[java-idp-plugin-webauthn] branch main updated (fff5f5d -> 481a82f)
Phil Smart
philip.smart at jisc.ac.uk
Fri Oct 18 17:13:25 UTC 2024
This is an automated email from the git hooks/post-receive script.
philsmart pushed a change to branch main
in repository java-idp-plugin-webauthn.
from fff5f5d Move Icon column to the other side of the Authenticator column
new 12956a3 JWEBAUTHN-27 - Add basic authenticator policy
new 7469155 Add policy engine properties
new f6b0489 JWEBAUTHN-27 - Add basic authenticator policy
new 0014619 JWEBAUTHN-27 - Add basic authenticator policy
new ea9ddcd Add length check to aaguid before metadata lookup
new 9f105b3 JWEBAUTHN-27 - Add basic authenticator policy
new b78a280 Rename authenticator policy outcome to ACCEPT from ALLOW
new 2f7a753 Separate registration and metadata properties from authentication
new 9896204 Temporarily remove unusable UV capabilities authenticator policy
new d7b322e JWEBAUTHN-27 - Add basic authenticator policy
new 481a82f JWEBAUTHN-27 - Add basic authenticator policy
The 11 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
.../policy/AuthenticatorCapabilitiesInspector.java | 47 ++++++
.../webauthn/admin/policy/AuthenticatorPolicy.java | 64 ++++++++
.../{client => admin/policy}/package-info.java | 4 +-
.../authn/webauthn/authn/AssertionResult.java | 2 +-
.../authn/webauthn/authn/AuthenticatorSupport.java | 64 ++++++++
.../authn/WebAuthnAuthenticationEventIds.java | 4 +
.../webauthn/context/InlineEnrolmentContext.java | 2 +
.../context/WebAuthnAuthenticationContext.java | 26 ++++
.../context/WebAuthnRegistrationContext.java | 36 +++++
...ava => WebAuthnErrorMessageLookupFunction.java} | 17 ++-
.../authn/webauthn/metadata/AaguidEntry.java | 8 +-
.../{client => metadata}/package-info.java | 4 +-
.../authn/webauthn/policy/CredentialPolicy.java | 63 ++++++++
.../webauthn/{client => policy}/package-info.java | 4 +-
.../webauthn/storage/CredentialRegistration.java | 56 ++++++-
.../storage/WebAuthnCredentialRepository.java | 12 ++
.../impl/AttachAuthenticatorCapabilities.java | 124 +++++++++++++++
...Response.java => CheckAuthenticatorPolicy.java} | 127 +++++++++-------
.../admin/impl/LookupCredentialsForUser.java | 7 +-
.../admin/impl/PopulateInlineEnrolmentContext.java | 11 +-
.../admin/impl/StorePublicKeyCredential.java | 51 ++++---
...AbstractAuthenticatorCapabilitiesInspector.java | 121 +++++++++++++++
.../impl/AbstractAuthenticatorPolicyRule.java | 124 +++++++++++++++
.../policy/impl/AllowlistAuthenticatorPolicy.java | 78 ++++++++++
.../impl/AuthenticatorCapabilitiesPolicyRule.java | 88 +++++++++++
.../policy/impl/AuthenticatorGetInfoUVCapable.java | 62 ++++++++
...ChainingAuthenticatorCapabilitiesInspector.java | 89 +++++++++++
.../impl/ChainingAuthenticatorPolicyRule.java | 103 +++++++++++++
.../impl/FunctionalAuthenticatorInspectorRule.java | 69 +++++++++
.../impl/FunctionalAuthenticatorPolicyRule.java | 65 ++++++++
.../SecondFactorOnlyAuthenticatorInspector.java | 89 +++++++++++
.../webauthn/admin/policy/impl}/package-info.java | 4 +-
.../authn/webauthn/impl/CheckCredentialPolicy.java | 167 +++++++++++++++++++++
.../metadata/impl/FidoMetadataServiceFactory.java | 33 +++-
.../impl/PasskeyAaguidMetadataFactory.java | 5 +-
.../impl/PasskeyAaguidMetadataService.java | 3 +-
.../policy/impl/AbstractCredentialPolicyRule.java | 159 ++++++++++++++++++++
.../policy/impl/ChainingCredentialPolicyRule.java | 102 +++++++++++++
.../impl/FunctionalCredentialPolicyRule.java | 65 ++++++++
.../policy/impl/FunctionalRuleContext.java | 70 +++++++++
.../impl/SecondFactorOnlyCredentialPolicyRule.java | 81 ++++++++++
.../authn/webauthn/policy/impl}/package-info.java | 4 +-
.../IdPStorageServiceCredentialRespository.java | 19 +++
.../webauthn-management-beans.xml | 1 +
.../webauthn-registration-beans.xml | 32 +++-
.../webauthn-registration-flow.xml | 2 +
.../idp/flows/authn/WebAuthn/webauthn-beans.xml | 27 +++-
.../idp/flows/authn/WebAuthn/webauthn-flow.xml | 6 +
.../authn/webauthn/conf/authn/webauthn-config.xml | 9 ++
...n-config.xml => webauthn-management-config.xml} | 1 -
.../conf/authn/webauthn-registration-config.xml | 32 ++++
...properties => webauthn-registration.properties} | 107 +++----------
.../authn/webauthn/conf/authn/webauthn.properties | 119 +--------------
.../idp/plugin/authn/webauthn/messages.properties | 5 +-
.../idp/plugin/authn/webauthn/module.properties | 58 ++++---
.../plugin/authn/webauthn/views/webauthn-authn.vm | 6 +-
.../plugin/authn/webauthn/views/webauthn-end.vm | 4 +-
.../admin/impl/CheckAuthenticatorPolicyTest.java | 135 +++++++++++++++++
.../impl/AllowlistAuthenticatorPolicyTest.java | 69 +++++++++
.../AuthenticatorCapabilitiesPolicyRuleTest.java | 60 ++++++++
.../impl/ChainingAuthenticatorPolicyRuleTest.java | 146 ++++++++++++++++++
.../webauthn/flow/AbstractWebAuthnFlowTest.java | 20 +++
.../webauthn/flow/TestAdminManagementFlow.java | 2 +-
.../authn/webauthn/flow/TestPasswordlessFlow.java | 2 +-
.../authn/webauthn/flow/TestRegistrationFlow.java | 2 +-
.../authn/webauthn/flow/TestSecondFactorFlow.java | 2 +-
.../authn/webauthn/flow/TestUsernameslessFlow.java | 2 +-
...w.java => TestUsernameslessFlowWithPolicy.java} | 46 +++---
...hnEnvironmentApplicationContextInitializer.java | 2 +-
...ssWithPolicyApplicationContextInitializer.java} | 6 +-
.../authn/webauthn/impl/AbstractWebAuthnTest.java | 33 +++-
.../impl/ChainingCredentialPolicyRuleTest.java | 143 ++++++++++++++++++
.../SecondFactorOnlyCredentialPolicyRuleTest.java | 67 +++++++++
.../storage/impl/InMemoryRegistrationStorage.java | 12 ++
...{logback-webauthn-test.xml => logback-test.xml} | 0
...thn-test.xml => logback-webauthn-flow-test.xml} | 0
...est-beans.xml => test-beans-authentication.xml} | 16 +-
.../{test-beans.xml => test-beans-management.xml} | 2 -
.../authn/webauthn/test-beans-registration.xml | 47 ++++++
79 files changed, 3183 insertions(+), 373 deletions(-)
create mode 100644 webauthn-api/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/admin/policy/AuthenticatorCapabilitiesInspector.java
create mode 100644 webauthn-api/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/admin/policy/AuthenticatorPolicy.java
copy webauthn-api/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/{client => admin/policy}/package-info.java (82%)
create mode 100644 webauthn-api/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/authn/AuthenticatorSupport.java
copy webauthn-api/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/context/navigate/{RegistrationErrorMessageLookupFunction.java => WebAuthnErrorMessageLookupFunction.java} (85%)
copy webauthn-api/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/{client => metadata}/package-info.java (82%)
create mode 100644 webauthn-api/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/policy/CredentialPolicy.java
copy webauthn-api/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/{client => policy}/package-info.java (82%)
create mode 100644 webauthn-impl/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/admin/impl/AttachAuthenticatorCapabilities.java
copy webauthn-impl/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/admin/impl/{ValidateAuthenticatorAttestationResponse.java => CheckAuthenticatorPolicy.java} (50%)
create mode 100644 webauthn-impl/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/admin/policy/impl/AbstractAuthenticatorCapabilitiesInspector.java
create mode 100644 webauthn-impl/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/admin/policy/impl/AbstractAuthenticatorPolicyRule.java
create mode 100644 webauthn-impl/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/admin/policy/impl/AllowlistAuthenticatorPolicy.java
create mode 100644 webauthn-impl/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/admin/policy/impl/AuthenticatorCapabilitiesPolicyRule.java
create mode 100644 webauthn-impl/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/admin/policy/impl/AuthenticatorGetInfoUVCapable.java
create mode 100644 webauthn-impl/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/admin/policy/impl/ChainingAuthenticatorCapabilitiesInspector.java
create mode 100644 webauthn-impl/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/admin/policy/impl/ChainingAuthenticatorPolicyRule.java
create mode 100644 webauthn-impl/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/admin/policy/impl/FunctionalAuthenticatorInspectorRule.java
create mode 100644 webauthn-impl/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/admin/policy/impl/FunctionalAuthenticatorPolicyRule.java
create mode 100644 webauthn-impl/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/admin/policy/impl/SecondFactorOnlyAuthenticatorInspector.java
copy {webauthn-api/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/client => webauthn-impl/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/admin/policy/impl}/package-info.java (82%)
create mode 100644 webauthn-impl/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/impl/CheckCredentialPolicy.java
create mode 100644 webauthn-impl/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/policy/impl/AbstractCredentialPolicyRule.java
create mode 100644 webauthn-impl/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/policy/impl/ChainingCredentialPolicyRule.java
create mode 100644 webauthn-impl/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/policy/impl/FunctionalCredentialPolicyRule.java
create mode 100644 webauthn-impl/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/policy/impl/FunctionalRuleContext.java
create mode 100644 webauthn-impl/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/policy/impl/SecondFactorOnlyCredentialPolicyRule.java
copy {webauthn-api/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/client => webauthn-impl/src/main/java/net/shibboleth/idp/plugin/authn/webauthn/policy/impl}/package-info.java (82%)
copy webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/{webauthn-config.xml => webauthn-management-config.xml} (99%)
create mode 100644 webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn-registration-config.xml
copy webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/{webauthn.properties => webauthn-registration.properties} (65%)
create mode 100644 webauthn-impl/src/test/java/net/shibboleth/idp/plugin/authn/webauthn/admin/impl/CheckAuthenticatorPolicyTest.java
create mode 100644 webauthn-impl/src/test/java/net/shibboleth/idp/plugin/authn/webauthn/admin/policy/impl/AllowlistAuthenticatorPolicyTest.java
create mode 100644 webauthn-impl/src/test/java/net/shibboleth/idp/plugin/authn/webauthn/admin/policy/impl/AuthenticatorCapabilitiesPolicyRuleTest.java
create mode 100644 webauthn-impl/src/test/java/net/shibboleth/idp/plugin/authn/webauthn/admin/policy/impl/ChainingAuthenticatorPolicyRuleTest.java
copy webauthn-impl/src/test/java/net/shibboleth/idp/plugin/authn/webauthn/flow/{TestPasswordlessFlow.java => TestUsernameslessFlowWithPolicy.java} (74%)
copy webauthn-impl/src/test/java/net/shibboleth/idp/plugin/authn/webauthn/flow/{TestWebAuthnUsernamelessApplicationContextInitializer.java => TestWebAuthnUsernamelessWithPolicyApplicationContextInitializer.java} (84%)
create mode 100644 webauthn-impl/src/test/java/net/shibboleth/idp/plugin/authn/webauthn/policy/impl/ChainingCredentialPolicyRuleTest.java
create mode 100644 webauthn-impl/src/test/java/net/shibboleth/idp/plugin/authn/webauthn/policy/impl/SecondFactorOnlyCredentialPolicyRuleTest.java
copy webauthn-impl/src/test/resources/{logback-webauthn-test.xml => logback-test.xml} (100%)
rename webauthn-impl/src/test/resources/{logback-webauthn-test.xml => logback-webauthn-flow-test.xml} (100%)
copy webauthn-impl/src/test/resources/net/shibboleth/idp/plugin/authn/webauthn/{test-beans.xml => test-beans-authentication.xml} (58%)
rename webauthn-impl/src/test/resources/net/shibboleth/idp/plugin/authn/webauthn/{test-beans.xml => test-beans-management.xml} (99%)
create mode 100644 webauthn-impl/src/test/resources/net/shibboleth/idp/plugin/authn/webauthn/test-beans-registration.xml
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the commits
mailing list