[keycloak-dev] Any plans to support Web Authentication API?

Stian Thorgersen sthorger at redhat.com
Tue May 29 03:31:22 EDT 2018


Yes, we are planning to add support for web authentication, but not sure if
it will be this year or next.

On 29 May 2018 at 09:16, Vlastimil Elias <velias at redhat.com> wrote:

> Hi,
>
> it looks like that Web Authentication API [1] is going to be a new
> standard widely adopted by browsers to improve web authentication security.
>
> It helps to prevent phishing attacks (as it automatically validates
> domain of the login page) and allows to use device's auth hardware (eg
> biometrics HW) to login into websites.
>
> Any plans to support it in Keycloak?
>
> More info in Google IO 2018 session and related blogpost [2]
>
> Thanks
>
> Vlastimil
>
> [1] https://www.w3.org/TR/webauthn/
>
> [2] https://developers.google.com/web/updates/2018/05/webauthn
>
> --
> Vlastimil Elias
> Principal Software Engineer, Middleware Engineering Services
> Red Hat
>
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>


More information about the keycloak-dev mailing list