WWDC Notes

What's New in Authentication

Show Apple's description.
Secure sign-in and authentication is a key feature of a secure account-based app design. Learn how you can improve your app's login experiences through an overview of the available authentications services and details on specific technologies such as Sign In with Apple ID, Password AutoFill for iPad Apps for Mac, advances in OAuth and WebAuthentication, and a new API for streamlined password sign-in.

Sign in with Apple

  • Private alternative to 3rd party logins
  • Authentication via Face ID / Touch ID (2-factor built-in)
  • Verifying email addresses is already done by Apple (Apple ID)
  • Claimed to be easier than passwords
  • Across platforms
    • iOS 13+
    • iPadOS 13+
    • watchOS 6+
    • macOS 10.15+
    • tvOS 13+
    • Safari 13+
    • Other platforms via JavaScript (Windows, Android and other browsers)
  • On app launch, app can check for existing password-based user accounts via Keychain

Password-based Authentication

  • Password Auto-fill available for iPad apps on the Mac
    • New app ID has to be listed on the server via apple-app-site-association file
    • New keys for Universal Links
  • Authentication services can be used for apps (check associated domains to combine app and website)
  • Can request multiple types of accounts via ASAuthorizationController (e.g. password-based + Sign in with Apple)

Warnings for weak passwords

  • iPhone + Mac have Automatic Strong Passwords
  • Safari 13 on iOS 13 shows weak passwords + possibility to change it

OAuth sign-in

  • Available on iOS, and now macOS
    • macOS uses preferred web browser
    • If available, browser's password manager or password manager extension will help
  • OAuth with ASWebAuthenticationSession

USB security keys on macOS

  • Safari 13 supports USB-based FIDO2-compliant devices with the WebAuthentication standard
  • Offer great account recovery story, like using previous mentioned services

Missing anything? Corrections? Contributions are welcome 😃

Related

Written by

manuel_thomas_schmidt

Manuel Thomas Schmidt

Manuel Thomas Schmidt is a Designer and Product Owner with strong passion for Human-centered Design and Research-based User Experience to identify core problems before providing exceptional solutions.