[java-idp-plugin-webauthn] branch main updated: Add authenticationFlows property to admin flow

Phil Smart philip.smart at jisc.ac.uk
Thu Mar 7 15:21:53 UTC 2024


This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-webauthn.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-webauthn.git;a=commit;h=874533959593eedd59ea0b2e0dff9e4661d3da7b

The following commit(s) were added to refs/heads/main by this push:
     new 8745339  Add authenticationFlows property to admin flow
8745339 is described below

commit 874533959593eedd59ea0b2e0dff9e4661d3da7b
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Thu Mar 7 15:21:50 2024 +0000

    Add authenticationFlows property to admin flow
---
 .../src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml     | 4 ++++
 .../idp/plugin/authn/webauthn/conf/authn/webauthn.properties          | 4 ++++
 2 files changed, 8 insertions(+)

diff --git a/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml b/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
index 0d4ce9a..9047d51 100644
--- a/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
+++ b/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
@@ -50,6 +50,10 @@
             p:policyName="%{idp.authn.webauthn.admin.registration.accessPolicy:AccessByIPAddress}"
             p:nonBrowserSupported="false"
             p:authenticated="true">
+        <property name="authenticationFlows">
+           <bean parent="shibboleth.CommaDelimStringArray"
+             c:_0="#{'%{idp.authn.webauthn.admin.registration.authenticationFlows:}'.trim()}" />
+        </property>
         <property name="postAuthenticationFlows">
             <bean parent="shibboleth.CommaDelimStringArray"
                 c:_0="#{'%{idp.authn.webauthn.admin.registration.postAuthenticationFlows:}'.trim()}" />
diff --git a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
index 73d61bd..00d669b 100644
--- a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
+++ b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
@@ -21,6 +21,10 @@ idp.authn.webauthn.supportedPrincipals = \
     saml2/http://example.org/ac/classes/mfa, \
     saml1/http://example.org/ac/classes/mfa
 
+# Access policy for the registration flow
+#idp.authn.webauthn.admin.registration.accessPolicy = 
+# Restrict the usable authentication flows
+#idp.authn.webauthn.admin.registration.authenticationFlows = 
 
 # An override of origins this RP allows in a responses from an authenticator
 #idp.authn.webauthn.origins = https://localhost

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list