#webauthn — Public Fediverse posts

And already out of time, but got started translating lists from one account to the other. Tomorrow night, let's continue and finish up moving special lists to the new account. See you then!

🔜 Tomorrow’s stream: https://youtube.com/live/7_lRpb6i4rs
⏮️ Playlist so far: https://www.youtube.com/playlist?list=PLRxjf93xotuofCtaxtGOcWeuxVZYJyY-m
📲 Download Jiiiii: https://apps.apple.com/app/apple-store/id6472801548?pt=14724&ct=MastodonCCStreams&mt=8

#Jiiiii #DevStream #tvOS #visionOS #macOS #iOS #iPadOS #Anime #Swift #SwiftUI #Vapor #WebAuthn #BuildInPublic #TestFlight #PWA #WebPush

I'm making a seasonal anime guide app, in the open for all to experience and learn from.

Don't have much time again today, so let's start implementing the new list transfer function!

#Jiiiii #DevStream #tvOS #visionOS #macOS #iOS #iPadOS #Anime #SwiftLang #SwiftUI #Vapor #WebAuthn #BuildInPublic #TestFlight #PWA #WebPush

Come chill with me: https://youtube.com/live/zk_U3kMjMcI

Out of time, but added a method for starting the actual list migration. Tomorrow, let's flesh that out next. See you then!

🔜 Tomorrow’s stream: https://youtube.com/live/zk_U3kMjMcI
⏮️ Playlist so far: https://www.youtube.com/playlist?list=PLRxjf93xotuofCtaxtGOcWeuxVZYJyY-m
📲 Download Jiiiii: https://apps.apple.com/app/apple-store/id6472801548?pt=14724&ct=MastodonCCStreams&mt=8

#Jiiiii #DevStream #tvOS #visionOS #macOS #iOS #iPadOS #Anime #Swift #SwiftUI #Vapor #WebAuthn #BuildInPublic #TestFlight #PWA #WebPush

Out of time, but added a method for starting the actual list migration. Tomorrow, let's flesh that out next. See you then!

🔜 Tomorrow’s stream: https://youtube.com/live/zk_U3kMjMcI
⏮️ Playlist so far: https://www.youtube.com/playlist?list=PLRxjf93xotuofCtaxtGOcWeuxVZYJyY-m
📲 Download Jiiiii: https://apps.apple.com/app/apple-store/id6472801548?pt=14724&ct=MastodonCCStreams&mt=8

#Jiiiii #DevStream #tvOS #visionOS #macOS #iOS #iPadOS #Anime #Swift #SwiftUI #Vapor #WebAuthn #BuildInPublic #TestFlight #PWA #WebPush

Out of time, but added a method for starting the actual list migration. Tomorrow, let's flesh that out next. See you then!

🔜 Tomorrow’s stream: https://youtube.com/live/zk_U3kMjMcI
⏮️ Playlist so far: https://www.youtube.com/playlist?list=PLRxjf93xotuofCtaxtGOcWeuxVZYJyY-m
📲 Download Jiiiii: https://apps.apple.com/app/apple-store/id6472801548?pt=14724&ct=MastodonCCStreams&mt=8

#Jiiiii #DevStream #tvOS #visionOS #macOS #iOS #iPadOS #Anime #Swift #SwiftUI #Vapor #WebAuthn #BuildInPublic #TestFlight #PWA #WebPush

Out of time, but added a method for starting the actual list migration. Tomorrow, let's flesh that out next. See you then!

🔜 Tomorrow’s stream: https://youtube.com/live/zk_U3kMjMcI
⏮️ Playlist so far: https://www.youtube.com/playlist?list=PLRxjf93xotuofCtaxtGOcWeuxVZYJyY-m
📲 Download Jiiiii: https://apps.apple.com/app/apple-store/id6472801548?pt=14724&ct=MastodonCCStreams&mt=8

#Jiiiii #DevStream #tvOS #visionOS #macOS #iOS #iPadOS #Anime #Swift #SwiftUI #Vapor #WebAuthn #BuildInPublic #TestFlight #PWA #WebPush

Out of time, but added a method for starting the actual list migration. Tomorrow, let's flesh that out next. See you then!

🔜 Tomorrow’s stream: https://youtube.com/live/zk_U3kMjMcI
⏮️ Playlist so far: https://www.youtube.com/playlist?list=PLRxjf93xotuofCtaxtGOcWeuxVZYJyY-m
📲 Download Jiiiii: https://apps.apple.com/app/apple-store/id6472801548?pt=14724&ct=MastodonCCStreams&mt=8

#Jiiiii #DevStream #tvOS #visionOS #macOS #iOS #iPadOS #Anime #Swift #SwiftUI #Vapor #WebAuthn #BuildInPublic #TestFlight #PWA #WebPush

I'm making a seasonal anime guide app, in the open for all to experience and learn from.

Another short stream, but let's continue implementing the new account merge routines!

#Jiiiii #DevStream #tvOS #visionOS #macOS #iOS #iPadOS #Anime #SwiftLang #SwiftUI #Vapor #WebAuthn #BuildInPublic #TestFlight #PWA #WebPush

Come chill with me: https://youtube.com/live/gK-W_jSGXcY

I'm making a seasonal anime guide app, in the open for all to experience and learn from.

Another short stream, but let's continue implementing the new account merge routines!

#Jiiiii #DevStream #tvOS #visionOS #macOS #iOS #iPadOS #Anime #SwiftLang #SwiftUI #Vapor #WebAuthn #BuildInPublic #TestFlight #PWA #WebPush

Come chill with me: https://youtube.com/live/gK-W_jSGXcY

I'm making a seasonal anime guide app, in the open for all to experience and learn from.

Another short stream, but let's continue implementing the new account merge routines!

#Jiiiii #DevStream #tvOS #visionOS #macOS #iOS #iPadOS #Anime #SwiftLang #SwiftUI #Vapor #WebAuthn #BuildInPublic #TestFlight #PWA #WebPush

Come chill with me: https://youtube.com/live/gK-W_jSGXcY

I'm making a seasonal anime guide app, in the open for all to experience and learn from.

Another short stream, but let's continue implementing the new account merge routines!

#Jiiiii #DevStream #tvOS #visionOS #macOS #iOS #iPadOS #Anime #SwiftLang #SwiftUI #Vapor #WebAuthn #BuildInPublic #TestFlight #PWA #WebPush

Come chill with me: https://youtube.com/live/gK-W_jSGXcY

I'm making a seasonal anime guide app, in the open for all to experience and learn from.

Another short stream, but let's continue implementing the new account merge routines!

#Jiiiii #DevStream #tvOS #visionOS #macOS #iOS #iPadOS #Anime #SwiftLang #SwiftUI #Vapor #WebAuthn #BuildInPublic #TestFlight #PWA #WebPush

Come chill with me: https://youtube.com/live/gK-W_jSGXcY

Out of time, but got an entry point for merge tasks kinda fleshed out. Tomorrow night, let's add some more color to it. See you then!

🔜 Tomorrow’s stream: https://youtube.com/live/gK-W_jSGXcY
⏮️ Playlist so far: https://www.youtube.com/playlist?list=PLRxjf93xotuofCtaxtGOcWeuxVZYJyY-m
📲 Download Jiiiii: https://apps.apple.com/app/apple-store/id6472801548?pt=14724&ct=MastodonCCStreams&mt=8

#Jiiiii #DevStream #tvOS #visionOS #macOS #iOS #iPadOS #Anime #Swift #SwiftUI #Vapor #WebAuthn #BuildInPublic #TestFlight #PWA #WebPush

Out of time, but got an entry point for merge tasks kinda fleshed out. Tomorrow night, let's add some more color to it. See you then!

🔜 Tomorrow’s stream: https://youtube.com/live/gK-W_jSGXcY
⏮️ Playlist so far: https://www.youtube.com/playlist?list=PLRxjf93xotuofCtaxtGOcWeuxVZYJyY-m
📲 Download Jiiiii: https://apps.apple.com/app/apple-store/id6472801548?pt=14724&ct=MastodonCCStreams&mt=8

#Jiiiii #DevStream #tvOS #visionOS #macOS #iOS #iPadOS #Anime #Swift #SwiftUI #Vapor #WebAuthn #BuildInPublic #TestFlight #PWA #WebPush

Out of time, but got an entry point for merge tasks kinda fleshed out. Tomorrow night, let's add some more color to it. See you then!

🔜 Tomorrow’s stream: https://youtube.com/live/gK-W_jSGXcY
⏮️ Playlist so far: https://www.youtube.com/playlist?list=PLRxjf93xotuofCtaxtGOcWeuxVZYJyY-m
📲 Download Jiiiii: https://apps.apple.com/app/apple-store/id6472801548?pt=14724&ct=MastodonCCStreams&mt=8

#Jiiiii #DevStream #tvOS #visionOS #macOS #iOS #iPadOS #Anime #Swift #SwiftUI #Vapor #WebAuthn #BuildInPublic #TestFlight #PWA #WebPush

Out of time, but got an entry point for merge tasks kinda fleshed out. Tomorrow night, let's add some more color to it. See you then!

🔜 Tomorrow’s stream: https://youtube.com/live/gK-W_jSGXcY
⏮️ Playlist so far: https://www.youtube.com/playlist?list=PLRxjf93xotuofCtaxtGOcWeuxVZYJyY-m
📲 Download Jiiiii: https://apps.apple.com/app/apple-store/id6472801548?pt=14724&ct=MastodonCCStreams&mt=8

#Jiiiii #DevStream #tvOS #visionOS #macOS #iOS #iPadOS #Anime #Swift #SwiftUI #Vapor #WebAuthn #BuildInPublic #TestFlight #PWA #WebPush

Out of time, but got an entry point for merge tasks kinda fleshed out. Tomorrow night, let's add some more color to it. See you then!

🔜 Tomorrow’s stream: https://youtube.com/live/gK-W_jSGXcY
⏮️ Playlist so far: https://www.youtube.com/playlist?list=PLRxjf93xotuofCtaxtGOcWeuxVZYJyY-m
📲 Download Jiiiii: https://apps.apple.com/app/apple-store/id6472801548?pt=14724&ct=MastodonCCStreams&mt=8

#Jiiiii #DevStream #tvOS #visionOS #macOS #iOS #iPadOS #Anime #Swift #SwiftUI #Vapor #WebAuthn #BuildInPublic #TestFlight #PWA #WebPush

I'm making a seasonal anime guide app, in the open for all to experience and learn from.

Short and late stream, but let's start implementing what we planned out yesterday!

#Jiiiii #DevStream #tvOS #visionOS #macOS #iOS #iPadOS #Anime #SwiftLang #SwiftUI #Vapor #WebAuthn #BuildInPublic #TestFlight #PWA #WebPush

Come chill with me: https://youtube.com/live/hYawc1v_XlQ

I'm making a seasonal anime guide app, in the open for all to experience and learn from.

Short and late stream, but let's start implementing what we planned out yesterday!

#Jiiiii #DevStream #tvOS #visionOS #macOS #iOS #iPadOS #Anime #SwiftLang #SwiftUI #Vapor #WebAuthn #BuildInPublic #TestFlight #PWA #WebPush

Come chill with me: https://youtube.com/live/hYawc1v_XlQ

I'm making a seasonal anime guide app, in the open for all to experience and learn from.

Short and late stream, but let's start implementing what we planned out yesterday!

#Jiiiii #DevStream #tvOS #visionOS #macOS #iOS #iPadOS #Anime #SwiftLang #SwiftUI #Vapor #WebAuthn #BuildInPublic #TestFlight #PWA #WebPush

Come chill with me: https://youtube.com/live/hYawc1v_XlQ

I'm making a seasonal anime guide app, in the open for all to experience and learn from.

Short and late stream, but let's start implementing what we planned out yesterday!

#Jiiiii #DevStream #tvOS #visionOS #macOS #iOS #iPadOS #Anime #SwiftLang #SwiftUI #Vapor #WebAuthn #BuildInPublic #TestFlight #PWA #WebPush

Come chill with me: https://youtube.com/live/hYawc1v_XlQ

I'm making a seasonal anime guide app, in the open for all to experience and learn from.

Short and late stream, but let's start implementing what we planned out yesterday!

#Jiiiii #DevStream #tvOS #visionOS #macOS #iOS #iPadOS #Anime #SwiftLang #SwiftUI #Vapor #WebAuthn #BuildInPublic #TestFlight #PWA #WebPush

Come chill with me: https://youtube.com/live/hYawc1v_XlQ

@ScottHelme wrote: "The change I referred to prevents arbitrary sibling/parent-domain abuse […]"

I'm not sure if you're referring to the possible match on
"evil-example.com" (see screenshot) in the old code, but if I remember correctly (from my analysis approx. 3 years ago), the client will only accept an exact match of "example.com" or
"<whatever_including_dots>.example.com".

So albeit ugly, the old server code should not pose a risk I guess?

W.r.t. unexpected abuse of valid subdomains (*): my worry is that people will use your code for their site without modification, never considering the risk I described.

(*) Or malicious JS (3rd party or XSS) on the main domain - while WebAuthn handling was supposed to take place only on e.g. "login.example.com" (using a dedicated subdomain may be a good idea like Dirk Balfanz wrote).

Since your site appears to be using passkeys as an additional factor, the users of your site may not be at risk. However, the idea of passkeys was to "go passwordless", something that other users of your code will probably embrace.

I haven't scanned all of your code, but if not present, my advice is to at least add a warning for unexpected WebAuthn processing on a subdomain (or even the main domain).

#Passkeys #RPID #SubDomains #WebAuthn

React-like functional webcomponents, but with vanilla HTML, JS and CSS

Introducing Dim – a new #Framework that brings #ReactJS-like functional #JSX-syntax with #VanillaJS. Check it out here:
🔗 Project: https://github.com/positive-intentions/dim
🔗 Website: https://dim.positive-intentions.com

My journey with #WebComponents started with Lit, and while I appreciated its native browser support (less #Tooling!), coming from #ReactJS, the class components felt like a step backward. The #FunctionalProgramming approach in React significantly improved my #DeveloperExperience and debugging flow.

So, I set out to build a thin, functional wrapper around #Lit, and Dim is the result! It's a #ProofOfConcept right now, with "main" #Hooks similar to React, plus some custom ones like useStore for #EncryptionAtRest. (Note: #StateManagement for encryption-at-rest is still unstable and currently uses a hardcoded password while I explore #Passwordless options like #WebAuthn/#Passkeys).

You can dive deeper into the #Documentation and see how it works here:
📚 Dim Docs: https://positive-intentions.com/docs/category/dim

This #OpenSource project is still in its early stages and very #Unstable, so expect #BreakingChanges. I've already received valuable #Feedback on some functions regarding #Security, and I'm actively investigating those. I'm genuinely open to all feedback as I continue to develop it!

#FrontendDev #JSFramework #Innovation #Coding #Programmer #Tech

Happy Sunday everyone! I'm tempting the open source gods by releasing SimpleWebAuthn v11.0.0 the day before the week-long Authenticate! 😂

The headliner feature is probably conditional create support, but there's also better support for conditional UI inputs hidden in web components, and a type change to help make end-to-end use of WebAuthn more simple.

There's a couple of breaking API changes you should be aware of, so make sure to take a look at the changelog!

https://github.com/MasterKale/SimpleWebAuthn/releases/tag/v11.0.0

See you at #Authenticate2024!

#webauthn #passkeys #typescript #javascript #node #deno #esm

Finally, some news about Microsoft's plans to support 3rd-party passkey providers (and handle syncing via its own provider) in Windows 11!

https://blogs.windows.com/windowsdeveloper/2024/10/08/passkeys-on-windows-authenticate-seamlessly-with-passkey-providers/

I'm looking forward to hearing more at #Authenticate2024 🎉

#webauthn #passkeys

Two of my three CFP's got selected for Authenticate 2024 - see you all in October! 🔐 😎

#Authenticate2024 #passkeys #webauthn #fidoalliance

I'm looking for a good overview/comparison of different #MFA/#2FA or #PasswordLess authentication protocols.

The recent #Fido2 #MitM risk made me aware that I need to learn more.

Pointers and #BoostWelcome

#fedipower #wisdomOfTheCrowd #FollowerPower

As the best way to get an answer on the internet, is to state something wrong, let's try this 😜

#FIDO and FIDO2 are actually a whole set of (related?) protocols.
FIDO includes FIDO #UAF (Universal Authentication Framework) and FIDO #U2F (Universal Second Factor).

FIDO2 is the "successor" of FIDO and consists of two parts.
#WebAuthn and #CTAP (Client to Authenticator Protocol). From the name I would guess that WebAuthn is for web stuff (requiring browser support) and CTAP is for IT infrastructure stuff (???)

#Passkey is based on #Fido2
Other related concepts or protocols are #OTP (one-time passwords), #TOTP (Time-based One-time Password) and #HOTP (“H” in HOTP stands for Hash-based Message Authentication Code (HMAC))

Not sure how #SmartCards play into this.

And not sure which of these methods would work for an offline authentication login into your laptop (and ideally also as key for whole disk encryption)