Embracing passwordless authentication with Grab’s Passkey

This post details the implementation of Passkey for passwordless authentication at Grab. It explains the underlying FIDO standard, the benefits of Passkey over traditional passwords (phishing resistance, no secret storage on Grab's servers), and its adoption trends. The post provides architectural details on the backend, frontend, and authenticator components, along with sequence diagrams for passkey registration and sign-in. It also highlights notable WebAuthn parameters used in the implementation, such as `challenge`, `excludeCredentials`, `authenticatorSelection`, `allowCredentials`, and `userVerification`, and mentions support for Google Password Manager and iCloud Keychain.