[java-idp-plugin-webauthn] branch main updated: Re-order properties in the properties file
Phil Smart
philip.smart at jisc.ac.uk
Thu Aug 15 16:10:28 UTC 2024
This is an automated email from the git hooks/post-receive script.
philsmart pushed a commit to branch main
in repository java-idp-plugin-webauthn.
View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-webauthn.git;a=commit;h=015ac85ab2b4806e0b6195f197da7b6ff12bfeb0
The following commit(s) were added to refs/heads/main by this push:
new 015ac85 Re-order properties in the properties file
015ac85 is described below
commit 015ac85ab2b4806e0b6195f197da7b6ff12bfeb0
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Thu Aug 15 17:10:25 2024 +0100
Re-order properties in the properties file
---
.../META-INF/net.shibboleth.idp/postconfig.xml | 2 +-
.../webauthn-management-beans.xml | 2 +-
.../authn/webauthn/conf/authn/webauthn.properties | 76 ++++++++++++----------
3 files changed, 43 insertions(+), 37 deletions(-)
diff --git a/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml b/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
index c2f51f0..de75f02 100644
--- a/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
+++ b/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
@@ -60,7 +60,7 @@
<!-- Admim flow for admins to manage user credential registrations -->
<bean parent="shibboleth.AdminFlow"
- c:id="http://shibboleth.net/ns/profiles/webauthn/manage-credentials"
+ c:id="http://shibboleth.net/ns/profiles/admin/webauthn/manage-credentials"
p:loggingId="%{idp.authn.webauthn.admin.management.logging:WebAuthnCredentialManagement}"
p:policyName="%{idp.authn.webauthn.admin.management.accessPolicy:AccessByAdminUser}"
p:nonBrowserSupported="false"
diff --git a/webauthn-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/admin/webauthn-management/webauthn-management-beans.xml b/webauthn-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/admin/webauthn-management/webauthn-management-beans.xml
index b6f7ba3..9f09525 100644
--- a/webauthn-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/admin/webauthn-management/webauthn-management-beans.xml
+++ b/webauthn-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/admin/webauthn-management/webauthn-management-beans.xml
@@ -10,7 +10,7 @@
default-init-method="initialize" default-destroy-method="destroy">
<bean id="shibboleth.AdminProfileId" class="java.lang.String"
- c:_0="http://shibboleth.net/ns/profiles/webauthn/manage-credentials" />
+ c:_0="http://shibboleth.net/ns/profiles/admin/webauthn/manage-credentials" />
<!-- Flow Functions -->
diff --git a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
index fa032a2..5d2ac0f 100644
--- a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
+++ b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
@@ -45,8 +45,12 @@ idp.authn.webauthn.supportedPrincipals = \
#idp.authn.webauthn.admin.registration.accessPolicy = AccessByCurrentUser
# Restrict the usable authentication flows
#idp.authn.webauthn.admin.registration.authenticationFlows =
-# Should user.id and display name be resolve from the attribute resolver?
+# If you want to resolve user.id and display name from the attribute resolver, this must be true
#idp.authn.webauthn.admin.registration.resolveIdentityAttributes = true;
+# Which authentication flows to require
+#idp.authn.webauthn.admin.registration.defaultAuthenticationMethods =
+# The flow logging ID
+#idp.authn.webauthn.admin.registration.logging = WebAuthnCredentialRegistration
# The bean name of the user.id generator or lookup strategy
#idp.authn.webauthn.registration.userid.strategy = shibboleth.authn.webauthn.RandomUserIdGenerator
@@ -58,24 +62,6 @@ idp.authn.webauthn.supportedPrincipals = \
# If using the attribute context lookup strategy, which attribute should the user.displayName be taken from
#idp.authn.webauthn.registration.displayname.attributeId = mail
-# Enable FIDO Alliance metadata? If you want to use the metadata service, you *must* download and set the trust root and the legal blob file headers
-#idp.authn.webauthn.metadata.enabled = false
-#idp.authn.webauthn.metadata.trustRootFile =
-#idp.authn.webauthn.metadata.expectedLegalHeaders = Retrieval and use of this BLOB indicates acceptance of the appropriate agreement located at https://fidoalliance.org/metadata/metadata-legal-terms/
-# Downloaded CRLs to check metadata signature revocation status.
-#idp.authn.webauthn.metadata.crls = file://
-
-
-## If you want to download the metadata from a URL when the IdP starts, you must specify a cache file (.bin) and the URL to fetch the metadata
-#idp.authn.webauthn.metadata.cacheFile =
-#idp.authn.webauthn.metadata.metadataBlobUrl = https://mds3.fidoalliance.org
-
-## If you want to load the metadata from a file *only*, set the metadata blob file location. This will override the metadataBlobUrl property
-#idp.authn.webauthn.metadata.metadataBlobFile =
-
-# Which authentication flows to require
-#idp.authn.webauthn.admin.registration.defaultAuthenticationMethods =
-
# Require a resident/discoverable key (passkey) to be created when registering a credential. One-of 'discouraged', 'preferred', 'required'
#idp.authn.webauthn.registration.residentKey = preferred
@@ -104,30 +90,28 @@ idp.authn.webauthn.supportedPrincipals = \
#idp.authn.webauthn.registration.audit.category = Shibboleth-Audit.WebAuthnRegistration
#idp.authn.webauthn.registration.audit.format = %a|%T|%u|%WebAuthnAdminAO|%WebAuthnAdminAction|%WebAuthnAdminCR|%WebAuthnAdminCA|%WebAuthnAdminAU|%UA
+#### FIDO Metadata
-#### Administrator properties
+# Enable FIDO Alliance metadata? If you want to use the metadata service, you *must* download and set the trust root and the legal blob file headers
+#idp.authn.webauthn.metadata.enabled = false
+#idp.authn.webauthn.metadata.trustRootFile =
+#idp.authn.webauthn.metadata.expectedLegalHeaders = Retrieval and use of this BLOB indicates acceptance of the appropriate agreement located at https://fidoalliance.org/metadata/metadata-legal-terms/
+# Downloaded CRLs to check metadata signature revocation status.
+#idp.authn.webauthn.metadata.crls = file://
-#idp.authn.webauthn.admin.management.logging = WebAuthnCredentialManagement
-#idp.authn.webauthn.admin.management.accessPolicy = AccessByAdmin
-#idp.authn.webauthn.admin.management.resolveAttributes = false
-#idp.authn.webauthn.admin.management.authenticationFlows =
-#idp.authn.webauthn.admin.management.postAuthenticationFlows =
-#idp.authn.webauthn.admin.management.defaultAuthenticationMethods = saml2/http://example.org/ac/classes/mfa
-#idp.authn.webauthn.admin.management.authenticated = true
+## If you want to download the metadata from a URL when the IdP starts, you must specify a cache file (.bin) and the URL to fetch the metadata
+#idp.authn.webauthn.metadata.cacheFile =
+#idp.authn.webauthn.metadata.metadataBlobUrl = https://mds3.fidoalliance.org
-#idp.authn.webauthn.admin.management.genericMessageID =
-#idp.authn.webauthn.admin.management.infoMessageFunction = DefaultAdminInfoMessageFunction
-#idp.authn.webauthn.admin.management.errorMessageFunction = DefaultAdminErrorMessageFunction
-#idp.authn.webauthn.admin.management.audit.enabled = false
-#idp.authn.webauthn.admin.management.audit.format = %a|%T|%u|%WebAuthnAdminAO|%WebAuthnAdminAction|%WebAuthnAdminCR|%WebAuthnAdminAU|%UA
-#idp.authn.webauthn.admin.management.audit.category = Shibboleth-Audit.WebAuthnManagment
+## If you want to load the metadata from a file *only*, set the metadata blob file location. This will override the metadataBlobUrl property
+#idp.authn.webauthn.metadata.metadataBlobFile =
#### Authentication properties
# Which type of flow is supported? Usernameless or passwordless
#idp.authn.webauthn.usernameless.enabled = false
-# Enable this flow to act as a second factor. For example, after a password flow and only requiring a simple user gesture (user presence check)
+# Enable this flow to act as a second factor.
#idp.authn.webauthn.2fa.enabled = false
# Which previous factors are acceptable to allow the WebAuthn flow to act as a second factor of authentication e.g. authn/Password.
@@ -136,7 +120,7 @@ idp.authn.webauthn.supportedPrincipals = \
# Force second factor even if no acceptable previous factors ran
#idp.authn.webauthn.2fa.forceSecondFactorFlow = false
-# Should we update an authenticators signature count with the credential repository after each successful authentication?
+# Should we update an authenticators signature counter inside the credential repository after each successful authentication?
#idp.authn.webauthn.updateSignatureCount = true
# Should an event be built if there are no credentials found? Only applicable to passwordless authentication.
@@ -153,5 +137,27 @@ idp.authn.webauthn.supportedPrincipals = \
#idp.authn.webauthn.passwordless.username.lowercase = false
#idp.authn.webauthn.passwordless.username.trim = false
+# Audit
+#idp.authn.webauthn.audit.enabled = false
+
+#### Administrator properties for managing user credentials
+
+#idp.authn.webauthn.admin.management.logging = WebAuthnCredentialManagement
+#idp.authn.webauthn.admin.management.accessPolicy = AccessByAdmin
+#idp.authn.webauthn.admin.management.resolveAttributes = false
+#idp.authn.webauthn.admin.management.authenticationFlows =
+#idp.authn.webauthn.admin.management.postAuthenticationFlows =
+#idp.authn.webauthn.admin.management.defaultAuthenticationMethods = saml2/http://example.org/ac/classes/mfa
+#idp.authn.webauthn.admin.management.authenticated = true
+
+#idp.authn.webauthn.admin.management.genericMessageID =
+#idp.authn.webauthn.admin.management.infoMessageFunction = DefaultAdminInfoMessageFunction
+#idp.authn.webauthn.admin.management.errorMessageFunction = DefaultAdminErrorMessageFunction
+#idp.authn.webauthn.admin.management.audit.enabled = false
+#idp.authn.webauthn.admin.management.audit.format = %a|%T|%u|%WebAuthnAdminAO|%WebAuthnAdminAction|%WebAuthnAdminCR|%WebAuthnAdminAU|%UA
+#idp.authn.webauthn.admin.management.audit.category = Shibboleth-Audit.WebAuthnManagment
+
+#### Debugging
+
# Display debug information about the registration and authentication ceremony on their respective views?
#idp.authn.webauthn.ui.debug = false
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list