Episode 133: Moving Projects Away From Passwords With WebAuthn and Python
The Real Python Podcast
Nov 18, 2022 44m
What if you didn’t have to worry about managing user passwords as a Python developer? That’s where the WebAuthn protocol and new hardware standards are heading. This week on the show, Dan Moore from FusionAuth returns to discuss a password-less future.
Episode Sponsor:
WebAuthn is a way to authenticate users using biometric, secure authentication methods. Dan dives into passkeys, ceremonies, authenticators, and hardware standards. We also cover several projects and libraries that can help you get started with WebAuthn in Python.
Course Spotlight: Refactoring: Prepare Your Code to Get Help
In this Code Conversation video course, you’ll explore the steps you can take to get help when you’re stuck while coding. You’ll investigate how to clean up your code to focus on the question you have. Along the way, you’ll learn how to handle errors and use custom exceptions.
Topics:
- 00:00:00 – Introduction
- 00:01:36 – Dan’s WebAuthn article
- 00:03:26 – FIDO and WebAuthn
- 00:05:53 – What’s a YubiKey?
- 00:07:57 – Phones with biometric systems
- 00:12:03 – Sponsor: CData Software
- 00:12:45 – Similarities to HTTPS
- 00:16:13 – A password-less future
- 00:24:31 – Where’s it being used?
- 00:30:53 – Video Course Spotlight
- 00:32:26 – Python WebAuthn projects and packages
- 00:34:52 – Does a developer need to set up additional auth methods?
- 00:37:31 – How are the third-party auth services implementing this?
- 00:39:50 – What are you excited about in the world of Python?
- 00:41:24 – What do you want to learn next?
- 00:43:20 – Thanks and goodbye
Show Links:
- WebAuthn Explained - FusionAuth
- Episode #99: OAuth 2 and Authentication Choices for Your Python Project – The Real Python Podcast
- All about FIDO2, CTAP2 and WebAuthn - Microsoft Community Hub
- YubiKey - Hardware Security Keys
- Apple Adopts Passwordless Authentication Technology – Hideez
- 1Password is launching passkey support in early 2023 - The Verge
- duo-labs/py_webauthn: Pythonic WebAuthn
- python-webauthn: Server side handlers for WebAuthN with support for Apple’s FaceID, and the FIDO metadata service
- pywarp - PyPI
- webauthn-rp documentation
- Going Passwordless With py_webauthn - Duo Security
- django-webauth: Two Factor Authentication in Django using Web Authentication API (WebAuthn)
- django-webauthin - PyPI
- python-fido2
- Python 3.11.0 Release - Python.org
- Real Food Fermentation by Alex Lewin - Amazon
- Auth. Built for Devs, by Devs - FusionAuth