WebAuthn - Revision history

NKirnbauer: gendering

2024-10-07T17:35:28Z

gendering

← Older revision		Revision as of 17:35, 7 October 2024
Line 32:		Line 32:

	'''The Registration:'''		'''The Registration:'''
	The Registration involves a Relying Party, the server that hosts the Website, and the user client that must host at least one authenticator. To register, the user has to navigate to the website where ~~he wishes~~ to use Web Authentication and sign in using the method that was used to this point, which means for example a password. After that it is to choose to register this site from now an using Web Authentication, which leads to the request to submit the configures authorization gesture. When the provided gesture is accepted, the registrations is complete.		The Registration involves a Relying Party, the server that hosts the Website, and the user client that must host at least one authenticator. To register, the user has to navigate to the website where they wish to use Web Authentication and sign in using the method that was used to this point, which means for example a password. After that it is to choose to register this site from now an using Web Authentication, which leads to the request to submit the configures authorization gesture. When the provided gesture is accepted, the registrations is complete.

	'''The Authentication:'''		'''The Authentication:'''
	For the user, the authentication using the Web Authenticator works seemingly as a normal login with just the difference that instead of typing a password to verify its identity, the user uses the same Authentication gesture that he used to register to the site.		For the user, the authentication using the Web Authenticator works seemingly as a normal login with just the difference that instead of typing a password to verify its identity, the user uses the same Authentication gesture that they used to register to the site.

	== Examples ==		== Examples ==

MWieger: Added Codesnippets of the API integration. Explained the parameters needed to perform the call. Also explained the reply from the call.

2024-01-25T16:50:14Z

Added Codesnippets of the API integration. Explained the parameters needed to perform the call. Also explained the reply from the call.

@@ Line 240: / Line 240: @@
 [[File:FIDO2_2Step_login_2.PNG|none|300px]]
 <br />
 == References ==

DHrdlicka: Logo referenced

2022-01-15T17:23:57Z

Logo referenced

← Older revision		Revision as of 17:23, 15 January 2022
Line 1:		Line 1:
	[[File:webauthn_logo.PNG\|500px\|thumb\|WebAuthn logo]]		[[File:webauthn_logo.PNG\|500px\|thumb\|WebAuthn logo<ref name="webauthn" />]]

	== Summary ==		== Summary ==
Line 247:		Line 247:

	<references>		<references>
			<ref name="webauthn">https://webauthn.io</ref>
	<ref name="overview">https://developers.yubico.com/WebAuthn/WebAuthn_Developer_Guide/</ref>		<ref name="overview">https://developers.yubico.com/WebAuthn/WebAuthn_Developer_Guide/</ref>
	</references>		</references>

DHrdlicka: Edited text at "Examples" and "Second Factor Login"

2021-12-20T12:50:27Z

Edited text at "Examples" and "Second Factor Login"

← Older revision		Revision as of 12:50, 20 December 2021
Line 53:		Line 53:
	[[File:webauthn3.PNG\|600px]]		[[File:webauthn3.PNG\|600px]]

	The login was a ~~scucess~~ and now we are able to login just using our fingerprint.		The login was a success and now we are able to login just using our fingerprint.
	<br />		<br />
	<br />		<br />
Line 231:		Line 231:
	1. Enter your '''username'''.		1. Enter your '''username'''.

	2. Enter your '''password'''-		2. Enter your '''password'''.

	3. Tap on the security key		3. Tap on the security key.
	[[File:FIDO2_2Step_login_1.PNG\|none\|300px]]		[[File:FIDO2_2Step_login_1.PNG\|none\|300px]]
	<br />		<br />

DHrdlicka: Added spaces between images and texts at "Examples" and updated references

2021-12-20T12:47:06Z

Added spaces between images and texts at "Examples" and updated references

← Older revision		Revision as of 12:47, 20 December 2021
Line 41:		Line 41:
	[[File:webauthn_1.PNG\|400px]]		[[File:webauthn_1.PNG\|400px]]

	First you have to navigate to the Website where you want to change the default login to WebAuthn, in this case it is the test website of WebAuthn, the link is provided below, so we create a new user and pick the option TPM for we are going to use the inbuilt fingerprint sensor of the laptop to verify our identity.		First you have to navigate to the Website where you want to change the default login to WebAuthn, in this case it is the test website of WebAuthn, the link is provided below, so we create a new user and pick the option TPM for we are going to use the inbuilt fingerprint sensor of the laptop to verify our identity.
			<br />
			<br />

	[[File:webauthn2.PNG\|300px]]		[[File:webauthn2.PNG\|300px]]

	The security feature now asks us to verify the identity with the same Authenticatior you want to use every time you log into the website. The choice will be stored with your ID and used every time you login.		The security feature now asks us to verify the identity with the same Authenticatior you want to use every time you log into the website. The choice will be stored with your ID and used every time you login.
			<br />
			<br />

	[[File:webauthn3.PNG\|600px]]		[[File:webauthn3.PNG\|600px]]

	The login was a scucess and now we are able to login just using our fingerprint.		The login was a scucess and now we are able to login just using our fingerprint.
			<br />
			<br />

	[[File:webauthn4.PNG\|300px]]		[[File:webauthn4.PNG\|300px]]

	You are ask to provide the same authentication which you used to login, in this case the fingerprint.		You are ask to provide the same authentication which you used to login, in this case the fingerprint.
			<br />
			<br />

	[[File:webauthn5.PNG\|800px]]		[[File:webauthn5.PNG\|800px]]

	If everything goes well, you are now logged in just using a fingerprint sensor!		If everything goes well, you are now logged in just using a fingerprint sensor!
			<br />
			<br />

	Try it out for yourself!		Try it out for yourself!
Line 235:		Line 244:

	* https://webauthn.guide/#about-webauthn		* https://webauthn.guide/#about-webauthn
	* https://www.w3.org/TR/webauthn/~~#intro~~		* https://www.w3.org/TR/webauthn/

	<references>		<references>
	<ref name="overview">https://developers.yubico.com/WebAuthn/WebAuthn_Developer_Guide/~~Overview.html~~</ref>		<ref name="overview">https://developers.yubico.com/WebAuthn/WebAuthn_Developer_Guide/</ref>
	</references>		</references>


	[[Category:Documentation]]		[[Category:Documentation]]

DHrdlicka: Edited text at "Examples" and deleted horizontal line above "Try it out..."

2021-12-20T12:40:44Z

Edited text at "Examples" and deleted horizontal line above "Try it out..."

← Older revision		Revision as of 12:40, 20 December 2021
Line 41:		Line 41:
	[[File:webauthn_1.PNG\|400px]]		[[File:webauthn_1.PNG\|400px]]

	First you have to navigate to the Website where you want to change the default login to WebAuthn, in this case it is the test website of WebAuthn, the link is provided below, so we create a new user and pick the option TPM for we are going to use the inbuilt fingerprint sensor of the laptop to verify our identity.		First you have to navigate to the Website where you want to change the default login to WebAuthn, in this case it is the test website of WebAuthn, the link is provided below, so we create a new user and pick the option TPM for we are going to use the inbuilt fingerprint sensor of the laptop to verify our identity.
	~~<br />~~
	~~<br />~~

	[[File:webauthn2.PNG\|300px]]		[[File:webauthn2.PNG\|300px]]

	The security feature now asks us to verify the identity with the same Authenticatior you want to use every time you log into the website. The choice will be stored with your ID and used every time you login.		The security feature now asks us to verify the identity with the same Authenticatior you want to use every time you log into the website. The choice will be stored with your ID and used every time you login.
	~~<br />~~
	~~<br />~~

	[[File:webauthn3.PNG\|600px]]		[[File:webauthn3.PNG\|600px]]

	The login was a scucess and now we are able to login just using our fingerprint.		The login was a scucess and now we are able to login just using our fingerprint.
	~~<br />~~
	~~<br />~~

	[[File:webauthn4.PNG\|300px]]		[[File:webauthn4.PNG\|300px]]

	You are ask to provide the same authentication which you used to login, in this case the fingerprint.		You are ask to provide the same authentication which you used to login, in this case the fingerprint.
	~~<br />~~
	~~<br />~~

	[[File:webauthn5.PNG\|800px]]		[[File:webauthn5.PNG\|800px]]

	If everything goes well, you are now logged in just using a fingerprint sensor!		If everything goes well, you are now logged in just using a fingerprint sensor!
	~~<br />~~
	~~<br />~~

	Try it out for yourself!		Try it out for yourself!
Line 244:		Line 235:

	* https://webauthn.guide/#about-webauthn		* https://webauthn.guide/#about-webauthn
	* https://www.w3.org/TR/webauthn/		* https://www.w3.org/TR/webauthn/#intro

	<references>		<references>
	<ref name="overview">https://developers.yubico.com/WebAuthn/WebAuthn_Developer_Guide/</ref>		<ref name="overview">https://developers.yubico.com/WebAuthn/WebAuthn_Developer_Guide/Overview.html</ref>
	</references>		</references>


	[[Category:Documentation]]		[[Category:Documentation]]

DHrdlicka at 09:39, 18 December 2021

2021-12-18T09:39:48Z

← Older revision		Revision as of 09:39, 18 December 2021
Line 41:		Line 41:
	[[File:webauthn_1.PNG\|400px]]		[[File:webauthn_1.PNG\|400px]]

	First you have to navigate to the Website where you want to change the default login to WebAuthn, in this case it is the test website of WebAuthn, the link is provided below, so we create a new user and pick the option TPM for we are going to use the inbuilt fingerprint sensor of the laptop to verify our identity.		First you have to navigate to the Website where you want to change the default login to WebAuthn, in this case it is the test website of WebAuthn, the link is provided below, so we create a new user and pick the option TPM for we are going to use the inbuilt fingerprint sensor of the laptop to verify our identity.
			<br />
			<br />

	[[File:webauthn2.PNG\|300px]]		[[File:webauthn2.PNG\|300px]]

	The security feature now asks us to verify the identity with the same Authenticatior you want to use every time you log into the website. The choice will be stored with your ID and used every time you login.		The security feature now asks us to verify the identity with the same Authenticatior you want to use every time you log into the website. The choice will be stored with your ID and used every time you login.
			<br />
			<br />

	[[File:webauthn3.PNG\|600px]]		[[File:webauthn3.PNG\|600px]]

	The login was a scucess and now we are able to login just using our fingerprint.		The login was a scucess and now we are able to login just using our fingerprint.
			<br />
			<br />

	[[File:webauthn4.PNG\|300px]]		[[File:webauthn4.PNG\|300px]]

	You are ask to provide the same authentication which you used to login, in this case the fingerprint.		You are ask to provide the same authentication which you used to login, in this case the fingerprint.
			<br />
			<br />

	[[File:webauthn5.PNG\|800px]]		[[File:webauthn5.PNG\|800px]]

	If everything goes well, you are now logged in just using a fingerprint sensor!		If everything goes well, you are now logged in just using a fingerprint sensor!
			<br />
			<br />

	Try it out for yourself!		Try it out for yourself!
Line 235:		Line 244:

	* https://webauthn.guide/#about-webauthn		* https://webauthn.guide/#about-webauthn
	* https://www.w3.org/TR/webauthn/~~#intro~~		* https://www.w3.org/TR/webauthn/

	<references>		<references>
	<ref name="overview">https://developers.yubico.com/WebAuthn/WebAuthn_Developer_Guide/~~Overview.html~~</ref>		<ref name="overview">https://developers.yubico.com/WebAuthn/WebAuthn_Developer_Guide/</ref>
	</references>		</references>


	[[Category:Documentation]]		[[Category:Documentation]]

DHrdlicka at 14:18, 16 December 2021

2021-12-16T14:18:30Z

← Older revision		Revision as of 14:18, 16 December 2021
Line 41:		Line 41:
	[[File:webauthn_1.PNG\|400px]]		[[File:webauthn_1.PNG\|400px]]

	First you have to navigate to the Website where you want to change the default login to WebAuthn, in this case it is the test website of WebAuthn, the link is provided below, so we create a new user and pick the option ~~PMT~~ for we are going to use the inbuilt fingerprint sensor of the laptop to verify our identity.		First you have to navigate to the Website where you want to change the default login to WebAuthn, in this case it is the test website of WebAuthn, the link is provided below, so we create a new user and pick the option TPM for we are going to use the inbuilt fingerprint sensor of the laptop to verify our identity.

	[[File:webauthn2.PNG\|300px]]		[[File:webauthn2.PNG\|300px]]
Line 59:		Line 59:
	If everything goes well, you are now logged in just using a fingerprint sensor!		If everything goes well, you are now logged in just using a fingerprint sensor!

	~~----~~
	Try it yourself ~~if you want to~~!		Try it out for yourself!
	[https://webauthn.io/ WebAuthn Demo]		[https://webauthn.io/ WebAuthn Demo]

JTraumueller: /* Architecture */

2020-12-23T02:45:28Z

Architecture

← Older revision		Revision as of 02:45, 23 December 2020
Line 18:		Line 18:

	*external authenticator (e.g. security key) that is removable from the device		*external authenticator (e.g. security key) that is removable from the device
	*internal authenticator (e.g. fingerprint reader) that is implemented on the device ~~and is not removeable~~		*internal authenticator (e.g. fingerprint reader) that is implemented on the device

	;'''Client/Platform'''		;'''Client/Platform'''

JTraumueller: /* Passwordless Login */

2020-12-23T02:39:40Z

Passwordless Login

← Older revision		Revision as of 02:39, 23 December 2020
Line 126:		Line 126:
	No username and password are needed for the next login with the added key.		No username and password are needed for the next login with the added key.
	<br />		<br />


	'''Login:'''<br />		'''Login:'''<br />