Skip to content

viascience/ztf-tutorial

Repository files navigation

ZTF (Zero Trust Fabric) Tutorials

Welcome to the comprehensive tutorial series for ZTF (Zero Trust Fabric) - a cutting-edge security solution that revolutionizes enterprise authentication and access control through decentralized identity management.

What is ZTF?

Zero Trust Fabric (ZTF) is an advanced security framework built on the principle of "never trust, always verify." It provides a decentralized authentication infrastructure that moves beyond traditional perimeter-based security models to protect against modern cybersecurity threats.

Core Technology Features:

  • 🔐 Passwordless Authentication - Eliminate traditional passwords with quantum-resistant security
  • 🌐 Decentralized Identity (DID) Registry - Self-sovereign identity management
  • 📋 Verifiable Credentials (VC) - Cryptographically secure credential verification
  • 🔗 Zero Trust Architecture - Continuous verification for every access request
  • 🔄 Seamless Integration - Compatible with existing identity systems like Keycloak
  • ⚡ Web3 Ready - Native support for blockchain and cryptocurrency wallet integrations

ZTF enables developers to implement military-grade security solutions with advanced authentication mechanisms, secure information sharing, and comprehensive access control, all while maintaining user experience excellence.

📚 Available Tutorials

Build Enterprise Authentication with Agentic Coding

Status:Available Now

Vibe coding in Cursor is great…but what about secure authentication? In this tutorial, we’ll show you how VIA’s Zero Trust Fabric, Supabase, Keycloak, and agentic coding in Cursor can build secure, passwordless login in minutes.

Tutorial highlights:

  • Build a production-ready Next.js application demonstrating VIA ZTF passwordless authentication

  • Secure sessions with encrypted HTTP-only cookies

  • Enforce Supabase Row Level Security (RLS) and 3-layer logout

  • Build a Next.js 15 App Router app with real-time updates

  • Deploy a Dockerized stack (Next.js, Keycloak, Supabase)

Technologies: Keycloak, Supabase, Next.js, Docker Watch the video: https://youtu.be/qlmB_Etk3Pk

Passwordless Authentication with Keycloak 🚀

Status:Available Now

Learn how to integrate ZTF's passwordless authentication system with Keycloak in a React application. This tutorial covers the complete OAuth 2.0/OpenID Connect flow with PKCE (Proof Key for Code Exchange).

What you'll learn:

  • Implementing passwordless authentication flows
  • JWT token management and automatic refresh
  • Secure logout functionality with global session termination
  • CORS configuration for production deployment
  • Docker containerization and deployment strategies
  • Advanced error handling and security best practices

Technologies: React, Keycloak, Docker, OAuth 2.0, PKCE, JWT

💡 Try it live: Demo Environment


Step-Up Authentication with ZTF 🛡️

Status:Available Now

Learn how to implement step-up authentication using WalletConnect integration with ZTF's automatic configuration system. This tutorial demonstrates how to add an additional layer of security for sensitive operations by requiring wallet signature verification.

What you'll learn:

  • 🔗 Automatic WalletConnect Configuration - Zero-config setup from Keycloak user profile
  • 🔄 Session Recovery - Persistent wallet connections across browser refreshes
  • 📝 Signature-Based Authentication - Require wallet signatures for sensitive actions
  • 🛡️ Agentic Browser Protection - Secure against AI-powered browser automation
  • 💾 Smart Data Storage - Automatic security-based storage separation
  • 🔐 Transaction Verification - End-to-end transaction approval workflow

This tutorial shows how to protect sensitive operations even when AI agents can interact with web applications, ensuring users maintain explicit control over critical actions.

Technologies: React, WalletConnect v2, Keycloak, Digital Signatures, Session Management

🎯 Perfect for: Applications requiring enhanced security for financial operations, administrative functions, and sensitive data access


Coming Soon! Web3 & WalletConnect Integration 🔥

Status: 🚧 Coming Soon

Learn how to integrate ZTF's advanced Web3 capabilities with WalletConnect v2 for seamless blockchain interactions.

What's coming:

  • 🔗 WalletConnect Session Recovery - Persistent wallet connections using Keycloak tokens
  • 💰 Secure Transaction Signing - Military-grade transaction approval workflows
  • 🌐 Multi-Chain Support - Ethereum Virtual Machine blockchains and VIA Secure Chain (VSC) - the world's first U.S. Department of Defense accredited blockchain
  • 🔄 Session State Management - Seamless experience across browser refreshes
  • 🛡️ Advanced Security Patterns - Private key protection and transaction validation
  • Real-time Web3 Interactions - Smart contract calls and DeFi integrations

This tutorial will showcase ZTF's ability to bridge traditional enterprise authentication with cutting-edge Web3 technologies, enabling secure and user-friendly blockchain applications.

Technologies: React, WalletConnect v2, Web3, Ethers.js, Smart Contracts, Multi-chain support

🎯 Perfect for: Developers building DeFi applications, NFT platforms, blockchain games, and enterprise Web3 solutions


🚀 Getting Started

Prerequisites

  • Node.js (version 18 or higher)
  • Docker and Docker Compose
  • Basic understanding of React and modern JavaScript
  • For Step Up Authentication Tutorial : Basic understanding of digital signatures and authentication flows
  • For Web3 Tutorial: Familiarity with Web3 concepts and blockchain development

Quick Start

  1. Clone this repository
  2. Navigate to your chosen tutorial directory
  3. Follow the detailed README instructions in each tutorial folder
  4. Access your ZTF development environment

Each tutorial includes:

  • 📖 Comprehensive step-by-step guides
  • 🐳 Docker containerization for easy deployment
  • 🔧 Production-ready configuration examples
  • 🛠️ Troubleshooting and debugging tips
  • 🔒 Security best practices and considerations

📖 Documentation & Resources

🎯 Learning Path Recommendation

  1. Explore the Demo - See ZTF in action with real-world scenarios
  2. Start with Tutorial 1 - Master the fundamentals of ZTF authentication
  3. Continue with Tutorial 2 - Learn step-up authentication with wallet signatures
  4. Read the Documentation - Dive deep into ZTF's architecture and capabilities
  5. Prepare for Tutorial 3 - Get ready for advanced Web3 integrations (coming soon!)

🤝 Contributing

We welcome contributions to improve these tutorials! Whether it's fixing bugs, improving documentation, or suggesting new tutorial topics, your input helps the entire ZTF community.

📝 License

This tutorial series is provided for educational and development purposes.


Ready to revolutionize your application's security? Start with Tutorial 1 and experience the power of Zero Trust Fabric! 🚀

About

VIA Zero Trust Fabric Tutorials

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors