Hacker News new | ask | show | jobs
by la6472 1506 days ago
Why do we need another AuthN protocol? We should extend OIDC as needed instead of again trying to reinvent the wheel.
2 comments
drdaeman 1506 days ago
In WebAuthn you're actually in possession of your own identity (or, to be more precise, your identity is established between you and website).

In OpenID, OAuth and OpenID Connect the paradigm is completely different, where your identity is provided by someone else.

link
la6472 1506 days ago
Yes I get that but I think OIDC could be extended to cover that too whereas the Authenticator or iDP is the local face scanner kr other biometric and then the rest ie exchange of token etc stays the same. That way there won’t be two completely separate path and that will defeat the purpose of SSO. And it looks like there are already some implementation of this https://www.bioid.com/facial-recognition-app/
link
bdamm 1506 days ago
Because the interaction with the hardware authenticator is local.

OIDC and WebAuthn can work together.

link