September 2022 Summaries

The tutorial provides a comprehensive guide to building a basic Django web application for user registration and authentication using FusionAuth, an authentication platform. It explains the advantages of using FusionAuth over Django's default authentication, highlighting its ability to handle complex tasks such as social login, password resets, and multi-tenant configurations centrally. The tutorial walks through setting up FusionAuth with Docker Compose, creating a Django project, and integrating FusionAuth for secure user authentication. It details the creation of a simple app called "Secret Birthdays" that allows users to register, log in, and store their birthday information securely via FusionAuth, while emphasizing the importance of delegating authentication responsibilities to an external system for enhanced security. Additionally, it outlines the steps for setting up Google as an identity provider and configuring the application for OAuth-based authentication, demonstrating how to maintain user privacy by storing personal data within FusionAuth rather than the Django app. The tutorial concludes by suggesting potential enhancements and considerations for deploying a secure production environment.

Hackfests, also known as hackathons or fedex days, are internal events designed to foster team cohesion and encourage the exploration of new technologies and processes by allowing team members to work on any project of their choice for a day. FusionAuth has utilized hackfests for years, highlighting their utility in breaking from routine, enhancing cross-team collaboration, and offering the opportunity for skill development and problem-solving. These events are scheduled in advance and occur during normal working hours, ensuring participation across different roles, including non-technical staff, who can engage in projects like developing mockups, reports, or exploring new sales tools. The key rules are that participants must avoid busywork and are required to present their outcomes to peers and management, which promotes accountability and innovation. Hackfests also provide a platform for cross-disciplinary learning, risk-taking, and understanding between team members, while being adaptable for both in-person and remote settings. Participation is encouraged but not mandatory, respecting individual preferences and circumstances.

FusionAuth version 1.40.0 has been released, bringing native Windows installation support back after a previous removal, enhanced SCIM support with deactivation of users working with Okta systems, and changes to the MySQL database driver download process for self-hosted installations. The release includes several bug fixes and new features, with detailed information available in the release notes. Users can upgrade their self-hosted instances or proceed with cloud deployments following the provided guides.

FusionAuth version 1.39.0 has been released, bringing improved support for JSON patch, SCIM, and locales. The new release includes better support for PATCH operations in FusionAuth, allowing users to update complex data structures with more precision and control. Additionally, the release enhances SCIM support by enabling provisioning and deprovisioning of users from Azure AD and Okta identity stores into FusionAuth. Furthermore, improvements have been made to locale support, ensuring that hosted login pages are rendered in the correct language for users who request a specific locale parameter. The release also includes various bug fixes, enhancements, and new features, making it an exciting update for existing users and a great starting point for new adopters.

WebAuthn is a widely supported standard for authentication on the web, allowing users to leverage biometric methods in a simple browser-native experience. It provides credentials without storing private data, instead relying on public keys stored securely by the user's authenticator. WebAuthn improves both security and user experience during login, offering easy integration with major browsers and access to built-in operating system authentication methods like Face ID, Android fingerprint identification, and Windows Hello facial recognition. The protocol is used in conjunction with related standards CTAP2 and FIDO2, and its implementation requires minimal effort from developers, with the most complicated part being converting between base64 and byte arrays. With browser support across all major browsers except Internet Explorer, WebAuthn offers a secure and user-friendly authentication solution for web applications.

FusionAuth has released version 1.38, which includes bug fixes and new features such as group webhooks, a feature that allows developers to receive notifications when groups are created, updated or deleted. This feature is important because it enables the integration of FusionAuth with other systems and applications, enabling actions to be taken in real-time based on events occurring within FusionAuth. The release also includes 7 additional issues, enhancements, and bug fixes, including corrections for CSS and JavaScript files hosted by FusionAuth and improvements to webhook receivers. The release notes provide a detailed guide to the changes made in this version, and users are encouraged to read them carefully before upgrading their self-hosted instance or using FusionAuth Cloud.

The OAuth device authorization grant is an extension of OAuth 2.0, designed to facilitate authentication for devices with limited input capabilities, such as game consoles, smart TVs, and fitness trackers, by allowing them to access applications or websites using another authenticated device. This process enhances user experience by enabling third-party and cross-device authentication without sharing passwords, thereby improving security and convenience. Users benefit from not having to struggle with cumbersome input methods on devices like smart TVs, while third parties have fewer chances to intercept passwords. Additionally, the use of scopes allows users to control which functionalities or applications can access their data, offering more privacy and control.