> Markdown version of [/videos/733-accelerating-authentication-architecture-taking-passwordless-to-the-next-level](https://www.wearedevelopers.com/videos/733-accelerating-authentication-architecture-taking-passwordless-to-the-next-level). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Accelerating Authentication Architecture: Taking Passwordless to the Next Level

Passwordless login is pointless if high UI latency ruins the experience. Discover how leveraging Redis and server-side composition slashed authentication widget load times from 500ms to just 14 milliseconds.

- **Speakers:** Yedidya Schwartz
- **Event:** WeAreDevelopers LIVE
- **Published:** October 6, 2023
- **Duration:** 49:52
- **URL:** https://www.wearedevelopers.com/videos/733-accelerating-authentication-architecture-taking-passwordless-to-the-next-level

## Summary

Transitioning to passwordless authentication—via standards like FIDO2, WebAuthn, and Passkeys—promises highly frictionless user experiences. However, accelerating the core authentication mechanism is pointless if the user-facing widget serving it suffers from high latency and UI blinking. To deliver a truly native, zero-millisecond login experience at a massive scale—handling tens of thousands of impressions per second—modern web applications must ruthlessly optimize the milliseconds that precede and follow the core authentication event. Tackling this architectural bottleneck requires shifting to a highly optimized, multi-layered delivery system. Using a dedicated baking server, teams can apply server-side composition to merge dynamic configurations, translations, and SDKs into a single network request. Combined with the materialized view pattern, where complex data combinations are pre-provisioned in Redis, the origin server can fetch rendering assets instantly. To survive thundering herd scenarios, such as marketing-driven traffic spikes, implementing AWS CloudFront with request collapsing and Origin Shield safely protects the origin server. A Redis Pub/Sub deployment ensures that whenever a UI configuration changes, a CDN invalidation is automatically triggered, keeping global edge locations updated within minutes. Successfully deploying these caching patterns dropped widget load times from half a second to just 14 milliseconds. Achieving this scale requires treating observability tools like Datadog APM as prerequisites, noting that "you don't start to move if you don't have the proper monitoring." When refactoring complex infrastructure, repurposing existing components minimizes maintenance overhead and background noise. Ultimately, design patterns are flexible guides rather than strict rules—engineers must "utilize them in your style" to ensure high-performance infrastructure gracefully serves the overarching goal of user security and seamless UI rendering.

**Keywords:** passwordless authentication, fido2 standards, webauthn implementation, passkey integration, server-side composition, materialized view pattern, frontend widget performance, aws cloudfront caching, request collapsing mechanism, origin shield configuration, redis pub/sub scaling, cdn edge invalidation, datadog apm observability, ui latency optimization, infrastructure refactoring, redis hot key mitigation

## Chapters

1. **Passwordless authentication technologies and legacy architecture flows** (00:04) — Reviewing initial Fido2 user verification methods before diving into the performance constraints of the network.
1. **Identifying delays in legacy widget loading architectures** (06:43) — Analyzing network requests and dependency chains that cause slow rendering speeds.
1. **Understanding materialized views and server-side composition** (09:58) — Applying theoretical design patterns to provision data and merge frontend components.
1. **Merging backend resources with a baking microservice** (12:04) — Satisfying performance requirements by preloading configurations in Redis and generating unified files.
1. **Scaling traffic with CloudFront and request collapsing** (15:18) — Relieving the origin server bottleneck during large traffic spikes by leveraging edge locations.
1. **Mitigating Redis hot keys with origin shield protection** (21:01) — Solving cache shard limitations using key prefixes, in-memory application caching, and additional proxy layers.
1. **Managing dynamic cache invalidation with Redis messaging** (25:30) — Broadcasting configuration updates to edge nodes using a publish and subscribe mechanism.
1. **Final performance results and key architectural takeaways** (28:18) — Reviewing the load time improvement from half a second to fourteen milliseconds and discussing observability.
1. **Audience Q&A on DevOps and passwordless adoption** (33:05) — Answering attendee questions about transitioning into infrastructure roles and increasing conversion rates with unauthenticated patterns.

## Related Moments

- [Accelerating adoption through developer resources and user education](https://www.wearedevelopers.com/videos/810-passwordless-future-webauthn-and-passkeys-in-practice) (from "Passwordless future: WebAuthn and Passkeys in practice")
- [Final code walk-through and audience Q&A session](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch) (from "Creating a routing app with Google Maps API from scratch")
- [Adopting modern authentication strategies within software development teams](https://www.wearedevelopers.com/videos/714-going-beyond-passwords-the-future-of-user-authentication) (from "Going Beyond Passwords: The Future of User Authentication")
- [Question and answer session on caching and specific tools](https://www.wearedevelopers.com/videos/811-external-secrets-operator-the-secrets-management-toolbox-for-self-sufficient-teams) (from "External Secrets Operator: the secrets management toolbox for self-sufficient teams")
- [Hardware keys and mitigating persistent password vulnerabilities](https://www.wearedevelopers.com/videos/1331-wearedevelopers-live-chrome-for-sale-comet-the-upcoming-perplexity-browser-stealing-and-leaking) (from "WeAreDevelopers LIVE - Chrome for Sale? Comet - the upcoming perplexity browser Stealing and leaking")
- [Analyzing friction in traditional authentication flows](https://www.wearedevelopers.com/videos/288-sso-with-ethereum-and-next-js) (from "SSO with Ethereum and Next JS")

## Related Articles

- [The top 200 passwords of 2024 can be cracked in less than a second](https://www.wearedevelopers.com/magazine/502-the-top-200-passwords-of-2024-can-be-cracked-in-less-than-a-second)
- [Dev Digest 115 password beefstew is not Strog/|n0FF](https://www.wearedevelopers.com/magazine/429-dev-digest-115-password-beefstew-is-not-strog-n0ff)
- [Dev Digest 139 - Soft and hard queries](https://www.wearedevelopers.com/magazine/487-dev-digest-139-soft-and-hard-queries)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)

## Related Jobs

- [Principal Software Engineer, Identity](https://www.wearedevelopers.com/jobs/ext/1469181-principal-software-engineer-identity) at **GitHub**
- [Remote Senior Full-Stack Engineer](https://www.wearedevelopers.com/jobs/ext/639235-remote-senior-full-stack-engineer) at **Edge Impulse**
- [Remote Senior Full-Stack Engineer](https://www.wearedevelopers.com/jobs/ext/682327-remote-senior-full-stack-engineer) at **Edge Impulse**
- [Senior Engineer, Infrastructure Platform](https://www.wearedevelopers.com/jobs/ext/328836-senior-engineer-infrastructure-platform) at **Intercom, Inc.**
- [Remote Senior Full-Stack Engineer](https://www.wearedevelopers.com/jobs/ext/645320-remote-senior-full-stack-engineer) at **Edge Impulse**
- [Remote Senior Full-Stack Engineer](https://www.wearedevelopers.com/jobs/ext/356601-remote-senior-full-stack-engineer) at **Edge Impulse**