[java-idp-plugin-webauthn] branch main updated: Create a valid authentication flow descriptor
Phil Smart
philip.smart at jisc.ac.uk
Fri Oct 20 13:18:44 UTC 2023
This is an automated email from the git hooks/post-receive script.
philsmart pushed a commit to branch main
in repository java-idp-plugin-webauthn.
View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-webauthn.git;a=commit;h=357d6d802260e981c2b92aaa39b34a1dd16b123a
The following commit(s) were added to refs/heads/main by this push:
new 357d6d8 Create a valid authentication flow descriptor
357d6d8 is described below
commit 357d6d802260e981c2b92aaa39b34a1dd16b123a
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Fri Oct 20 14:18:37 2023 +0100
Create a valid authentication flow descriptor
---
.../META-INF/net.shibboleth.idp/postconfig.xml | 27 +++++++++++-----------
1 file changed, 14 insertions(+), 13 deletions(-)
diff --git a/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml b/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
index 958baf7..dd18f8b 100644
--- a/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
+++ b/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
@@ -14,19 +14,19 @@
The default template shows an incomplete example authentication flow descriptor which can be
removed if not needed
-->
-
+
<bean id="authn/WebAuthn" parent="shibboleth.AuthenticationFlow"
- p:order="%{xxx.order:1000}"
- p:nonBrowserSupported="%{xxx.nonBrowserSupported:true}"
- p:passiveAuthenticationSupported="%{xxx.passiveAuthenticationSupported:true}"
- p:forcedAuthenticationSupported="%{xxx.forcedAuthenticationSupported:true}"
- p:proxyRestrictionsEnforced="%{xxx.proxyRestrictionsEnforced:%{idp.authn.enforceProxyRestrictions:true}}"
- p:proxyScopingEnforced="%{xxx.proxyScopingEnforced:false}"
- p:discoveryRequired="%{xxx.discoveryRequired:false}"
- p:lifetime="%{xxx.lifetime:%{idp.authn.defaultLifetime:PT1H}}"
- p:inactivityTimeout="%{xxx.inactivityTimeout:%{idp.authn.defaultTimeout:PT30M}}"
- p:reuseCondition-ref="#{'%{xxx.reuseCondition:shibboleth.Conditions.TRUE}'.trim()}"
- p:activationCondition-ref="#{'%{xxx.activationCondition:shibboleth.Conditions.TRUE}'.trim()}">
+ p:order="%{idp.authn.webauthn.order:1000}"
+ p:nonBrowserSupported="%{idp.authn.webauthn.nonBrowserSupported:false}"
+ p:passiveAuthenticationSupported="%{idp.authn.webauthn.passiveAuthenticationSupported:true}"
+ p:forcedAuthenticationSupported="%{idp.authn.webauthn.forcedAuthenticationSupported:true}"
+ p:proxyRestrictionsEnforced="%{idp.authn.webauthn.proxyRestrictionsEnforced:%{idp.authn.enforceProxyRestrictions:true}}"
+ p:proxyScopingEnforced="%{idp.authn.webauthn.proxyScopingEnforced:false}"
+ p:discoveryRequired="%{idp.authn.webauthn.discoveryRequired:false}"
+ p:lifetime="%{idp.authn.webauthn.lifetime:%{idp.authn.defaultLifetime:PT1H}}"
+ p:inactivityTimeout="%{idp.authn.webauthn.inactivityTimeout:%{idp.authn.defaultTimeout:PT30M}}"
+ p:reuseCondition-ref="#{'%{idp.authn.webauthn.reuseCondition:shibboleth.Conditions.TRUE}'.trim()}"
+ p:activationCondition-ref="#{'%{idp.authn.webauthn.activationCondition:shibboleth.Conditions.TRUE}'.trim()}">
<property name="supportedPrincipals">
<list>
<bean parent="shibboleth.SAML2AuthnContextClassRef"
@@ -37,8 +37,9 @@
</property>
<property name="supportedPrincipalsByString">
<bean parent="shibboleth.CommaDelimStringArray"
- c:_0="#{'%{xxx.supportedPrincipals:}'.trim()}" />
+ c:_0="#{'%{idp.authn.webauthn.supportedPrincipals:}'.trim()}" />
</property>
</bean>
+
</beans>
\ No newline at end of file
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list