[java-idp-plugin-webauthn] branch main updated: Change client-side credential storage from a violation to a warning

[Phil Smart]

This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-webauthn.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-webauthn.git;a=commit;h=64b11af75022cbb64b4be1ae15aee197add4acc5

The following commit(s) were added to refs/heads/main by this push:
     new 64b11af  Change client-side credential storage from a violation to a warning
64b11af is described below

commit 64b11af75022cbb64b4be1ae15aee197add4acc5
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Thu Apr 18 15:55:14 2024 +0100

    Change client-side credential storage from a violation to a warning
---
 .../storage/impl/IdPStorageServiceCredentialRespository.java         | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/webauthn-impl/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/storage/impl/IdPStorageServiceCredentialRespository.java b/webauthn-impl/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/storage/impl/IdPStorageServiceCredentialRespository.java
index 26f8d4f..cb1fa5b 100644
--- a/webauthn-impl/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/storage/impl/IdPStorageServiceCredentialRespository.java
+++ b/webauthn-impl/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/storage/impl/IdPStorageServiceCredentialRespository.java
@@ -101,7 +101,10 @@ public class IdPStorageServiceCredentialRespository extends AbstractIdentifiable
         // Can not use client-side, as keys would not work across browsers. 
         final StorageCapabilities caps = storageService.getCapabilities();
         if (caps instanceof StorageCapabilities) {
-            Constraint.isTrue(caps.isServerSide(), "StorageService cannot be client-side");
+            if (!caps.isServerSide()) {
+                log.info("Use of client-side storage can make it difficult/impossible to transfer key registrations "
+                        + "from one browser to another, which can hinder portability");
+            }
             if (!caps.isClustered()) {
                 log.info("Use of non-clustered storage service will result in per-node lockout behavior");
             }

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.