[keycloak-dev] Any plans to support Web Authentication API?

[Vlastimil Elias]

Hi,

it looks like that Web Authentication API [1] is going to be a new 
standard widely adopted by browsers to improve web authentication security.

It helps to prevent phishing attacks (as it automatically validates 
domain of the login page) and allows to use device's auth hardware (eg 
biometrics HW) to login into websites.

Any plans to support it in Keycloak?

More info in Google IO 2018 session and related blogpost [2]

Thanks

Vlastimil

[1] https://www.w3.org/TR/webauthn/

[2] https://developers.google.com/web/updates/2018/05/webauthn

-- 
Vlastimil Elias
Principal Software Engineer, Middleware Engineering Services
Red Hat