[java-idp-plugin-webauthn] branch main updated: Create a valid authentication flow descriptor

Phil Smart philip.smart at jisc.ac.uk
Fri Oct 20 13:18:44 UTC 2023


This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-webauthn.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-webauthn.git;a=commit;h=357d6d802260e981c2b92aaa39b34a1dd16b123a

The following commit(s) were added to refs/heads/main by this push:
     new 357d6d8  Create a valid authentication flow descriptor
357d6d8 is described below

commit 357d6d802260e981c2b92aaa39b34a1dd16b123a
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Fri Oct 20 14:18:37 2023 +0100

    Create a valid authentication flow descriptor
---
 .../META-INF/net.shibboleth.idp/postconfig.xml     | 27 +++++++++++-----------
 1 file changed, 14 insertions(+), 13 deletions(-)

diff --git a/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml b/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
index 958baf7..dd18f8b 100644
--- a/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
+++ b/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
@@ -14,19 +14,19 @@
     The default template shows an incomplete example authentication flow descriptor which can be
     removed if not needed 
     -->
-  
+    
     <bean id="authn/WebAuthn" parent="shibboleth.AuthenticationFlow"
-            p:order="%{xxx.order:1000}"
-            p:nonBrowserSupported="%{xxx.nonBrowserSupported:true}"
-            p:passiveAuthenticationSupported="%{xxx.passiveAuthenticationSupported:true}"
-            p:forcedAuthenticationSupported="%{xxx.forcedAuthenticationSupported:true}"
-            p:proxyRestrictionsEnforced="%{xxx.proxyRestrictionsEnforced:%{idp.authn.enforceProxyRestrictions:true}}"
-            p:proxyScopingEnforced="%{xxx.proxyScopingEnforced:false}"
-            p:discoveryRequired="%{xxx.discoveryRequired:false}"
-            p:lifetime="%{xxx.lifetime:%{idp.authn.defaultLifetime:PT1H}}"
-            p:inactivityTimeout="%{xxx.inactivityTimeout:%{idp.authn.defaultTimeout:PT30M}}"
-            p:reuseCondition-ref="#{'%{xxx.reuseCondition:shibboleth.Conditions.TRUE}'.trim()}"
-            p:activationCondition-ref="#{'%{xxx.activationCondition:shibboleth.Conditions.TRUE}'.trim()}">
+            p:order="%{idp.authn.webauthn.order:1000}"
+            p:nonBrowserSupported="%{idp.authn.webauthn.nonBrowserSupported:false}"
+            p:passiveAuthenticationSupported="%{idp.authn.webauthn.passiveAuthenticationSupported:true}"
+            p:forcedAuthenticationSupported="%{idp.authn.webauthn.forcedAuthenticationSupported:true}"
+            p:proxyRestrictionsEnforced="%{idp.authn.webauthn.proxyRestrictionsEnforced:%{idp.authn.enforceProxyRestrictions:true}}"
+            p:proxyScopingEnforced="%{idp.authn.webauthn.proxyScopingEnforced:false}"
+            p:discoveryRequired="%{idp.authn.webauthn.discoveryRequired:false}"
+            p:lifetime="%{idp.authn.webauthn.lifetime:%{idp.authn.defaultLifetime:PT1H}}"
+            p:inactivityTimeout="%{idp.authn.webauthn.inactivityTimeout:%{idp.authn.defaultTimeout:PT30M}}"
+            p:reuseCondition-ref="#{'%{idp.authn.webauthn.reuseCondition:shibboleth.Conditions.TRUE}'.trim()}"
+            p:activationCondition-ref="#{'%{idp.authn.webauthn.activationCondition:shibboleth.Conditions.TRUE}'.trim()}">
         <property name="supportedPrincipals">
             <list>
                 <bean parent="shibboleth.SAML2AuthnContextClassRef"
@@ -37,8 +37,9 @@
         </property>
         <property name="supportedPrincipalsByString">
             <bean parent="shibboleth.CommaDelimStringArray"
-                c:_0="#{'%{xxx.supportedPrincipals:}'.trim()}" />
+                c:_0="#{'%{idp.authn.webauthn.supportedPrincipals:}'.trim()}" />
         </property>
     </bean>
+
   
 </beans>
\ No newline at end of file

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list