From 4af7230e5d770b0e438a6dbb1ff0ef77069e1d0e Mon Sep 17 00:00:00 2001 From: Dusan Jakub Date: Tue, 26 Sep 2023 15:56:33 +0200 Subject: [PATCH] Passwordless login redesign --- .../OAuthResource/loginPasswordless.html | 99 ++++++++++++++----- 1 file changed, 76 insertions(+), 23 deletions(-) diff --git a/src/main/resources/templates/OAuthResource/loginPasswordless.html b/src/main/resources/templates/OAuthResource/loginPasswordless.html index 4b5451b..3684f4e 100644 --- a/src/main/resources/templates/OAuthResource/loginPasswordless.html +++ b/src/main/resources/templates/OAuthResource/loginPasswordless.html @@ -17,37 +17,89 @@ {/add-header}
-
- - -
+
+
+
+
+
+
Create a new credential or use an existing one
+

In Webauthn, a single user will have multiple credentials, tied to the devices they are using.

+

First the user enters their username:

+
-
- The interaction starts with an AJAX call. -
POST -
+

If they are a new user, they need to generate a new credential and register it with the application

+ + +

If they are a returning user, their authenticator must prove they own the credential.

+ +
+
+
-
-
- The server prepares a challenge for the browser to sign. -
- +
+
+
+
+
+
Request a challenge
+

The interaction starts with an AJAX call.

+
POST +
+
+ +
+
+
+
-