Move beyond passwords

17:32 - Register an account

// Register an account

func createAccount(with challenge: Data, name: String, userID: Data) {
    let provider = ASAuthorizationPlatformPublicKeyCredentialProvider(
            relyingPartyIdentifier: "example.com")

    let registrationRequest = provider.createCredentialRegistrationRequest(
            challenge: challenge, name: name, userID: userID)

    let controller = ASAuthorizationController(
            authorizationRequests: [ registrationRequest ])

    controller.delegate = …
    controller.presentationContextProvider = …

    controller.performRequests()
}

17:39 - Sign in

// Sign in

func signIn(with challenge: Data) {
    let provider = ASAuthorizationPlatformPublicKeyCredentialProvider(
            relyingPartyIdentifier: "example.com")

    let assertionRequest = provider.createCredentialAssertionRequest(challenge: challenge)


    let controller = ASAuthorizationController(
            authorizationRequests: [ assertionRequest ])

    controller.delegate = …
    controller.presentationContextProvider = …

    controller.performRequests()
}

17:41 - Handle returned credentials

// Handle returned credentials
func authorizationController(controller: ASAuthorizationController, 
     didCompleteWithAuthorization authorization: ASAuthorization) {
    switch authorization.credential {
        case let registration as ASAuthorizationPlatformPublicKeyCredentialRegistration:
            let attestationObject = registration.rawAttestationObject
            let clientDataJSON = registration.rawClientDataJSON
            // Verify on your server and finish creating the account.

        case let assertion as ASAuthorizationPlatformPublicKeyCredentialAssertion:
            let signature = assertion.signature
            let clientDataJSON = assertion.rawClientDataJSON
            // Verify on your server and finish signing in.

        case …:
            …
    }
}