Passwordless Authentication

[rochamarcelo]

Currently the login page requires to use password, it would be nice to have a way to authenticate without it.
Passwordless authentication can be implemented using E-mail Message, SMS, WebAuthn, Social (Already implemented).

With E-mail and SMS authentication we send a code to the user and a optional 'magic' link.
Basic flow:
-> User access login page
-> User type e-mail and submit
-> App send code to e-mail
-> User open e-mail and click the link or copy the code
-> App check token and authenticate user
-> User access home page.

Any thoughts?

[rochamarcelo]

Here is a nodejs implementation for reference https://github.com/florianheinemann/passwordless

[nuzulfikrie]

I was thinking of js. Listening to server sent event. On login attempt. If user with email is found. It will send out link. Js will update page to loading. On user click email link. Will clear out token.. Redirect user to home.

[umer936]

I was going to give this a go: https://github.com/teamhanko/hanko