Authentication does not equal authorization: Are we asking passkeys to prove too much?

Securing the login is only half the battle. Where passkeys end and real trust begins.

consumer

Sources