You might want to look into the new web authentication API.