[java-idp-plugin-webauthn] 02/11: Add policy engine properties

Phil Smart philip.smart at jisc.ac.uk
Fri Oct 18 17:13:27 UTC 2024


This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-webauthn.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-webauthn.git;a=commit;h=746915578ed0800e43a9120fc26690929cde8447

commit 746915578ed0800e43a9120fc26690929cde8447
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Wed Oct 2 11:04:39 2024 +0100

    Add policy engine properties
---
 .../plugin/authn/webauthn/conf/authn/webauthn.properties  | 15 +++++++++++++++
 .../plugin/authn/webauthn/impl/AbstractWebAuthnTest.java  |  2 +-
 2 files changed, 16 insertions(+), 1 deletion(-)

diff --git a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
index b1f36eb..7e42482 100644
--- a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
+++ b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
@@ -82,6 +82,21 @@ idp.authn.webauthn.supportedPrincipals = \
 # State the preference of the IdP during registration to receive an authenticator attestation. One-of 'none', 'indirect', 'direct', or 'enterprise'.
 #idp.authn.webauthn.registration.attestationConveyancePreference = none
 
+# Enable the authenticator policy engine?
+#idp.authn.webauthn.registration.authenticator.policy.enabled = false
+# Set the authenticator policy to use, defaults to a chained set of policies
+#idp.authn.webauthn.registration.authenticator.policy = shibboleth.authn.webauthn.registration.ChainedAuthenticatorPolicy
+# When using the chained policy, give the name of the list of policies
+#idp.authn.webauthn.registration.authenticator.policy.chainedlist = shibboleth.authn.webauthn.registration.ChainedAuthenticatorPolicies
+# When using the default chained policy, enabled the allowed authenticators policy?
+#idp.authn.webauthn.registration.authenticator.policy.allowedAuthenticators.enabled = true
+# When using the default chained policy, give a comma seperated list of allowed authenticator attestation GUIDs (AAGUID)
+#idp.authn.webauthn.registration.authenticator.policy.allowedAuthenticators = 
+# When using the default chained policy, should we enable the 'authenticator capabilities' policy
+#idp.authn.webauthn.registration.authenticator.policy.authenticatorCapabilities.enabled = true
+# When the 'authenticator capabilities' policy is enabled, which policy bean should be applied
+#idp.authn.webauthn.registration.authenticator.policy.authenticatorCapabilities = shibboleth.authn.webauthn.registration.authenticator.policy.AuthenticatorGetInfoUVCapable
+
 # Allow inline self-enrolment 
 #idp.authnwebauthn.registration.allowInline = true
 
diff --git a/webauthn-impl/src/test/java/net/shibboleth/idp/plugin/authn/webauthn/impl/AbstractWebAuthnTest.java b/webauthn-impl/src/test/java/net/shibboleth/idp/plugin/authn/webauthn/impl/AbstractWebAuthnTest.java
index adb2a09..5ac1fe1 100644
--- a/webauthn-impl/src/test/java/net/shibboleth/idp/plugin/authn/webauthn/impl/AbstractWebAuthnTest.java
+++ b/webauthn-impl/src/test/java/net/shibboleth/idp/plugin/authn/webauthn/impl/AbstractWebAuthnTest.java
@@ -63,7 +63,7 @@ import net.shibboleth.idp.plugin.authn.webauthn.context.BaseWebAuthnContext;
 import net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnAuthenticationContext;
 import net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnManagementContext;
 import net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext;
-import net.shibboleth.idp.plugin.authn.webauthn.metadata.FidoMetadataServiceFactory;
+import net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory;
 import net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRegistration;
 import net.shibboleth.idp.plugin.authn.webauthn.storage.WebAuthnCredentialRepository;
 import net.shibboleth.idp.plugin.authn.webauthn.storage.impl.InMemoryRegistrationStorage;

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.


More information about the commits mailing list