[java-idp-plugin-webauthn] branch main updated: JWEBAUTHN-16 - Add auditing

[Phil Smart]

This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-webauthn.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-webauthn.git;a=commit;h=a9e860c190f05a5fa3d7afb4205377bd5da22129

The following commit(s) were added to refs/heads/main by this push:
     new a9e860c  JWEBAUTHN-16 - Add auditing
a9e860c is described below

commit a9e860c190f05a5fa3d7afb4205377bd5da22129
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Tue Jul 2 14:32:30 2024 +0100

    JWEBAUTHN-16 - Add auditing
    
            - Add basic audit support for the admin flows.
            - Probably need auditing for each action as well e.g. add credential,
    remove etc.
    
    https://shibboleth.atlassian.net/browse/JWEBAUTHN-16
---
 .../idp/flows/admin/webauthn-management/webauthn-management-flow.xml     | 1 +
 .../idp/flows/admin/webauthn-registration/webauthn-registration-flow.xml | 1 +
 2 files changed, 2 insertions(+)

diff --git a/webauthn-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/admin/webauthn-management/webauthn-management-flow.xml b/webauthn-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/admin/webauthn-management/webauthn-management-flow.xml
index c13fd7d..5bd1d36 100644
--- a/webauthn-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/admin/webauthn-management/webauthn-management-flow.xml
+++ b/webauthn-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/admin/webauthn-management/webauthn-management-flow.xml
@@ -96,6 +96,7 @@
     <end-state id="ManagementComplete" view="webauthn/webauthn-end">
          <on-entry>
             <evaluate expression="environment" result="requestScope.environment" />
+            <evaluate expression="WriteAuditLog" />
             <evaluate expression="opensamlProfileRequestContext" result="requestScope.profileRequestContext" />
             <evaluate expression="opensamlProfileRequestContext.getSubcontext(T(net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext))" result="requestScope.webauthnRegContext" />
             <evaluate expression="flowRequestContext.getActiveFlow().getApplicationContext().getBean('WebAuthnCSPDigester')" result="requestScope.cspDigester" />
diff --git a/webauthn-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/admin/webauthn-registration/webauthn-registration-flow.xml b/webauthn-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/admin/webauthn-registration/webauthn-registration-flow.xml
index a52038c..02cec12 100644
--- a/webauthn-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/admin/webauthn-registration/webauthn-registration-flow.xml
+++ b/webauthn-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/admin/webauthn-registration/webauthn-registration-flow.xml
@@ -118,6 +118,7 @@
     <end-state id="RegistrationComplete" view="webauthn/webauthn-end">
          <on-entry>
             <evaluate expression="environment" result="requestScope.environment" />
+            <evaluate expression="WriteAuditLog" />
             <evaluate expression="opensamlProfileRequestContext" result="requestScope.profileRequestContext" />
             <evaluate expression="opensamlProfileRequestContext.getSubcontext(T(net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext))" result="requestScope.webauthnRegContext" />
             <evaluate expression="flowRequestContext.getActiveFlow().getApplicationContext().getBean('WebAuthnCSPDigester')" result="requestScope.cspDigester" />

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.