passwords altogether. Join Rob and Josh as they unveil the power of Passkeys. Witness firsthand how the new Spring Security Passkeys support can revolutionize your applications, making them more secure and easier to use. Say goodbye to password fatigue and hello to a secure, seamless login experience. Are you ready to embrace the future of authentication?
Speakers:
Rob Winch, Spring Security Project Lead, Broadcom
Josh Long, Spring Developer Advocate, Broadcom

[@konstantingromov6485]

Absolutely crazy to have this content in 44 minutes (with working live coding without live templates!). Great job, Rob and Josh

[@goodcourseavailable]

You guys should bring top-notch upgrades because you are lurking behind as compared to other languages and frameworks.. In fact, u are amazing. Much ❤️ Spring boot

[@EmmanuelBLONVIA]

02:30 Live coding starts 29:47 Magic Links

[@mohammadballour6504]

Thanks josh and rob ♥️♥️

[@vukotici32]

@SpringDeveloper how is the passkey(public key) saved in the database ?

[@anl2191]

Did you manage to save it?

[@vukotici32]

@@anl2191 no

[@anl2191]

@@vukotici32 me too unfortunately. :(

[@AdamAl-Salman]

Both features really useful, and I will be using them as soon as possible. Is there a flow to register a passkey without having to login first with a username/passwords? If we want to eliminate passwords we need this.

[@anl2191]

I have the same question. Did you solve it?

[@aravinth.sivarasa]

simply awesome 🖖

[@felicityspyder]

Will this be implemented in spring security 7?

[@ghrown]

Passkeys and One-Time Tokens are scheduled for Spring Security 6.4, in November

[@felicityspyder]

@ghrown cool beans! Looking forward to trying it out when I get the time.

[@LarsDunemark]

at 37:55 please make this a big warning in spring documentation, wasted embarrassing amount of time trying to find out with my code didn't behave like this demo. :) Cookie conflict base on using same domain (localhost)

[@LarsDunemark]

Or add a hint for development change: ``` server: port: 8081 servlet: session: cookie: name: app1_JSESSIONID ```

[@mohammadtoficmohammad3594]

Thank you

[@sttue]

I was checking a couple of times if I accidentally set the playback speed to 150% upwards...but no 😱Awesome video, important topic, not easy to follow...a bit too fast for mere mortals

[@AdamAl-Salman]

The API had even changed by the time I went and implemented it. So probably fast because it will change when released in 6.4.

[@LJSheffRBLX]

SpringDeveloper, wanna collab keep it up

[@HaiNguyen-wx6ub]

amazing :D

[@StijnHommes]

Goodbye SpringOne! I'm not giving up on passwords and I'm definitely not replacing them with inferior passkeys like you are suggesting here. Stop trying to avoid passwords and start doing your job!

[@shubitoxX]

bye

[@danielmancera1548]

audio has bad quality