G\u00fcn\u00fcm\u00fcz dijital d\u00fcnyas\u0131nda, \u00e7evrimi\u00e7i hesaplar\u0131m\u0131z\u0131n g\u00fcvenli\u011fi her zamankinden daha kritik bir \u00f6neme sahip. Ancak, kullan\u0131c\u0131 ad\u0131 ve \u015fifre ikilisi, y\u0131llard\u0131r s\u00fcregelen bir g\u00fcvenlik a\u00e7\u0131\u011f\u0131 ve kullan\u0131c\u0131 deneyimi sorununa d\u00f6n\u00fc\u015fm\u00fc\u015f durumda. Siber sald\u0131r\u0131lar, veri ihlalleri ve kimlik av\u0131 (phishing) giri\u015fimleri, geleneksel \u015fifre tabanl\u0131 sistemlerin ne kadar k\u0131r\u0131lgan oldu\u011funu her g\u00fcn bize hat\u0131rlat\u0131yor. Peki, bu kronik soruna k\u00f6kl\u00fc bir \u00e7\u00f6z\u00fcm bulmak m\u00fcmk\u00fcn m\u00fc? \u0130\u015fte tam da bu noktada, \u015fifresiz kimlik do\u011frulama standartlar\u0131 ve \u00f6zellikle WebAuthn, dijital g\u00fcvenli\u011fin gelece\u011fini \u015fekillendirme potansiyeliyle kar\u015f\u0131m\u0131za \u00e7\u0131k\u0131yor. Laravel geli\u015ftiricileri i\u00e7in bu devrimi kolayla\u015ft\u0131ran Vaultic paketi ise, \u015fifrelerin \u00f6l\u00fcm ferman\u0131n\u0131 imzalamaya haz\u0131r bir ara\u00e7 olarak \u00f6ne \u00e7\u0131k\u0131yor. Bu makalede, WebAuthn’\u0131n temellerinden, Vaultic’in Laravel entegrasyonuna ve \u015fifresiz bir gelece\u011fin sundu\u011fu f\u0131rsatlara kadar her \u015feyi detayl\u0131ca inceleyece\u011fiz.<\/p>\n
\u015eifreler, internetin ilk g\u00fcnlerinden bu yana dijital kimlik do\u011frulaman\u0131n temel ta\u015f\u0131 olmu\u015ftur. Ancak zamanla, bu temel ta\u015f\u0131n ne kadar \u00e7\u00fcr\u00fck oldu\u011fu ortaya \u00e7\u0131kt\u0131. Kullan\u0131c\u0131lar\u0131n zay\u0131f \u015fifreler se\u00e7me e\u011filimi, ayn\u0131 \u015fifreyi birden fazla platformda kullanma al\u0131\u015fkanl\u0131\u011f\u0131 ve karma\u015f\u0131k \u015fifreleri hat\u0131rlama zorlu\u011fu gibi fakt\u00f6rler, g\u00fcvenlik risklerini katlayarak art\u0131rd\u0131. Bir\u00e7ok kullan\u0131c\u0131, “123456” veya “password” gibi tahmin edilebilir \u015fifreler kullanmaya devam ederken, daha bilin\u00e7li kullan\u0131c\u0131lar bile, her platform i\u00e7in benzersiz ve g\u00fc\u00e7l\u00fc \u015fifreler olu\u015fturup bunlar\u0131 g\u00fcvenli bir \u015fekilde y\u00f6netmekte zorlan\u0131yor. Bu durum, \u015fifre y\u00f6neticilerinin (password managers) pop\u00fclaritesini art\u0131rsa da, sorunun k\u00f6kten \u00e7\u00f6z\u00fcm\u00fc i\u00e7in yeterli de\u011fil.<\/p>\n
Siber su\u00e7lular i\u00e7in \u015fifreler, adeta bir a\u00e7\u0131k b\u00fcfe haline geldi. Kimlik av\u0131 sald\u0131r\u0131lar\u0131 (phishing attacks) ile kullan\u0131c\u0131lar kand\u0131r\u0131larak \u015fifreleri ele ge\u00e7iriliyor, oltalama siteleri (spoofing sites) ile sahte giri\u015f sayfalar\u0131 olu\u015fturularak hassas bilgiler \u00e7al\u0131n\u0131yor. Ayr\u0131ca, b\u00fcy\u00fck veri ihlalleri (data breaches) sonucunda milyonlarca kullan\u0131c\u0131n\u0131n \u015fifresi karanl\u0131k a\u011fda (dark web) sat\u0131\u015fa sunuluyor. Bu t\u00fcr ihlaller, sadece tek bir hesab\u0131n de\u011fil, ayn\u0131 \u015fifreyi kullanan di\u011fer t\u00fcm hesaplar\u0131n da tehlikeye girmesine neden oluyor. Kurumsal d\u00fczeyde ise, \u00e7al\u0131\u015fanlar\u0131n zay\u0131f \u015fifre politikalar\u0131 veya \u015fifrelerin k\u00f6t\u00fc y\u00f6netimi, \u015firket a\u011flar\u0131na yetkisiz eri\u015fimlerin kap\u0131s\u0131n\u0131 aralayabiliyor, bu da ciddi finansal kay\u0131plara ve itibar zedelenmelerine yol a\u00e7abiliyor. Bu tablo, \u015fifrelerin art\u0131k sadece bir kimlik do\u011frulama arac\u0131 olmaktan \u00e7\u0131k\u0131p, hem bireysel hem de kurumsal d\u00fczeyde ciddi bir g\u00fcvenlik y\u00fck\u00fcne d\u00f6n\u00fc\u015ft\u00fc\u011f\u00fcn\u00fc a\u00e7\u0131k\u00e7a g\u00f6steriyor. Bu nedenle, daha g\u00fc\u00e7l\u00fc, daha g\u00fcvenli ve kullan\u0131c\u0131 dostu alternatiflere olan ihtiya\u00e7 hi\u00e7 bu kadar acil olmam\u0131\u015ft\u0131.<\/p>\n
WebAuthn (Web Authentication), FIDO Alliance ve W3C (World Wide Web Consortium) taraf\u0131ndan geli\u015ftirilen, \u015fifresiz ve phishing sald\u0131r\u0131lar\u0131na dayan\u0131kl\u0131 kimlik do\u011frulama i\u00e7in bir web standard\u0131d\u0131r. Temel amac\u0131, geleneksel \u015fifrelerin g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 ortadan kald\u0131rmak ve kullan\u0131c\u0131lara daha g\u00fcvenli, daha h\u0131zl\u0131 ve daha kolay bir kimlik do\u011frulama deneyimi sunmakt\u0131r. WebAuthn, FIDO2 projesinin bir par\u00e7as\u0131d\u0131r ve modern web taray\u0131c\u0131lar\u0131 ile i\u015fletim sistemleri taraf\u0131ndan geni\u015f \u00e7apta desteklenmektedir. Bu standart, kullan\u0131c\u0131lar\u0131n parmak izi, y\u00fcz tan\u0131ma, PIN veya donan\u0131m g\u00fcvenlik anahtarlar\u0131 (\u00f6rne\u011fin YubiKey) gibi \u00e7e\u015fitli “kimlik do\u011frulay\u0131c\u0131lar” (authenticators) arac\u0131l\u0131\u011f\u0131yla kimliklerini do\u011frulamalar\u0131na olanak tan\u0131r.<\/p>\n
Peki, WebAuthn tam olarak nas\u0131l \u00e7al\u0131\u015f\u0131r? S\u00fcre\u00e7, halka a\u00e7\u0131k anahtar \u015fifrelemesi (public-key cryptography) prensiplerine dayan\u0131r. Bir kullan\u0131c\u0131 bir web sitesine kaydoldu\u011funda veya giri\u015f yapt\u0131\u011f\u0131nda, site (Relying Party olarak adland\u0131r\u0131l\u0131r) kullan\u0131c\u0131dan bir kimlik do\u011frulay\u0131c\u0131 kullanmas\u0131n\u0131 ister. Kullan\u0131c\u0131, tercih etti\u011fi kimlik do\u011frulay\u0131c\u0131y\u0131 (\u00f6rne\u011fin, diz\u00fcst\u00fc bilgisayar\u0131ndaki parmak izi okuyucu veya bir USB g\u00fcvenlik anahtar\u0131) kullanarak benzersiz bir anahtar \u00e7ifti olu\u015fturur: \u00f6zel anahtar (private key) ve genel anahtar (public key). \u00d6zel anahtar, kullan\u0131c\u0131n\u0131n cihaz\u0131nda veya g\u00fcvenlik anahtar\u0131nda g\u00fcvenli bir \u015fekilde saklan\u0131r ve asla cihaz\u0131 terk etmez. Genel anahtar ise web sitesine g\u00f6nderilir ve sunucuda saklan\u0131r. Daha sonraki giri\u015f denemelerinde, web sitesi kullan\u0131c\u0131dan bu genel anahtar\u0131 kullanarak bir “meydan okuma” (challenge) imzalamas\u0131n\u0131 ister. Kimlik do\u011frulay\u0131c\u0131, kullan\u0131c\u0131n\u0131n izniyle (\u00f6rne\u011fin parmak izi okutarak), \u00f6zel anahtar\u0131 kullanarak bu meydan okumay\u0131 imzalar ve imzay\u0131 web sitesine geri g\u00f6nderir. Web sitesi, daha \u00f6nce saklad\u0131\u011f\u0131 genel anahtar\u0131 kullanarak bu imzan\u0131n ge\u00e7erlili\u011fini do\u011frular. E\u011fer imza ge\u00e7erliyse, kullan\u0131c\u0131n\u0131n kimli\u011fi ba\u015far\u0131yla do\u011frulanm\u0131\u015f olur.<\/p>\n
Bu y\u00f6ntem, \u015fifrelerin aksine, sunucuda hi\u00e7bir zaman kullan\u0131c\u0131n\u0131n \u00f6zel anahtar\u0131n\u0131n veya \u015fifresinin bir kopyas\u0131n\u0131 saklamad\u0131\u011f\u0131 i\u00e7in \u00e7ok daha g\u00fcvenlidir. Ayr\u0131ca, her kimlik do\u011frulama i\u015flemi i\u00e7in benzersiz bir “meydan okuma” kullan\u0131ld\u0131\u011f\u0131ndan, tekrar oynatma sald\u0131r\u0131lar\u0131 (replay attacks) ve kimlik av\u0131 sald\u0131r\u0131lar\u0131na kar\u015f\u0131 son derece diren\u00e7lidir. \u00c7\u00fcnk\u00fc kimlik av\u0131 sitesi, ger\u00e7ek site taraf\u0131ndan verilen meydan okumay\u0131 taklit edemez ve dolay\u0131s\u0131yla kullan\u0131c\u0131n\u0131n \u00f6zel anahtar\u0131n\u0131 ele ge\u00e7iremez. WebAuthn, taray\u0131c\u0131lar aras\u0131 uyumlulu\u011fu ve platform ba\u011f\u0131ms\u0131zl\u0131\u011f\u0131n\u0131 sa\u011flamak i\u00e7in tasarlanm\u0131\u015ft\u0131r, bu da onu gelece\u011fin kimlik do\u011frulama standard\u0131 haline getirmektedir. Kullan\u0131c\u0131lar i\u00e7in daha az \u015fifre hat\u0131rlama y\u00fck\u00fc, geli\u015ftiriciler i\u00e7in daha g\u00fcvenli bir altyap\u0131 ve genel olarak daha g\u00fcvenli bir internet deneyimi sunar.<\/p>\n
WebAuthn’\u0131n sundu\u011fu g\u00fcvenlik ve kullan\u0131c\u0131 deneyimi avantajlar\u0131 tart\u0131\u015f\u0131lmaz olsa da, bu standard\u0131 s\u0131f\u0131rdan bir uygulamaya entegre etmek, \u00f6zellikle de WebAuthn API’sinin karma\u015f\u0131kl\u0131\u011f\u0131 nedeniyle zorlay\u0131c\u0131 olabilir. \u0130\u015fte tam bu noktada, Laravel ekosistemi i\u00e7in geli\u015ftirilmi\u015f Vaultic paketi devreye giriyor. Vaultic, Laravel geli\u015ftiricilerinin WebAuthn tabanl\u0131 \u015fifresiz kimlik do\u011frulamas\u0131n\u0131 uygulamalar\u0131na kolayca entegre etmelerini sa\u011flayan g\u00fc\u00e7l\u00fc ve esnek bir \u00e7\u00f6z\u00fcmd\u00fcr. Laravel’in sa\u011flad\u0131\u011f\u0131 geli\u015ftirici dostu ortamla birle\u015fti\u011finde, Vaultic, WebAuthn’\u0131n karma\u015f\u0131k detaylar\u0131n\u0131 soyutlayarak (abstracting) geli\u015ftiricilerin ana i\u015f mant\u0131\u011f\u0131na odaklanmas\u0131na olanak tan\u0131r.<\/p>\n
Vaultic, WebAuthn’\u0131n kay\u0131t (registration) ve kimlik do\u011frulama (authentication) ak\u0131\u015flar\u0131n\u0131 y\u00f6netmek i\u00e7in gerekli t\u00fcm backend (arka u\u00e7) bile\u015fenlerini sa\u011flar. Bu, anahtar \u00e7iftlerinin olu\u015fturulmas\u0131, genel anahtarlar\u0131n g\u00fcvenli bir \u015fekilde depolanmas\u0131, meydan okumalar\u0131n (challenges) olu\u015fturulmas\u0131 ve imzalar\u0131n do\u011frulanmas\u0131 gibi kritik ad\u0131mlar\u0131 kapsar. Geli\u015ftiriciler, Vaultic sayesinde WebAuthn’\u0131n d\u00fc\u015f\u00fck seviyeli API’leriyle do\u011frudan u\u011fra\u015fmak zorunda kalmazlar; bunun yerine, Laravel’in tan\u0131d\u0131k ve sezgisel yap\u0131s\u0131n\u0131 kullanarak \u015fifresiz kimlik do\u011frulamay\u0131 uygulamalar\u0131na ekleyebilirler. Bu, geli\u015ftirme s\u00fcrecini \u00f6nemli \u00f6l\u00e7\u00fcde h\u0131zland\u0131r\u0131r ve hatalar\u0131n olu\u015fma riskini azalt\u0131r.<\/p>\n
Vaultic’in Laravel geli\u015ftiricileri i\u00e7in ideal olmas\u0131n\u0131n birka\u00e7 temel nedeni vard\u0131r. Birincisi, Laravel’in mevcut kimlik do\u011frulama sistemleriyle (\u00f6rne\u011fin Laravel Breeze veya Jetstream) sorunsuz bir \u015fekilde entegre olabilir. Bu, mevcut bir Laravel uygulamas\u0131n\u0131 WebAuthn’a y\u00fckseltmeyi veya s\u0131f\u0131rdan \u015fifresiz bir uygulama olu\u015fturmay\u0131 kolayla\u015ft\u0131r\u0131r. \u0130kincisi, paket, WebAuthn’\u0131n farkl\u0131 kimlik do\u011frulay\u0131c\u0131 t\u00fcrlerini (platform kimlik do\u011frulay\u0131c\u0131lar, \u00e7apraz platform kimlik do\u011frulay\u0131c\u0131lar) destekler ve geli\u015ftiricilere bu konuda esneklik sunar. \u00dc\u00e7\u00fcnc\u00fcs\u00fc, Vaultic, g\u00fcvenlik odakl\u0131 bir yakla\u015f\u0131mla tasarlanm\u0131\u015ft\u0131r; bu da uygulaman\u0131z\u0131n en g\u00fcncel g\u00fcvenlik standartlar\u0131na uygun olmas\u0131n\u0131 sa\u011flar. Ayr\u0131ca, paketin iyi belgelenmi\u015f olmas\u0131 ve aktif bir toplulu\u011fa sahip olmas\u0131, geli\u015ftiricilerin kar\u015f\u0131la\u015fabilece\u011fi sorunlara h\u0131zl\u0131 \u00e7\u00f6z\u00fcmler bulmas\u0131na yard\u0131mc\u0131 olur. Son olarak, T\u00fcrkiye gibi mobil cihaz kullan\u0131m\u0131n\u0131n y\u00fcksek oldu\u011fu bir pazarda, biyometrik kimlik do\u011frulaman\u0131n (parmak izi, y\u00fcz tan\u0131ma) kullan\u0131c\u0131lar taraf\u0131ndan yayg\u0131n olarak benimsenmesi, Vaultic gibi ara\u00e7lar\u0131n de\u011ferini daha da art\u0131rmaktad\u0131r. Kullan\u0131c\u0131lar, cihazlar\u0131ndaki yerle\u015fik biyometrik sens\u00f6rleri kullanarak h\u0131zl\u0131 ve g\u00fcvenli bir \u015fekilde giri\u015f yapabilirler, bu da genel kullan\u0131c\u0131 deneyimini \u00f6nemli \u00f6l\u00e7\u00fcde iyile\u015ftirir ve \u015fifre yorgunlu\u011funu ortadan kald\u0131r\u0131r. Bu nedenlerle, Vaultic, Laravel ekosisteminde \u015fifresiz bir gelece\u011fe ad\u0131m atmak isteyen her geli\u015ftirici i\u00e7in vazge\u00e7ilmez bir ara\u00e7 haline gelmi\u015ftir.<\/p>\n
Vaultic’i bir Laravel uygulamas\u0131na entegre etmek, WebAuthn’\u0131n karma\u015f\u0131kl\u0131\u011f\u0131n\u0131 basitle\u015ftiren ad\u0131m ad\u0131m bir s\u00fcre\u00e7tir. Bu b\u00f6l\u00fcmde, mevcut bir Laravel projesine Vaultic’i nas\u0131l ekleyece\u011finizi ve \u015fifresiz kimlik do\u011frulama ak\u0131\u015f\u0131n\u0131 nas\u0131l yap\u0131land\u0131raca\u011f\u0131n\u0131z\u0131 uygulamal\u0131 \u00f6rneklerle a\u00e7\u0131klayaca\u011f\u0131z. Bu ad\u0131mlar, okuyucunun konuyu s\u0131f\u0131rdan \u00f6\u011frenebilece\u011fi \u015fekilde kademeli olarak ilerleyecektir.<\/p>\n
\u0130lk olarak, Laravel projenize Vaultic paketini Composer arac\u0131l\u0131\u011f\u0131yla eklemeniz gerekir. Terminalinizi a\u00e7\u0131n ve projenizin k\u00f6k dizininde a\u015fa\u011f\u0131daki komutu \u00e7al\u0131\u015ft\u0131r\u0131n:<\/p>\n
composer require rawilk\/laravel-vaultic<\/pre>\n<\/code>\n <\/div>\n
Kurulum tamamland\u0131ktan sonra, Vaultic'in yap\u0131land\u0131rma dosyas\u0131n\u0131 ve veritaban\u0131 ge\u00e7i\u015flerini (migrations) yay\u0131mlaman\u0131z gerekecektir. Bu, paketin kendi veritaban\u0131 tablolar\u0131n\u0131 olu\u015fturmas\u0131na ve ayarlar\u0131n\u0131 \u00f6zelle\u015ftirmenize olanak tan\u0131r:<\/p>\n
\nphp artisan vendor:publish --tag=vaultic-config\nphp artisan vendor:publish --tag=vaultic-migrations<\/pre>\n<\/code>\n <\/div>\n
Bu komutlar, config\/vaultic.php<\/code> dosyas\u0131n\u0131 ve gerekli ge\u00e7i\u015f dosyalar\u0131n\u0131 projenizin ilgili dizinlerine kopyalayacakt\u0131r. Ge\u00e7i\u015f dosyalar\u0131n\u0131 \u00e7al\u0131\u015ft\u0131rarak veritaban\u0131 tablolar\u0131n\u0131 olu\u015fturun:<\/p>\n\nphp artisan migrate<\/pre>\n<\/code>\n <\/div>\n
Bu ad\u0131mlar, Vaultic'in Laravel projenizle entegrasyonu i\u00e7in temel altyap\u0131y\u0131 haz\u0131rlar. Art\u0131k WebAuthn kimlik do\u011frulay\u0131c\u0131lar\u0131n\u0131 depolamak i\u00e7in gerekli tablolar veritaban\u0131n\u0131zda mevcut olacak.<\/p>\n
Ad\u0131m 2: Veritaban\u0131 Yap\u0131land\u0131rmas\u0131 ve Modeller<\/h3>\n
Vaultic, kimlik do\u011frulay\u0131c\u0131lar\u0131 kullan\u0131c\u0131lar\u0131n\u0131zla ili\u015fkilendirmek i\u00e7in Authenticatable<\/code> modelinizin belirli bir yetene\u011fi (trait) kullanmas\u0131n\u0131 bekler. Genellikle bu model App\\Models\\User.php<\/code> olacakt\u0131r. User<\/code> modelinize Rawilk\\LaravelVaultic\\Concerns\\HasWebauthnAuthenticators<\/code> yetene\u011fini eklemeniz gerekmektedir:<\/p>\n\n\n *\/\n protected $fillable = [\n 'name',\n 'email',\n 'password',\n ];\n\n \/**\n * The attributes that should be hidden for serialization.\n *\n * @var array\n *\/\n protected $hidden = [\n 'password',\n 'remember_token',\n ];\n\n \/**\n * The attributes that should be cast.\n *\n * @var array\n *\/\n protected $casts = [\n 'email_verified_at' => 'datetime',\n 'password' => 'hashed',\n ];\n}\n<\/pre>\n<\/code>\n <\/div>\n
Bu yetenek, kullan\u0131c\u0131n\u0131z\u0131n WebAuthn kimlik do\u011frulay\u0131c\u0131lar\u0131n\u0131 y\u00f6netmesi i\u00e7in gerekli ili\u015fkileri ve yard\u0131mc\u0131 metodlar\u0131 sa\u011flar. \u00d6rne\u011fin, bir kullan\u0131c\u0131n\u0131n ka\u00e7 tane kimlik do\u011frulay\u0131c\u0131s\u0131 oldu\u011funu veya belirli bir kimlik do\u011frulay\u0131c\u0131ya eri\u015fimini kontrol etmenize olanak tan\u0131r.<\/p>\n
Ad\u0131m 3: Kullan\u0131c\u0131 Kayd\u0131 ve Kimlik Do\u011frulama Ak\u0131\u015f\u0131<\/h3>\n
WebAuthn ak\u0131\u015f\u0131, hem sunucu taraf\u0131 (Laravel) hem de istemci taraf\u0131 (JavaScript) etkile\u015fimi gerektirir. Vaultic, sunucu taraf\u0131n\u0131 b\u00fcy\u00fck \u00f6l\u00e7\u00fcde basitle\u015ftirirken, istemci taraf\u0131 i\u00e7in WebAuthn API'si ile etkile\u015fim kurman\u0131z gerekecektir. Bu k\u0131s\u0131m genellikle bir JavaScript k\u00fct\u00fcphanesi (\u00f6rne\u011fin @web-auth\/webauthn-browser<\/code>) kullan\u0131larak kolayla\u015ft\u0131r\u0131l\u0131r.<\/p>\nKullan\u0131c\u0131 Kayd\u0131 (Registration):<\/h4>\n
Yeni bir kimlik do\u011frulay\u0131c\u0131 kaydetmek i\u00e7in, kullan\u0131c\u0131n\u0131n cihaz\u0131ndan bir anahtar \u00e7ifti olu\u015fturulmas\u0131 gerekir. Bu i\u015flem genellikle a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 i\u00e7erir:<\/p>\n
\n- Kullan\u0131c\u0131, \"Yeni Kimlik Do\u011frulay\u0131c\u0131 Ekle\" gibi bir d\u00fc\u011fmeye t\u0131klar.<\/li>\n
- Sunucu (Laravel), Vaultic'i kullanarak yeni bir kay\u0131t meydan okumas\u0131 (registration challenge) olu\u015fturur ve bunu istemciye (taray\u0131c\u0131ya) g\u00f6nderir.<\/li>\n
- \u0130stemci taraf\u0131 JavaScript, taray\u0131c\u0131n\u0131n WebAuthn API'sini (
navigator.credentials.create()<\/code>) kullanarak bu meydan okumay\u0131 ve di\u011fer parametreleri kimlik do\u011frulay\u0131c\u0131ya iletir.<\/li>\n- Kullan\u0131c\u0131, kimlik do\u011frulay\u0131c\u0131da (parmak izi okuyucu, g\u00fcvenlik anahtar\u0131 vb.) kimli\u011fini do\u011frular.<\/li>\n
- Kimlik do\u011frulay\u0131c\u0131, bir anahtar \u00e7ifti olu\u015fturur ve genel anahtar\u0131, imzalanm\u0131\u015f bir yan\u0131tla birlikte istemciye geri g\u00f6nderir.<\/li>\n
- \u0130stemci, bu yan\u0131t\u0131 tekrar sunucuya g\u00f6nderir.<\/li>\n
- Sunucu, Vaultic'i kullanarak yan\u0131t\u0131 do\u011frular ve genel anahtar\u0131 veritaban\u0131na kaydeder.<\/li>\n<\/ol>\n
Laravel taraf\u0131nda, bir kay\u0131t meydan okumas\u0131 olu\u015fturmak i\u00e7in Vaultic'in Webauthn<\/code> facade'\u0131n\u0131 kullanabilirsiniz:<\/p>\n\ntoArray();\n\n \/\/ Bu se\u00e7enekleri istemciye (JavaScript'e) JSON olarak g\u00f6nder\n return response()->json($options);\n }\n\n public function register(Request $request)\n {\n $user = Auth::user();\n\n try {\n \/\/ \u0130stemciden gelen yan\u0131t\u0131 do\u011frula ve kimlik do\u011frulay\u0131c\u0131y\u0131 kaydet\n Webauthn::register($user, $request->input('attestation'));\n\n return response()->json(['message' => 'Kimlik do\u011frulay\u0131c\u0131 ba\u015far\u0131yla kaydedildi.']);\n } catch (\\Exception $e) {\n return response()->json(['error' => $e->getMessage()], 422);\n }\n }\n}\n<\/pre>\n<\/code>\n <\/div>\n
\u0130stemci taraf\u0131nda ise, JavaScript ile bu se\u00e7enekleri al\u0131p navigator.credentials.create()<\/code> metodunu kullanman\u0131z gerekir. Bu genellikle React, Vue veya Alpine.js gibi modern frontend framework'leri ile daha kolay yap\u0131l\u0131r. \u0130\u015fte basit bir \u00f6rnek (sadece konsept i\u00e7in):<\/p>\n\n\/\/ JavaScript (\u00f6rne\u011fin bir Vue bile\u015feni i\u00e7inde)\nasync function registerWebAuthn() {\n const response = await fetch('\/webauthn\/register\/options');\n const options = await response.json();\n\n \/\/ Se\u00e7enekleri WebAuthn API'sinin bekledi\u011fi formata d\u00f6n\u00fc\u015ft\u00fcr\n options.challenge = Uint8Array.from(atob(options.challenge), c => c.charCodeAt(0));\n options.user.id = Uint8Array.from(atob(options.user.id), c => c.charCodeAt(0));\n options.excludeCredentials = options.excludeCredentials.map(credential => ({\n ...credential,\n id: Uint8Array.from(atob(credential.id), c => c.charCodeAt(0)),\n }));\n\n try {\n const credential = await navigator.credentials.create({ publicKey: options });\n\n \/\/ Credential objesini sunucuya g\u00f6nder\n const registerResponse = await fetch('\/webauthn\/register', {\n method: 'POST',\n headers: {\n 'Content-Type': 'application\/json',\n 'X-CSRF-TOKEN': document.querySelector('meta[name=\"csrf-token\"]').getAttribute('content')\n },\n body: JSON.stringify({\n attestation: {\n id: btoa(String.fromCharCode(...new Uint8Array(credential.rawId))),\n rawId: btoa(String.fromCharCode(...new Uint8Array(credential.rawId))),\n response: {\n clientDataJSON: btoa(String.fromCharCode(...new Uint8Array(credential.response.clientDataJSON))),\n attestationObject: btoa(String.fromCharCode(...new Uint8Array(credential.response.attestationObject))),\n },\n type: credential.type,\n }\n })\n });\n\n const data = await registerResponse.json();\n if (data.message) {\n alert(data.message);\n } else {\n alert(data.error);\n }\n } catch (error) {\n console.error('WebAuthn kay\u0131t hatas\u0131:', error);\n alert('Kay\u0131t i\u015flemi ba\u015far\u0131s\u0131z oldu: ' + error.message);\n }\n}\n<\/pre>\n<\/code>\n <\/div>\n
Kimlik Do\u011frulama (Authentication):<\/h4>\n
Mevcut bir kimlik do\u011frulay\u0131c\u0131 ile giri\u015f yapmak da benzer bir ak\u0131\u015f\u0131 takip eder:<\/p>\n
\n- Kullan\u0131c\u0131, \"\u015eifresiz Giri\u015f Yap\" gibi bir d\u00fc\u011fmeye t\u0131klar veya e-posta adresini girer.<\/li>\n
- Sunucu, Vaultic'i kullanarak bir kimlik do\u011frulama meydan okumas\u0131 (authentication challenge) olu\u015fturur ve bunu istemciye g\u00f6nderir.<\/li>\n
- \u0130stemci taraf\u0131 JavaScript,
navigator.credentials.get()<\/code> metodunu kullanarak bu meydan okumay\u0131 kimlik do\u011frulay\u0131c\u0131ya iletir.<\/li>\n- Kullan\u0131c\u0131, kimlik do\u011frulay\u0131c\u0131da kimli\u011fini do\u011frular.<\/li>\n
- Kimlik do\u011frulay\u0131c\u0131, \u00f6zel anahtar\u0131yla meydan okumay\u0131 imzalar ve imzalanm\u0131\u015f yan\u0131t\u0131 istemciye geri g\u00f6nderir.<\/li>\n
- \u0130stemci, bu yan\u0131t\u0131 tekrar sunucuya g\u00f6nderir.<\/li>\n
- Sunucu, Vaultic'i kullanarak yan\u0131t\u0131 do\u011frular ve kullan\u0131c\u0131y\u0131 sisteme giri\u015f yapt\u0131r\u0131r.<\/li>\n<\/ol>\n
Laravel taraf\u0131nda, bir kimlik do\u011frulama meydan okumas\u0131 olu\u015fturmak ve yan\u0131t\u0131 do\u011frulamak i\u00e7in:<\/p>\n
\ninput('email'))->first();\n\n if (! $user) {\n return response()->json(['error' => 'Kullan\u0131c\u0131 bulunamad\u0131.'], 404);\n }\n\n $options = Webauthn::authenticationOptionsFor($user)->toArray();\n\n return response()->json($options);\n }\n\n public function login(Request $request)\n {\n try {\n \/\/ \u0130stemciden gelen yan\u0131t\u0131 do\u011frula ve kullan\u0131c\u0131y\u0131 giri\u015f yap\n \/** @var \\App\\Models\\User $user *\/\n $user = Webauthn::authenticate($request->input('assertion'));\n\n Auth::login($user); \/\/ Laravel'in Auth sistemi ile kullan\u0131c\u0131y\u0131 giri\u015f yap\n\n return response()->json(['message' => 'Ba\u015far\u0131yla giri\u015f yap\u0131ld\u0131.']);\n } catch (\\Exception $e) {\n return response()->json(['error' => $e->getMessage()], 422);\n }\n }\n}\n<\/pre>\n<\/code>\n <\/div>\n
Yine, istemci taraf\u0131 JavaScript, navigator.credentials.get()<\/code> metodunu kullanarak sunucudan gelen se\u00e7eneklerle kimlik do\u011frulama i\u015flemini ba\u015flat\u0131r ve sonucu sunucuya geri g\u00f6nderir.<\/p>\nAd\u0131m 4: Kullan\u0131c\u0131 Deneyimi ve G\u00fcvenlik \u0130pu\u00e7lar\u0131<\/h3>\n
WebAuthn entegrasyonunda kullan\u0131c\u0131 deneyimi kritik \u00f6neme sahiptir. Kullan\u0131c\u0131lara net talimatlar sa\u011flamak ve s\u00fcreci olabildi\u011fince sorunsuz hale getirmek \u00f6nemlidir. Ayr\u0131ca, g\u00fcvenlik a\u00e7\u0131s\u0131ndan baz\u0131 ipu\u00e7lar\u0131 bulunmaktad\u0131r:<\/p>\n
\n- Birden Fazla Kimlik Do\u011frulay\u0131c\u0131:<\/strong> Kullan\u0131c\u0131lar\u0131n birden fazla kimlik do\u011frulay\u0131c\u0131 kaydetmesine izin verin (\u00f6rne\u011fin, telefonlar\u0131ndaki biyometrik sens\u00f6r ve bir USB g\u00fcvenlik anahtar\u0131). Bu, bir kimlik do\u011frulay\u0131c\u0131n\u0131n kaybolmas\u0131 veya hasar g\u00f6rmesi durumunda yedek bir se\u00e7enek sunar.<\/li>\n
- Kurtarma Mekanizmalar\u0131:<\/strong> T\u00fcm kimlik do\u011frulay\u0131c\u0131lar\u0131n\u0131 kaybeden kullan\u0131c\u0131lar i\u00e7in g\u00fcvenli bir hesap kurtarma mekanizmas\u0131 (\u00f6rne\u011fin, tek kullan\u0131ml\u0131k kodlar, e-posta\/SMS do\u011frulama ile parola s\u0131f\u0131rlama) sa\u011flay\u0131n. Bu, \u015fifresiz sistemlerde bile \u00f6nemlidir.<\/li>\n
- Net Talimatlar:<\/strong> Kullan\u0131c\u0131lara WebAuthn kay\u0131t ve giri\u015f s\u00fcre\u00e7lerinde ne yapmalar\u0131 gerekti\u011fi konusunda a\u00e7\u0131k ve anla\u015f\u0131l\u0131r talimatlar verin. Taray\u0131c\u0131da a\u00e7\u0131lan pencereleri, parmak izi okuma veya PIN girme ad\u0131mlar\u0131n\u0131 a\u00e7\u0131klay\u0131n.<\/li>\n
- G\u00fcvenlik Anahtar\u0131 Y\u00f6netimi:<\/strong> Kullan\u0131c\u0131lar\u0131n kay\u0131tl\u0131 kimlik do\u011frulay\u0131c\u0131lar\u0131n\u0131 y\u00f6netebilecekleri (yeniden adland\u0131rma, silme) bir aray\u00fcz sunun.<\/li>\n<\/ul>\n
Bu ad\u0131mlar ve ipu\u00e7lar\u0131, Laravel uygulaman\u0131zda Vaultic ile g\u00fc\u00e7l\u00fc ve kullan\u0131c\u0131 dostu bir WebAuthn kimlik do\u011frulama sistemi kurman\u0131za yard\u0131mc\u0131 olacakt\u0131r. \u015eifrelerin getirdi\u011fi y\u00fckten kurtulup, daha g\u00fcvenli ve modern bir kimlik do\u011frulama deneyimine ge\u00e7i\u015f yapabilirsiniz.<\/p>\n
\u015eifresiz Gelece\u011fe Ge\u00e7i\u015fte Kar\u015f\u0131la\u015f\u0131labilecek Zorluklar ve \u00c7\u00f6z\u00fcmleri Nelerdir?<\/h2>\n
\u015eifresiz kimlik do\u011frulama, dijital g\u00fcvenli\u011fin gelece\u011fi olarak g\u00f6r\u00fclse de, bu yeni sisteme ge\u00e7i\u015fte baz\u0131 zorluklar ve engellerle kar\u015f\u0131la\u015fmak ka\u00e7\u0131n\u0131lmazd\u0131r. Bu zorluklar\u0131 anlamak ve proaktif \u00e7\u00f6z\u00fcmler geli\u015ftirmek, ba\u015far\u0131l\u0131 bir ge\u00e7i\u015f i\u00e7in hayati \u00f6neme sahiptir. T\u00fcrkiye'deki kullan\u0131c\u0131 al\u0131\u015fkanl\u0131klar\u0131 ve teknoloji adaptasyonu da bu s\u00fcre\u00e7te g\u00f6z \u00f6n\u00fcnde bulundurulmas\u0131 gereken \u00f6nemli fakt\u00f6rlerdir.<\/p>\n
\u0130lk olarak, kullan\u0131c\u0131 adaptasyonu ve fark<\/p>\n","protected":false},"excerpt":{"rendered":"G\u00fcn\u00fcm\u00fcz dijital d\u00fcnyas\u0131nda, \u00e7evrimi\u00e7i hesaplar\u0131m\u0131z\u0131n g\u00fcvenli\u011fi her zamankinden daha kritik bir \u00f6neme sahip.","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[133],"tags":[],"class_list":{"0":"post-41556","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-php","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nVaultic ile Laravel Uygulamalar\u0131nda WebAuthn: \u015eifrelerin Sonu mu Geliyor? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/vaultic-ile-laravel-uygulamalarinda-webauthn-sifrelerin-sonu-mu-geliyor\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Vaultic ile Laravel Uygulamalar\u0131nda WebAuthn: \u015eifrelerin Sonu mu Geliyor?\" \/>\n<meta property=\"og:description\" content=\"G\u00fcn\u00fcm\u00fcz dijital d\u00fcnyas\u0131nda, \u00e7evrimi\u00e7i hesaplar\u0131m\u0131z\u0131n g\u00fcvenli\u011fi her zamankinden daha kritik bir \u00f6neme sahip.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/vaultic-ile-laravel-uygulamalarinda-webauthn-sifrelerin-sonu-mu-geliyor\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-03T06:00:45+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/vaultic-ile-laravel-uygulamalarinda-webauthn-sifrelerin-sonu-mu-geliyor\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/vaultic-ile-laravel-uygulamalarinda-webauthn-sifrelerin-sonu-mu-geliyor\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Vaultic ile Laravel Uygulamalar\u0131nda WebAuthn: \u015eifrelerin Sonu mu Geliyor?\",\"datePublished\":\"2026-05-03T06:00:45+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/vaultic-ile-laravel-uygulamalarinda-webauthn-sifrelerin-sonu-mu-geliyor\/\"},\"wordCount\":2625,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"PHP\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/vaultic-ile-laravel-uygulamalarinda-webauthn-sifrelerin-sonu-mu-geliyor\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/vaultic-ile-laravel-uygulamalarinda-webauthn-sifrelerin-sonu-mu-geliyor\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/vaultic-ile-laravel-uygulamalarinda-webauthn-sifrelerin-sonu-mu-geliyor\/\",\"name\":\"Vaultic ile Laravel Uygulamalar\u0131nda WebAuthn: \u015eifrelerin Sonu mu Geliyor? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2026-05-03T06:00:45+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/vaultic-ile-laravel-uygulamalarinda-webauthn-sifrelerin-sonu-mu-geliyor\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/vaultic-ile-laravel-uygulamalarinda-webauthn-sifrelerin-sonu-mu-geliyor\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/vaultic-ile-laravel-uygulamalarinda-webauthn-sifrelerin-sonu-mu-geliyor\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Vaultic ile Laravel Uygulamalar\u0131nda WebAuthn: \u015eifrelerin Sonu mu Geliyor?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Vaultic ile Laravel Uygulamalar\u0131nda WebAuthn: \u015eifrelerin Sonu mu Geliyor? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/vaultic-ile-laravel-uygulamalarinda-webauthn-sifrelerin-sonu-mu-geliyor\/","og_locale":"tr_TR","og_type":"article","og_title":"Vaultic ile Laravel Uygulamalar\u0131nda WebAuthn: \u015eifrelerin Sonu mu Geliyor?","og_description":"G\u00fcn\u00fcm\u00fcz dijital d\u00fcnyas\u0131nda, \u00e7evrimi\u00e7i hesaplar\u0131m\u0131z\u0131n g\u00fcvenli\u011fi her zamankinden daha kritik bir \u00f6neme sahip.","og_url":"https:\/\/fatihsoysal.com\/blog\/vaultic-ile-laravel-uygulamalarinda-webauthn-sifrelerin-sonu-mu-geliyor\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2026-05-03T06:00:45+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"9 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/vaultic-ile-laravel-uygulamalarinda-webauthn-sifrelerin-sonu-mu-geliyor\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/vaultic-ile-laravel-uygulamalarinda-webauthn-sifrelerin-sonu-mu-geliyor\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Vaultic ile Laravel Uygulamalar\u0131nda WebAuthn: \u015eifrelerin Sonu mu Geliyor?","datePublished":"2026-05-03T06:00:45+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/vaultic-ile-laravel-uygulamalarinda-webauthn-sifrelerin-sonu-mu-geliyor\/"},"wordCount":2625,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["PHP"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/vaultic-ile-laravel-uygulamalarinda-webauthn-sifrelerin-sonu-mu-geliyor\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/vaultic-ile-laravel-uygulamalarinda-webauthn-sifrelerin-sonu-mu-geliyor\/","url":"https:\/\/fatihsoysal.com\/blog\/vaultic-ile-laravel-uygulamalarinda-webauthn-sifrelerin-sonu-mu-geliyor\/","name":"Vaultic ile Laravel Uygulamalar\u0131nda WebAuthn: \u015eifrelerin Sonu mu Geliyor? - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2026-05-03T06:00:45+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/vaultic-ile-laravel-uygulamalarinda-webauthn-sifrelerin-sonu-mu-geliyor\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/vaultic-ile-laravel-uygulamalarinda-webauthn-sifrelerin-sonu-mu-geliyor\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/vaultic-ile-laravel-uygulamalarinda-webauthn-sifrelerin-sonu-mu-geliyor\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Vaultic ile Laravel Uygulamalar\u0131nda WebAuthn: \u015eifrelerin Sonu mu Geliyor?"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/41556","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=41556"}],"version-history":[{"count":0,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/41556\/revisions"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=41556"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=41556"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=41556"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}