JavaScript Congress Nov 24, 2021

SSO with Ethereum and Next JS

Rahat Chowdhury

Ditch password fatigue and centralized databases for decentralized digital passports. Learn how to build secure, gas-free single sign-on in Next.js using Ethereum wallets and off-chain cryptography.

Pause
Mute Enter Fullscreen
#1 about 2 min

Introduction to single sign-on with Ethereum

An overview of utilizing Ethereum wallets to authenticate users within Next.js applications.

#2 about 3 min

Analyzing friction in traditional authentication flows

Password fatigue, magic link context switches, and centralized social login failures disrupt standard user experiences.

#3 about 1 min

Understanding the mechanics of blockchain wallets

Wallets operate as public and private key pairs that grant access to decentralized blockchain networks.

#4 about 2 min

Leveraging cryptographic signatures for gasless authentication

Hashing user data with wallet signatures validates identities without incurring transaction fees on the network.

#5 about 4 min

Mapping the Web3 wallet connection process

Address checking, backend nonce generation, and front-end cryptographic hashing combine to enable single sign-on.

#6 about 2 min

Demonstrating blockchain data hashing through nonces

Modifying the generated nonce or corresponding data string immediately invalidates the assigned cryptographic hash sequence.

#7 about 5 min

Implementing frontend wallet connections with ethers.js

Injecting window objects and requesting provider access enables Next.js applications to retrieve active MetaMask accounts.

#8 about 5 min

Building serverless API routes for user verification

Backend endpoints generate random nonces for public addresses and validate the decoded signature against stored records.

#9 about 3 min

Executing a live Ethereum signature request demo

Signing a randomized message in MetaMask successfully authenticates the detected wallet address within the local servers.

#10 about 3 min

Adapting signature concepts to alternative blockchain ecosystems

Cryptographic payload signing principles translate successfully to other decentralized architectures like Solana and standalone passport models.

#11 about 1 min

Clarifying wallet storage and provider access rights

Public addresses serve as account references while sensitive storage remains strictly controlled by the chosen wallet provider.

#12 about 2 min

Evaluating ethers.js preferences and mobile wallet integration

Implementing WalletConnect infrastructure bypasses browser extension requirements by routing authentication workflows through native mobile applications.

#13 about 2 min

Supporting authentication for unestablished Ethereum users

Free application onboarding requires deploying compatible EVM wallets to leverage embedded background cryptographic verification systems.

#14 about 1 min

Expanding authentication compatibility across multiple wallet vendors

Forking the base implementation allows integration with comprehensive aggregation utilities to support broader decentralized software varieties.

#15 about 1 min

Utilizing preconfigured cryptographic algorithms within wallet architectures

Tapping into existing infrastructure bypasses extensive encryption setup by directly accessing hashing processes built into client software.

#16 about 2 min

Integrating biometric web authentication APIs with Web3

Extending native fingerprint recognition frameworks into decentralized web protocols remains an emerging space requiring dedicated standardization.

#17 about 2 min

Navigating account recovery and social verification models

Standard seed phrase exports currently manage access restoration as decentralized identity recovery transitions toward community-based verification protocols.

#18 about 2 min

Seeking managed authentication alternatives to Auth0 equivalents

Emerging decentralized domain utilities outline establishing standard single sign-on specifications to replicate legacy identity delivery networks.

#19 about 1 min

Connecting existing applications to non-Ethereum networks

Interfacing with standalone blockchains requires separate connection libraries since standard browser extensions strictly monitor EVM environments.

#20 about 11 min

Mitigating security concerns when maintaining public network addresses

Storing universally accessible blockchain identifiers eliminates severe liability concerns common in centralized database intrusion events.

Matching moments

35 sec

Streamlining web3 user onboarding with modern authentication mechanisms

Andrej Šarić · WWC 2023

5:00 min

Addressing anonymity and complexity in technical adoption

Darrel Idiagbor Darrel Idiagbor

3:17 min

Integrating blockchain identity systems directly into web browsers

Jimmy Nguyen +1 · LIVE

4:34 min

Replacing legacy internet protocols with native wallet logins

Joshua Henslee · LIVE

5:06 min

Improving decentralized app accessibility with familiar user interface components

Darrel Idiagbor Darrel Idiagbor · WWC 2023

1:03 min

Offloading identity management to hosted authentication platform providers

Dávid Lévai · LIVE

Upcoming sessions on this topic

Open session

World Congress 2026 North America

Secure-by-Inclusion: Preventing Accessibility Barriers from Becoming Security Vulnerabilities

Radostina (Ina) Tsvetkova

Norwegian Directorate of Labour and Welfare (NAV), Senior Advisor in Digital Accessibility and Inclusive Design

Radostina (Ina) Tsvetkova
Open session

World Congress 2026 North America

Securing AI Agent Infrastructure: Identity, Attestation, and Trust at Scale

Abdel Fane

Founder of OpenA2A

Abdel Fane
Open session

World Congress 2026 North America

Zero-Trust Architecture for Agentic AI: Securing Multi-User Access and Third-Party Integrations

Borko Djurkovic

Member of Technical Staff at Cohere

Borko Djurkovic
Open session

World Congress 2026 North America

SecurePrompt: Building a Pre-Flight Security Layer for Agentic AI

Ravi Sastry Kadali

AI/ML Engineer at General Motors

Ravi Sastry Kadali
Open session

World Congress 2026 North America

Your next customer won’t be human

Benjamin Smith

Staff Developer Advocate at Stripe

Benjamin Smith
Open session

World Congress 2026 North America

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy