Course description
Introduction to Web Authentication
This course introduces developers to the W3C’s Web Authentication (WebAuthn) API, which provides the tools to replace usernames and passwords in favor of hardware-backed, cryptographically secure authentication.
Learners will explore basic concepts such as registration and authentication, and how WebAuthn thwarts modern attacks such as phishing to ensure security and privacy.
After becoming familiar with WebAuthn buiding blocks, such as authenticators, clients, and replying parties, learners will move on to standing up a WebAuthn server and learning the different flows supported by WebAuthn.
Finally, students will review guidance and recommendations for operating a WebAuthn environment, capping off the course with an interactive project giving developers a solid foundation to secure assets and contemplate a passwordless future.
Upcoming start dates
Suitability - Who should attend?
Prerequisites
- Security key and/or Chrome authenticator (free tool that works on Chrome browser)
- Have a working knowledge of computer security and authentication, and be familiar with JavaScript and be proficient in writing code
- Have a working instance of Git and Docker
Outcome / Qualification etc.
What you'll learn
- What is Web Authentication (a.k.a WebAuthn)
- Key WebAuthn concepts
- How to create and use Web Authentication credentials
- Construction of a server infrastructure
- Understand and deploy server side requirements
Training Course Content
Module 1: Introduction to Web Authentication
After completing this module, students will have an understanding of why developing WebAuthn solves issues plaguing current authentication options. Students get a high-level view on how WebAuthn works on the web, along with a look at the code required to support a WebAuthn server.
Module 2: Deploying a WebAuthn server
This module is about deploying a sample WebAuthn Web implementation. It includes hands-on experience with WebAuthn, both in deploying a bare-bones WebAuthn server, as well as integrating WebAuthn into a larger context. Students will replace a username and password log-in using a sample WebAuthn architecture. By the end of this module, students will have the experience necessary to utilize WebAuthn in new deployments as well as retro-fitting existing services
Course delivery details
This course is offered through The World Wide Web Consortium (W3C), a partner institute of EdX.
2-4 hours per week
Expenses
- Verified Track -$99
- Audit Track - Free