[java-idp-plugin-webauthn] branch main updated: Improve default properties config

[Phil Smart]

This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-webauthn.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-webauthn.git;a=commit;h=7bde8fcec3110e5dd11c14e2689f071806b49f86

The following commit(s) were added to refs/heads/main by this push:
     new 7bde8fc  Improve default properties config
7bde8fc is described below

commit 7bde8fcec3110e5dd11c14e2689f071806b49f86
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Mon Feb 12 10:56:53 2024 +0000

    Improve default properties config
---
 .../authn/webauthn/conf/authn/webauthn.properties  | 64 +++++++++++++---------
 1 file changed, 37 insertions(+), 27 deletions(-)

diff --git a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
index aadccd2..243f737 100644
--- a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
+++ b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
@@ -1,36 +1,46 @@
-## WebAuthn relying party setup
-### The relying party ID. Must be a valid domain string.
-### A public key credential is only registered and valid for a single relying party ID.
+# The relying party ID. Must be a valid domain string. A public key credential is only registered and valid for a single relying party ID.
 idp.authn.webauthn.relyingPartyId = localhost
+
+# A human-palatable name of the Relaying Party
 idp.authn.webauthn.relyingPartyName = Shibboleth
-## Allow any port on that origin
-idp.authn.webauthn.allowOriginPort = true
-## Allow any subdomain of that origin
-idp.authn.webauthn.allowOriginSubdomain = false
-## An override of origins this RP allows in a response from an authenticator
+
+# Allow any port on that origin
+#idp.authn.webauthn.allowOriginPort = false
+
+# Allow any subdomain of that origin
+#idp.authn.webauthn.allowOriginSubdomain = false
+
+# An override of origins this RP allows in a responses from an authenticator
 #idp.authn.webauthn.origins = https://localhost
 
+### The storage service to use as a credential repository
+#idp.authn.webauthn.StorageService = shibboleth.StorageService
+
 ## Which type of flow is supported? Usernameless or passwordless
-# idp.authn.webauthn.usernameless.enabled = false
-
-## Registration properties.
-### Require a residentKey to be created when registering a credential. One-of 'discouraged', 'preferred', 'required'
-# idp.authn.webauthn.registration.residentKey = preferred
-### The authenticatorAttachment requirement. One-of 'any', 'cross-platform', or 'platform'. 
-# idp.authn.webauthn.registration.authenticatorAttachment = any
-### Require User Verification
-# idp.authn.webauthn.registration.userVerification = discouraged
-### State the preference of the IdP during registration to receive an authenticator attestation. One-of 'none', 
-### 'indirect', 'direct', or 'enterprise'.
-idp.authn.webauthn.registration.attestationConveyancePreference = direct
-
-## Settings for allowing 2FA usage of the WebAuthn flow.
-idp.authn.webauthn.2fa.allowedPreviousFactors = authn/Password
-### Force second factor even if no acceptable previous factor
-#idp.authn.webauthn.2fa.forceSecondFactorFlow = false
-### Deny second factor irrespective of the value of forceSecondFactorFlow and if an acceptable previous factor is found
-### Effectively turning off its ability to act as a second factor only
+#idp.authn.webauthn.usernameless.enabled = false
+
+# Registration properties.
+
+# Require a residentKey (passkey) to be created when registering a credential. One-of 'discouraged', 'preferred', 'required'
+#idp.authn.webauthn.registration.residentKey = preferred
+
+# The authenticator attachment (authenticator type) requirement. One-of 'any', 'cross-platform', or 'platform'. 
+#idp.authn.webauthn.registration.authenticatorAttachment = any
+
+# Require User Verification on registration
+#idp.authn.webauthn.registration.userVerification = discouraged
+
+# State the preference of the IdP during registration to receive an authenticator attestation. One-of 'none', 'indirect', 'direct', or 'enterprise'.
+#idp.authn.webauthn.registration.attestationConveyancePreference = none
+
+# Enable this flow to act as a second factor. For example, after a password flow and only requiring a simple user gesture (user presence check)
 #idp.authn.webauthn.2fa.enabled = false
 
+# Which previous factors are acceptable to allow the WebAuthn flow to act as a second factor of authentication e.g. authn/Password.
+#idp.authn.webauthn.2fa.allowedPreviousFactors =
+
+# Force second factor even if no acceptable previous factors ran
+#idp.authn.webauthn.2fa.forceSecondFactorFlow = false
+
 ## Display debug information about the registration and authentication ceremony on their respective views?
 #idp.authn.webauthn.ui.debug = false
\ No newline at end of file

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.