[java-idp-plugin-webauthn] branch main updated: JWEBAUTHN-6 - Signal an end-state from the authentication flow if user has no registered credentials

[Phil Smart]

This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-webauthn.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-webauthn.git;a=commit;h=969153e87281516f15764768d1cbf694f12ac96b

The following commit(s) were added to refs/heads/main by this push:
     new 969153e  JWEBAUTHN-6 - Signal an end-state from the authentication flow if user has no registered credentials
969153e is described below

commit 969153e87281516f15764768d1cbf694f12ac96b
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Wed Apr 17 17:13:49 2024 +0100

    JWEBAUTHN-6 - Signal an end-state from the authentication flow if user
    has no registered credentials
    
     - Add new properties
    
    https://shibboleth.atlassian.net/browse/JWEBAUTHN-6
---
 .../net/shibboleth/idp/flows/authn/WebAuthn/webauthn-beans.xml   | 4 ++--
 .../idp/plugin/authn/webauthn/conf/authn/webauthn.properties     | 9 +++++++--
 2 files changed, 9 insertions(+), 4 deletions(-)

diff --git a/webauthn-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/WebAuthn/webauthn-beans.xml b/webauthn-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/WebAuthn/webauthn-beans.xml
index 7e2c029..b93762f 100644
--- a/webauthn-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/WebAuthn/webauthn-beans.xml
+++ b/webauthn-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/authn/WebAuthn/webauthn-beans.xml
@@ -97,8 +97,8 @@
     <bean id="LookupRegisteredCredentialsFromUserHandle" scope="prototype" parent="AbstractWebAuthnAuthenticationAction"
         class="net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentialsFromUserHandle"
         p:credentialRepository-ref="shibboleth.authn.webauthn.DefaultCredentialRepository"
-        p:triggerEventOnNoCredentials="%{idp.authn.webauthn.triggerEventOnUserHandleNotRegistered:false}"
-        p:noCredentialsEventId="%{idp.authn.webauthn.userHandleNotRegisteredEventId:UserHandleNotRegistered}"/>        
+        p:triggerEventOnNoCredentials="%{idp.authn.webauthn.triggerEventOnNoCredentialsRegisteredForUserHandle:false}"
+        p:noCredentialsEventId="%{idp.authn.webauthn.userHandleNoRegisteredCredentialsEventId:NoCredentialsRegisteredForUserHandle}"/>        
 
     <bean id="ValidateWebAuthnAssertion" scope="prototype"
         class="net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion"
diff --git a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
index c95b94b..078288f 100644
--- a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
+++ b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
@@ -88,9 +88,14 @@ idp.authn.webauthn.metadata.crls = classpath:/net/shibboleth/idp/plugin/authn/we
 # Force second factor even if no acceptable previous factors ran
 #idp.authn.webauthn.2fa.forceSecondFactorFlow = false
 
-## Display debug information about the registration and authentication ceremony on their respective views?
+# Display debug information about the registration and authentication ceremony on their respective views?
 #idp.authn.webauthn.ui.debug = false
 
-## Should an event be built if there are no credentials found?
+# Should an event be built if there are no credentials found? Only applicable to passwordless authentication.
 #idp.authn.webauthn.triggerEventOnNoCredentials = false
 #idp.authn.webauthn.noCredentialsEventId = NoRegisteredWebAuthnCredentials
+
+# Should a custom event be built of the userHandle supplied by the authenticator during authentication does not related
+# to any registered credentials? 
+#idp.authn.webauthn.triggerEventOnNoCredentialsRegisteredForUserHandle = false
+#idp.authn.webauthn.userHandleNoRegisteredCredentialsEventId = NoCredentialsRegisteredForUserHandle

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.