A weekly Python podcast hosted by Christopher Bailey with interviews, coding tips, and conversation with guests from the Python community. The show covers a wide range of topics including Python programming best practices, career tips, and related software development topics. Join us every Friday morning to hear what's new in the world of Python programming and become a more effective Pythonista.
Moving Projects Away From Passwords With WebAuthn and Python
What if you didn’t have to worry about managing user passwords as a Python developer? That’s where the WebAuthn protocol and new hardware standards are heading. This week on the show, Dan Moore from FusionAuth returns to discuss a password-less future.
WebAuthn is a way to authenticate users using biometric, secure authentication methods. Dan dives into passkeys, ceremonies, authenticators, and hardware standards. We also cover several projects and libraries that can help you get started with WebAuthn in Python.
Course Spotlight: Refactoring: Prepare Your Code to Get Help
In this Code Conversation video course, you’ll explore the steps you can take to get help when you’re stuck while coding. You’ll investigate how to clean up your code to focus on the question you have. Along the way, you’ll learn how to handle errors and use custom exceptions.
Topics:
- 00:00:00 – Introduction
- 00:01:36 – Dan’s WebAuthn article
- 00:03:26 – FIDO and WebAuthn
- 00:05:53 – What’s a YubiKey?
- 00:07:57 – Phones with biometric systems
- 00:12:03 – Sponsor: CData Software
- 00:12:45 – Similarities to HTTPS
- 00:16:13 – A password-less future
- 00:24:31 – Where’s it being used?
- 00:30:53 – Video Course Spotlight
- 00:32:26 – Python WebAuthn projects and packages
- 00:34:52 – Does a developer need to set up additional auth methods?
- 00:37:31 – How are the third-party auth services implementing this?
- 00:39:50 – What are you excited about in the world of Python?
- 00:41:24 – What do you want to learn next?
- 00:43:20 – Thanks and goodbye
Show Links:
- WebAuthn Explained - FusionAuth
- Episode #99: OAuth 2 and Authentication Choices for Your Python Project – The Real Python Podcast
- All about FIDO2, CTAP2 and WebAuthn - Microsoft Community Hub
- YubiKey - Hardware Security Keys
- Apple Adopts Passwordless Authentication Technology – Hideez
- 1Password is launching passkey support in early 2023 - The Verge
- duo-labs/py_webauthn: Pythonic WebAuthn
- python-webauthn: Server side handlers for WebAuthN with support for Apple’s FaceID, and the FIDO metadata service
- pywarp - PyPI
- webauthn-rp documentation
- Going Passwordless With py_webauthn - Duo Security
- django-webauth: Two Factor Authentication in Django using Web Authentication API (WebAuthn)
- django-webauthin - PyPI
- python-fido2
- Python 3.11.0 Release - Python.org
- Real Food Fermentation by Alex Lewin - Amazon
- Auth. Built for Devs, by Devs - FusionAuth