Authorization using PassKeys

WebAuthn (Web Authentication) is a W3C standard that enables secure, passwordless, and phishing-resistant authentication using public-key cryptography. It's widely used with passkeys to improve security and user experience. However, authenticating users with WebAuthn is just the first step — after successful authentication, you often need to author...

Continue reading

Building a WebSocket Server in C++Builder

TsgcWebSocketServer is part of the sgcWebSockets suite and provides a high-level component for creating WebSocket servers in C++Builder. This guide walks through creating a minimal server that automatically replies to incoming messages.  Create the VCL project Open C++Builder and create a new VCL Forms Application.Drop a TsgcWebSocketServer co...

Continue reading

WebAuthn Advanced Usage Example

Below is a more comprehensive Delphi example that demonstrates custom endpoints, challenge policies, database-backed credential storage, FIDO Metadata validation, and cross-origin iframe support. The code highlights advanced event handling to enforce security policies.  sgcWebSockets WebAuthn Server Example procedure TForm1.ConfigureWebAuthn;b...

Continue reading

Deep Dive into sgcWebSockets WebAuthn Server

The TsgcWSAPIServer_WebAuthn component is a Delphi/FPC server module that implements the relying‑party side of the WebAuthn protocol over HTTPS. It integrates with TsgcWebSocketHTTPServer or TsgcWebSocketServer, and it exposes REST‑like endpoints for registration and authentication.  Endpoint Mechanics By default, the component registers ...

Continue reading

WebAuthn, Passkeys, and the End of Passwords

WebAuthn is the authentication layer of the FIDO2 standard. Instead of depending on user‑remembered secrets, it employs asymmetric cryptography. During registration, a user's authenticator (hardware key, secure enclave, TPM, etc.) generates a private–public key pair scoped to the relying party domain. The browser sends the public key and attestatio...

Continue reading

sgcWebSockets 2025.7

Rad Studio [+] : Improved WebAuthn: added support for PS256, PS384 and PS512 algorithms. [+] : Improved WebAuthn: new property WebAuthnOptions.MDS to configure the Fido Metadata Service. [+] : Improved HTTP.SYS: added support for the WebAuthn protocol. [+] : Updated the OpenSSL libraries to the version 3.5.1 [+] : Improved STOMP Protocol: added a n...

Continue reading

sgcWebSockets 2025.6

Rad Studio [+] : Improved OpenAI Assistant: new event OnFunctionCall which allows to interface OpenAI models with your code, database, applications... [+] : Updated the OpenAI Assistant Demo with a new Assistant "Delphi Weather Bot" showing how it works. [+] : Improved Whatsapp API: updated api to v20. [+] : Improved Whatsapp API: new method SendMe...

Continue reading

sgcWebSockets 2025.5

Rad Studio [+] : Improved WebAuthn Server: new events to handle better the Options request/response for the Registration and Authentication flows. - OnWebAuthnRegistrationOptionsRequest: allows to cancel an undesired registration request. - OnWebAuthnRegistrationOptionsResponse: allows to customize the registration options response. - OnWebAuthnAut...

Continue reading

OpenAI RealTime API

From sgcWebSockets 2025.5.0 the OpenAI RealTime API is supported (currently only transcription mode). The OpenAI Realtime API enables low-latency, multimodal interactions including speech-to-speech conversational experiences and real-time transcription. The component TsgcWSAPI_OpenAI implements the RealTime OpenAI API. Configuration Use the method ...

Continue reading

sgcWebSockets 2025.4

Rad Studio [+] : New WebAuthn Server Component: Implements the WebAuthn Server Specification, a web standard for secure, passwordless authentication. Currently in BETA. [+] : New WebAuthn Demo: Demonstrates how to register and authenticate using the TsgcWSAPIServer_WebAuthn component. Available in the folder "Demos\20.HTTP_Protocol\12.WebAuthn". [+...

Continue reading