WeAreDevelopers LIVE • Oct 6, 2023

Accelerating Authentication Architecture: Taking Passwordless to the Next Level

Yedidya Schwartz

Passwordless login is pointless if high UI latency ruins the experience. Discover how leveraging Redis and server-side composition slashed authentication widget load times from 500ms to just 14 milliseconds.

Pause

Mute

Enter Fullscreen

#1 about 7 min

Passwordless authentication technologies and legacy architecture flows

Reviewing initial Fido2 user verification methods before diving into the performance constraints of the network.

#2 about 4 min

Identifying delays in legacy widget loading architectures

Analyzing network requests and dependency chains that cause slow rendering speeds.

#3 about 3 min

Understanding materialized views and server-side composition

Applying theoretical design patterns to provision data and merge frontend components.

#4 about 4 min

Merging backend resources with a baking microservice

Satisfying performance requirements by preloading configurations in Redis and generating unified files.

#5 about 6 min

Scaling traffic with CloudFront and request collapsing

Relieving the origin server bottleneck during large traffic spikes by leveraging edge locations.

#6 about 5 min

Mitigating Redis hot keys with origin shield protection

Solving cache shard limitations using key prefixes, in-memory application caching, and additional proxy layers.

#7 about 3 min

Managing dynamic cache invalidation with Redis messaging

Broadcasting configuration updates to edge nodes using a publish and subscribe mechanism.

#8 about 5 min

Final performance results and key architectural takeaways

Reviewing the load time improvement from half a second to fourteen milliseconds and discussing observability.

#9 about 17 min

Audience Q&A on DevOps and passwordless adoption

Answering attendee questions about transitioning into infrastructure roles and increasing conversion rates with unauthenticated patterns.

Matching moments

3:22 min

Accelerating adoption through developer resources and user education

Clemens Hübner

Clemens Hübner · WWC 2023

9:56 min

Final code walk-through and audience Q&A session

Germán Álvarez · LIVE

1:28 min

Adopting modern authentication strategies within software development teams

Gift Egwuenu · WWC 2023

4:31 min

Question and answer session on caching and specific tools

Moritz Johner · WWC 2023

4:13 min

Hardware keys and mitigating persistent password vulnerabilities

Chris Heilmann +2 · LIVE

2:16 min

Analyzing friction in traditional authentication flows

Rahat Chowdhury · JS Congress

More from WeAreDevelopers LIVE

Aliens in Quarantine, Python Deprecates Loops, and AI Buys Old Books - Zbyszek Tenerowicz thumbnail

Aliens in Quarantine, Python Deprecates Loops, and AI Buys Old Books - Zbyszek Tenerowicz

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Node and Package Security thumbnail

WeAreDevelopers LIVE - Node and Package Security

Chris Heilmann, Daniel Cranney, Zbyszek Tenerowicz

WeAreDevelopers LIVE - Streaming HTML thumbnail

WeAreDevelopers LIVE - Streaming HTML

Chris Heilmann, Daniel Cranney, Jad Joubran

WeAreDevelopers LIVE - CODE100 at WeAreDevelopers Europe thumbnail

WeAreDevelopers LIVE - CODE100 at WeAreDevelopers Europe

Chris Heilmann, Daniel Cranney, Justin Halsall, Werner Jeschko, Nicole Jeschko, Mirco Tomić

WeAreDevelopers LIVE - Web Performance in an AI World thumbnail

WeAreDevelopers LIVE - Web Performance in an AI World

Chris Heilmann, Daniel Cranney

FIFA Hack, Midjourney Does Ultrasounds, and Trampoline Traffic Lights - Nicole Jeschko and Werner Jeschko thumbnail

about 2 months ago

FIFA Hack, Midjourney Does Ultrasounds, and Trampoline Traffic Lights - Nicole Jeschko and Werner Jeschko

Chris Heilmann, Daniel Cranney

Upcoming sessions on this topic

World Congress 2026 North America

It passed auth, then production caught fire

Alex Olivier

Co-founder & CPO @ Cerbos | OpenID AuthZEN Co-chair

Alex Olivier

World Congress 2026 North America

Boring Failover: Predictable Region Recovery Across 5,000 Microservices

Garvit Kataria, Sahil Sabharwal

Garvit Kataria

Sahil Sabharwal

World Congress 2026 North America

SecurePrompt: Building a Pre-Flight Security Layer for Agentic AI

Ravi Sastry Kadali

AI/ML Engineer at General Motors

Ravi Sastry Kadali

World Congress 2026 North America

How to generate business value through performance optimizations

Nikolai Sidiropulo

Software Engineer at Meta

Nikolai Sidiropulo

World Congress 2026 North America

Secure-by-Inclusion: Preventing Accessibility Barriers from Becoming Security Vulnerabilities

Radostina (Ina) Tsvetkova

Norwegian Directorate of Labour and Welfare (NAV), Senior Advisor in Digital Accessibility and Inclusive Design

Radostina (Ina) Tsvetkova

World Congress 2026 North America

When Agents Became Users: Rearchitecting Identity and Permissions for AI at Scale

Dor Cohen, Yoav Gal

Dor Cohen

Yoav Gal

Related videos

Going Beyond Passwords: The Future of User Authentication thumbnail

WWC 2023 • almost 3 years ago

Going Beyond Passwords: The Future of User Authentication

Gift Egwuenu

IP Authentication: A Tale of Performance Pitfalls and Challenges in Prod thumbnail

WWC 2025 • 12 months ago

IP Authentication: A Tale of Performance Pitfalls and Challenges in Prod

Christoph Eicke

Passwordless Web 1.5 thumbnail

LIVE • almost 2 years ago

Passwordless Web 1.5

Paweł Łukaszuk

MFA? Game over! Watch your protection collapse – live thumbnail

WWC Europe 2026 • about 1 month ago

MFA? Game over! Watch your protection collapse – live

Christoph Menzel

Passwordless future: WebAuthn and Passkeys in practice thumbnail

WWC 2023 • over 2 years ago

Passwordless future: WebAuthn and Passkeys in practice

Clemens Hübner

Keeping applications secure by evolving OAuth 2.0 and OpenID Connect thumbnail

WWC Europe 2026 • about 1 month ago

Keeping applications secure by evolving OAuth 2.0 and OpenID Connect

Alexander Schwartz

Related articles

CH

Chris Heilmann

The top 200 passwords of 2024 can be cracked in less than a second

Passwords are a pain and with biometric logins, passkeys and other two factor authentication methods should be a thing of the past. In reality, though, a lot of systems still use username and passw...

over 1 year ago

The top 200 passwords of 2024 can be cracked in less than a second

CH

Chris Heilmann

Dev Digest 115 password beefstew is not Strog/|n0FF

In edition 115 of our Dev Digest we cover how AI changes how code is taught, learn about cryptography, the history of passwords, how the internet is declining and we can play Super Mario on a type ...

about 2 years ago

Dev Digest 115 password beefstew is not Strog/|n0FF

CH

Chris Heilmann

Dev Digest 139 - Soft and hard queries

News and ArticlesLet's start with Amelia Wattenberger's excellent essay Bridging the hard and the soft talking about humans and data. Do you sometimes also miss aspects of the early web like a lack...

almost 2 years ago

Dev Digest 139 - Soft and hard queries

CH

Chris Heilmann

Dev Digest 138 - Are you secure about this?

Hello there! This is the 2nd "out of the can" edition of 3 as I am on vacation in Greece eating lovely things on the beach. So, fewer news, but lots of great resources. Many around the topic of sec...

almost 2 years ago

Dev Digest 138 - Are you secure about this?

From learning to earning

Jobs that call for the skills explored in this talk.

Principal Software Engineer, Identity

Expert Remote Ruby OAuth OpenID

about 2 months ago

Remote Senior Full-Stack Engineer

Expert £63k–98k Remote Redis Docker Datadog

about 1 month ago

Remote Senior Full-Stack Engineer

Expert £63k–98k Remote Redis Docker Datadog

Senior Engineer, Infrastructure Platform

Expert Remote Code Review Cloud Computing Software Security

about 2 months ago

Remote Senior Full-Stack Engineer

Expert £63k–98k Remote Redis Docker Datadog

about 2 months ago

Remote Senior Full-Stack Engineer

Expert £63k–98k Remote Redis Docker Datadog