Adopting PasswordLess

Why passwordless?

Signing in without a password seems almost nonsensical, yet it can be more secure than traditional sign-ins.

Passwordless sign-in with only an email address is almost a backhanded approach to two-factor authentication. By proving you have access to that email account — by clicking a link emailed to you — you’ve authenticated securely and need nothing else. The site using this technique is relying on your maintaining the security of your email account appropriately.

 Links:

• https://aka.ms/gopasswordless
• Is Passwordless Sign-in Safe?
  

An Illustrated Guide to OAuth and OpenID Connect

OAuth 2.0 and OpenID Connect (OIDC) are internet standards that enable one application to access data from another. Unfortunately, these standards use a lot of jargon and terminology that make them more difficult to understand. 

The goal of these 2 videos are to explain how these standards work using simplified illustrations, and demonstrate in details:

• How to get Google OAuth API keys?
• How OAuth works?
• How to build an OAuth implementation with Node.js?

 

Links:

• https://www.youtube.com/watch?v=t18YB3xDfXI
• https://www.youtube.com/watch?v=Qt3KJZ2kQk0 
• https://github.com/TomDoesTech/Google-OAuth-NodeJS