users icon indicating copy to clipboard operation
users copied to clipboard

Passwordless Authentication

Open rochamarcelo opened this issue 2 years ago • 3 comments

Currently the login page requires to use password, it would be nice to have a way to authenticate without it. Passwordless authentication can be implemented using E-mail Message, SMS, WebAuthn, Social (Already implemented).

With E-mail and SMS authentication we send a code to the user and a optional 'magic' link. Basic flow: -> User access login page -> User type e-mail and submit -> App send code to e-mail -> User open e-mail and click the link or copy the code -> App check token and authenticate user -> User access home page.

Any thoughts?

rochamarcelo avatar Mar 04 '22 18:03 rochamarcelo

Here is a nodejs implementation for reference https://github.com/florianheinemann/passwordless

rochamarcelo avatar Mar 04 '22 18:03 rochamarcelo

I was thinking of js. Listening to server sent event. On login attempt. If user with email is found. It will send out link. Js will update page to loading. On user click email link. Will clear out token.. Redirect user to home.

nuzulfikrie avatar Feb 15 '24 00:02 nuzulfikrie