Passkey Auth for .NET using Stellar

Smooth sign in using Passkeys, with integrated robust, secure, and fast account handling using Stellar.

Passkey Accounts Using Stellar

A working implementation of Webauthn Passkey based sign up and sign in, with integrated public Accounts provided by Stellar.

Purpose

For .NET Developers across the board, from startup to enterprise, to provide an example of how simple and powerful it is to do passwordless authentication, authorisation and account management on .NET by using Webauthn in combination with Stellar public accounts.

What is Passkeys / WebAuthn?

The passwordless web

Passkeys / WebAuthn is a new open authentication standard, supported by browsers, mobiles and many large tech companies such as Microsoft, Google etc. The main driver is to allow a user to login without passwords, creating passwordless flows or strong MFA for user signup/login on websites. Passkeys is becoming the new sign-in standard for applications, growing in public usage, and increasingly a mandated corporate/government standard, such as in healthcare and finance enterprise environments.

What is Stellar?

A powerful account management platform

Stellar is a powerful, robust and highly secure distributed ledger and distributed database that allows the creation of programmable "smart" accounts and allows operations to occur on and between them.

As a developer, you may find yourself in a business-to-consumer environment, such as game development, or in an enterprise dealing with hundreds, thousands or more of internal users and external partners, or even in a state or federal government environment. In all these cases, there is a recurring theme of how to create accounts and re-use the logic of account management and permissions across different applications.

When accounts can be anonymised, or when accounts must be public and must be transparent, or when immutable, traceable, permanent and public records are essential, then accounts can be created on a public network.

Stellar is a public network that offers fast transaction processing and permanent, transparent records. In this demo we show to do cross-cutting authorisation, authentication and custom account functionality, using .NET and Stellar with ultra-secure, phishing proof Passkeys.

Using the demo

Be ready with a mobile phone or security key and select the Interactive Passkey Demo tab above to register and sign in.

The demo illustrates using the sign up process to create a site passkey, which behind the scenes creates a Stellar smart account tied to that passkey.

Following that you can then sign in, which invokes Stellar custom logic to publically record the sign in, which can only be authorised by a sign in from that passkey.

This simple use case shows how a sign in book, guestbook or similar can be implemented, and where the history of signins is immutable, transparent and guaranteed.

In more complex scenarios your custom Stellar logic could support, for example, consolidated game inventory management, where in-game operations change what the player owns and could even allow those items to be publically traded!

More Info

For more information and a full explanation of the demo, please see the DEV.TO article here TODO LINK