[java-idp-plugin-webauthn] 08/11: Separate registration and metadata properties from authentication

Phil Smart philip.smart at jisc.ac.uk
Fri Oct 18 17:13:33 UTC 2024 

This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-webauthn.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-webauthn.git;a=commit;h=2f7a7537cb3d2a3c2cd58f836b42c1fca8d41726

commit 2f7a7537cb3d2a3c2cd58f836b42c1fca8d41726
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Thu Oct 10 14:52:18 2024 +0100

    Separate registration and metadata properties from authentication
---
 ...properties => webauthn-registration.properties} |  92 +------------
 .../authn/webauthn/conf/authn/webauthn.properties  | 148 +--------------------
 .../idp/plugin/authn/webauthn/module.properties    |  50 +++----
 3 files changed, 36 insertions(+), 254 deletions(-)

diff --git a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn-registration.properties
similarity index 66%
copy from webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
copy to webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn-registration.properties
index bcc8984..0d9f432 100644
--- a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
+++ b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn-registration.properties
@@ -1,39 +1,3 @@
-#### Relying Party properties
-
-# The relying party ID. Must be a valid domain string. A public key credential is only registered and valid for a single relying party ID.
-idp.authn.webauthn.relyingPartyId = localhost
-
-# A human-palatable name of the Relying Party
-idp.authn.webauthn.relyingPartyName = Shibboleth
-
-# Allow any port on that origin
-#idp.authn.webauthn.allowOriginPort = false
-
-# Allow any subdomain of that origin
-#idp.authn.webauthn.allowOriginSubdomain = false
-
-# Allow credential registrations to be untrusted, the default. If false, this requires attestation statements from the 
-# authenticator using 'idp.authn.webauthn.registration.attestationConveyancePreference = DIRECT' and FIDO metadata is 
-# loaded and trusted.
-#idp.authn.webauthn.allowUntrustedAttestation = true
-
-# Generic flow properties to adjust behavior
-#idp.authn.webauthn.order = 1000
-#idp.authn.webauthn.forcedAuthenticationSupported = true
-# The list below should be changed to reflect whatever locally- or
-# community-defined values are appropriate to represent WebAuthn. It is
-# strongly advised that the value not be specific to WebAuthn or any
-# particular technology to avoid lock-in.
-idp.authn.webauthn.supportedPrincipals = \
-    saml2/http://example.org/ac/classes/mfa, \
-    saml1/http://example.org/ac/classes/mfa
-
-# An override of origins this RP allows in a responses from an authenticator
-#idp.authn.webauthn.origins = https://localhost
-
-# The storage service to use as a credential repository
-#idp.authn.webauthn.StorageService = shibboleth.StorageService
-
 #### Registration properties.
 
 # Should the registration process collect a username before initiating authentication?
@@ -52,6 +16,8 @@ idp.authn.webauthn.supportedPrincipals = \
 # The flow logging ID
 #idp.authn.webauthn.admin.registration.logging = WebAuthnCredentialRegistration
 
+# Resolve attributes from the attribute resolver to be used as part of a user's identity
+#idp.authn.webauthn.admin.registration.resolveAttributes = true
 # The bean name of the WebAuthn user.name lookup strategy.
 #idp.authn.webauthn.registration.name.strategy = shibboleth.authn.webauthn.SubjectContextUsernameLookupStrategy
 # If using the attribute context lookup strategy, which attribute should the user.name be taken from
@@ -108,14 +74,6 @@ idp.authn.webauthn.supportedPrincipals = \
 # When using the default chained set of inspectors, give a comma seperated list of authenticators (by attestation GUIDs (AAGUID)) to tag as only allowed for second factor authentication
 #idp.authn.webauthn.registration.authenticator.inspector.secondFactorOnlyAuthenticators =
 
-# Enable the credential/authenticator policy during authentication
-# idp.authn.webauthn.credential.policy.enabled = false
-# Set the credential repository to use, defaults to a chained set of policies
-#idp.authn.webauthn.credential.policy = shibboleth.authn.webauthn.ChainedCredentialPolicies
-# When using the default chained policy, should be enable the 'second-factor only' credential rule
-#idp.authn.webauthn.registration.authenticator.policy.secondFactorOnly.enabled = true
-
-
 # Allow inline self-enrolment 
 #idp.authnwebauthn.registration.allowInline = true
 
@@ -156,47 +114,6 @@ idp.authn.webauthn.supportedPrincipals = \
 #idp.authn.webauthn.metadata.aaguid.enabled = false
 #idp.authn.webauthn.metadata.aaguid.passkeyAaguidFile = aaguid.json
 
-#### Authentication properties
-
-# Which type of flow is supported? Usernameless or passwordless
-#idp.authn.webauthn.usernameless.enabled = false
-
-# Enable this flow to act as a second factor. 
-#idp.authn.webauthn.2fa.enabled = false
-
-# Which previous factors are acceptable to allow the WebAuthn flow to act as a second factor of authentication e.g. authn/Password.
-#idp.authn.webauthn.2fa.allowedPreviousFactors = authn/Password
-
-# Force second factor even if no acceptable previous factors ran
-#idp.authn.webauthn.2fa.forceSecondFactorFlow = false
-
-# The bean name of the username lookup strategy. By default, this comes from the principal name established by the first factor.
-#idp.authn.webauthn.2fa.username.strategy = shibboleth.authn.webauthn.CanonicalUsernameLookupStrategy
-
-# Should we update an authenticators signature counter inside the credential repository after each successful authentication?  
-#idp.authn.webauthn.updateSignatureCount = true
-
-# Should an event be built if there are no credentials found? Only applicable to passwordless authentication.
-#idp.authn.webauthn.passwordless.signalEventOnNoCredentials = false
-#idp.authn.webauthn.passwordless.noCredentialsEventId = NoRegisteredWebAuthnCredentials
-
-# Should a custom event be built if the userHandle supplied by the authenticator during authentication is not related
-# to any registered credentials? 
-#idp.authn.webauthn.signalEventOnNoCredentialsRegisteredForUserHandle = false
-#idp.authn.webauthn.userHandleNoRegisteredCredentialsEventId = NoCredentialsRegisteredForUserHandle
-
-# Basic transformations that should be applied to the username that is collected as part of the passwordless flow
-#idp.authn.webauthn.passwordless.username.uppercase = false
-#idp.authn.webauthn.passwordless.username.lowercase = false
-#idp.authn.webauthn.passwordless.username.trim = false
-
-# The ID of the bean that supplies the c14n flows that are applied to the username entered during the passwordless flow
-#idp.authn.webauthn.passwordless.c14n.postUsernameFlows = shibboleth.PostLoginSubjectCanonicalizationFlows
-
-# Audit
-#idp.authn.webauthn.audit.enabled = false
-#idp.authn.webauthn.audit.format = %a|%T|%SP|%I|%s|%AF|%CV|%u|%WebAuthnUID|%WebAuthnUV|%WebAuthnFM|%tu|%AR|%UA
-#idp.authn.webauthn.audit.category = Shibboleth-Audit.WebAuthn
 
 #### Administrator properties for managing user credentials
 
@@ -214,8 +131,3 @@ idp.authn.webauthn.supportedPrincipals = \
 #idp.authn.webauthn.admin.management.audit.enabled = false
 #idp.authn.webauthn.admin.management.audit.format = %a|%T|%u|%WebAuthnAdminAO|%WebAuthnAdminAction|%WebAuthnAdminCR|%WebAuthnAdminAU|%UA
 #idp.authn.webauthn.admin.management.audit.category = Shibboleth-Audit.WebAuthnManagment
-
-#### Debugging
-
-# Display debug information about the registration and authentication ceremony on their respective views?
-#idp.authn.webauthn.ui.debug = false
diff --git a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
index bcc8984..311a45e 100644
--- a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
+++ b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn.properties
@@ -34,130 +34,6 @@ idp.authn.webauthn.supportedPrincipals = \
 # The storage service to use as a credential repository
 #idp.authn.webauthn.StorageService = shibboleth.StorageService
 
-#### Registration properties.
-
-# Should the registration process collect a username before initiating authentication?
-#idp.authn.webauthn.registration.collectUsername = true
-
-# Does the registration page require authentication. Should always be true.
-#idp.authn.webauthn.admin.registration.authenticate = true
-# Access policy for the registration flow
-#idp.authn.webauthn.admin.registration.accessPolicy = AccessByCurrentUser
-# Restrict the usable authentication flows
-#idp.authn.webauthn.admin.registration.authenticationFlows =
-# If you want to resolve user.id and display name from the attribute resolver, this must be true
-#idp.authn.webauthn.admin.registration.resolveIdentityAttributes = true;
-# Which authentication flows to require
-#idp.authn.webauthn.admin.registration.defaultAuthenticationMethods =
-# The flow logging ID
-#idp.authn.webauthn.admin.registration.logging = WebAuthnCredentialRegistration
-
-# The bean name of the WebAuthn user.name lookup strategy.
-#idp.authn.webauthn.registration.name.strategy = shibboleth.authn.webauthn.SubjectContextUsernameLookupStrategy
-# If using the attribute context lookup strategy, which attribute should the user.name be taken from
-#idp.authn.webauthn.registration.name.attributeId = WebAuthnUsername
-
-# The bean name of the user.id generator or lookup strategy
-#idp.authn.webauthn.registration.userid.strategy = shibboleth.authn.webauthn.RandomUserIdGenerator
-# If using the attribute context lookup strategy, which attribute should the user.id be taken from
-#idp.authn.webauthn.registration.userid.attributeId = WebAuthnUserID
-
-# The bean name of the user.displayName lookup strategy
-#idp.authn.webauthn.registration.displayname.strategy = shibboleth.authn.webauthn.SubjectContextDisplayNameLookupStrategy
-# If using the attribute context lookup strategy, which attribute should the user.displayName be taken from
-#idp.authn.webauthn.registration.displayname.attributeId = mail
-
-# Require a resident/discoverable key (passkey) to be created when registering a credential. One-of 'discouraged', 'preferred', 'required'
-#idp.authn.webauthn.registration.residentKey = preferred
-
-# Preferred set of COSE signature algorithms which a created credential will use. The sequence is ordered from the most preferred to the least. The client makes best effort to create the most preferred it can.
-#idp.authn.webauthn.preferredPublicKeyParams = EdDSA,ES256,ES384,ES512,RS1,RS256,RS384,RS512
-
-# The authenticator attachment (authenticator type) requirement. One-of 'any', 'cross-platform', or 'platform'. 
-#idp.authn.webauthn.registration.authenticatorAttachment = any
-
-# Require User Verification on registration
-#idp.authn.webauthn.registration.userVerification = discouraged
-
-# State the preference of the IdP during registration to receive an authenticator attestation. One-of 'none', 'indirect', 'direct', or 'enterprise'.
-#idp.authn.webauthn.registration.attestationConveyancePreference = none
-
-# Enable the authenticator policy engine?
-#idp.authn.webauthn.registration.authenticator.policy.enabled = false
-# Set the authenticator policy to use, defaults to a chained set of policies
-#idp.authn.webauthn.registration.authenticator.policy = shibboleth.authn.webauthn.registration.ChainedAuthenticatorPolicy
-# When using the chained policy, give the name of the list of policies
-#idp.authn.webauthn.registration.authenticator.policy.chainedlist = shibboleth.authn.webauthn.registration.ChainedAuthenticatorPolicies
-# When using the default chained policy, enabled the allowed authenticators policy?
-#idp.authn.webauthn.registration.authenticator.policy.allowedAuthenticators.enabled = true
-# When using the default chained policy, give a comma seperated list of allowed authenticator attestation GUIDs (AAGUID)
-#idp.authn.webauthn.registration.authenticator.policy.allowedAuthenticators = 
-# When using the default chained policy, should we enable the 'authenticator capabilities' policy
-#idp.authn.webauthn.registration.authenticator.policy.authenticatorCapabilities.enabled = true
-# When the 'authenticator capabilities' policy is enabled, which policy bean should be applied
-#idp.authn.webauthn.registration.authenticator.policy.authenticatorCapabilities = shibboleth.authn.webauthn.registration.authenticator.policy.AuthenticatorGetInfoUVCapable
-
-# Enable the authenticator inspector engine?
-#idp.authn.webauthn.registration.authenticator.inspector.enabled = false
-# Set the authenticator inspectors to use, defaults to a chained set of inspectors
-#idp.authn.webauthn.registration.authenticator.inspector = shibboleth.authn.webauthn.registration.ChainedAuthenticatorCapabilitiesInspector
-# When using the chained inspectors, give the name of the list of inspectors
-#idp.authn.webauthn.registration.authenticator.inspector.chainedlist = shibboleth.authn.webauthn.registration.ChainedAuthenticatorInspectors
-# When using the default chained set of inspectors, should we enable the 'second factor only' inspector
-#idp.authn.webauthn.registration.authenticator.inspector.secondFactorOnlyInspector.enabled = true
-# When using the default chained set of inspectors, give a comma seperated list of authenticators (by attestation GUIDs (AAGUID)) to tag as only allowed for second factor authentication
-#idp.authn.webauthn.registration.authenticator.inspector.secondFactorOnlyAuthenticators =
-
-# Enable the credential/authenticator policy during authentication
-# idp.authn.webauthn.credential.policy.enabled = false
-# Set the credential repository to use, defaults to a chained set of policies
-#idp.authn.webauthn.credential.policy = shibboleth.authn.webauthn.ChainedCredentialPolicies
-# When using the default chained policy, should be enable the 'second-factor only' credential rule
-#idp.authn.webauthn.registration.authenticator.policy.secondFactorOnly.enabled = true
-
-
-# Allow inline self-enrolment 
-#idp.authnwebauthn.registration.allowInline = true
-
-# Basic transformations that should be applied to the username that is initially collected in the registration flow
-#idp.authn.webauthn.registration.username.uppercase = false
-#idp.authn.webauthn.registration.username.lowercase = false
-#idp.authn.webauthn.registration.username.trim = false
-
-# The ID of the bean that supplies the c14n flows that are applied to the username entered during the registration flow
-#idp.authn.webauthn.registration.c14n.postUsernameFlows = shibboleth.PostLoginSubjectCanonicalizationFlows
-
-#idp.authn.webauthn.registration.genericMessageID = 
-#idp.authn.webauthn.registration.infoMessageFunction = DefaultRegistrationInfoMessageFunction
-#idp.authn.webauthn.registration.errorMessageFunction = DefaultRegistrationErrorMessageFunction
-
-#idp.authn.webauthn.registration.audit.enabled = false
-#idp.authn.webauthn.registration.audit.category = Shibboleth-Audit.WebAuthnRegistration
-#idp.authn.webauthn.registration.audit.format = %a|%T|%u|%WebAuthnAdminAO|%WebAuthnAdminAction|%WebAuthnAdminCR|%WebAuthnAdminCA|%WebAuthnAdminAU|%UA
-
-#### FIDO Metadata 
-
-# Enable FIDO Alliance metadata? If you want to use the metadata service, you *must* download and set the trust root and the legal blob file headers
-#idp.authn.webauthn.metadata.enabled = false
-#idp.authn.webauthn.metadata.trustRootFile = %{idp.home}/credentials/root-r3.crt
-#idp.authn.webauthn.metadata.expectedLegalHeaders = Retrieval and use of this BLOB indicates acceptance of the appropriate agreement located at https://fidoalliance.org/metadata/metadata-legal-terms/
-# Downloaded CRLs to check metadata signature revocation status.
-#idp.authn.webauthn.metadata.crls = %{idp.home}/credentials/root-r3.crl
-
-## If you want to download the metadata from a URL when the IdP starts, you must specify a cache file (.bin) and the URL to fetch the metadata
-#idp.authn.webauthn.metadata.cacheFile = %{idp.home}/metadata/fido-metadata.bin
-#idp.authn.webauthn.metadata.metadataBlobUrl = https://mds3.fidoalliance.org
-
-## If you want to load the metadata from a file *only*, set the metadata blob file location. This will override the metadataBlobUrl property
-#idp.authn.webauthn.metadata.metadataBlobFile = %{idp.home}/metadata/blob-mds3.jwt
-
-##### Supplementary AAGUID Metadata
-# To provide an icon and description in the registration interface for those authenticators/providers not in the FIDO metadata feed
-#idp.authn.webauthn.metadata.aaguid.enabled = false
-#idp.authn.webauthn.metadata.aaguid.passkeyAaguidFile = aaguid.json
-
-#### Authentication properties
-
 # Which type of flow is supported? Usernameless or passwordless
 #idp.authn.webauthn.usernameless.enabled = false
 
@@ -193,28 +69,18 @@ idp.authn.webauthn.supportedPrincipals = \
 # The ID of the bean that supplies the c14n flows that are applied to the username entered during the passwordless flow
 #idp.authn.webauthn.passwordless.c14n.postUsernameFlows = shibboleth.PostLoginSubjectCanonicalizationFlows
 
+# Enable the credential/authenticator policy engine
+#idp.authn.webauthn.credential.policy.enabled = false
+# Set the credential policies to use, defaults to a chained set of policies
+#idp.authn.webauthn.credential.policy = shibboleth.authn.webauthn.ChainedCredentialPolicies
+#  When using the default chained policy, should we enable the 'second-factor only' credential rule
+#idp.authn.webauthn.registration.authenticator.policy.secondFactorOnly.enabled = true
+
 # Audit
 #idp.authn.webauthn.audit.enabled = false
 #idp.authn.webauthn.audit.format = %a|%T|%SP|%I|%s|%AF|%CV|%u|%WebAuthnUID|%WebAuthnUV|%WebAuthnFM|%tu|%AR|%UA
 #idp.authn.webauthn.audit.category = Shibboleth-Audit.WebAuthn
 
-#### Administrator properties for managing user credentials
-
-#idp.authn.webauthn.admin.management.logging = WebAuthnCredentialManagement
-#idp.authn.webauthn.admin.management.accessPolicy = AccessByAdmin
-#idp.authn.webauthn.admin.management.resolveAttributes = false
-#idp.authn.webauthn.admin.management.authenticationFlows = 
-#idp.authn.webauthn.admin.management.postAuthenticationFlows = 
-#idp.authn.webauthn.admin.management.defaultAuthenticationMethods = saml2/http://example.org/ac/classes/mfa
-#idp.authn.webauthn.admin.management.authenticated = true
-
-#idp.authn.webauthn.admin.management.genericMessageID = 
-#idp.authn.webauthn.admin.management.infoMessageFunction = DefaultAdminInfoMessageFunction
-#idp.authn.webauthn.admin.management.errorMessageFunction = DefaultAdminErrorMessageFunction
-#idp.authn.webauthn.admin.management.audit.enabled = false
-#idp.authn.webauthn.admin.management.audit.format = %a|%T|%u|%WebAuthnAdminAO|%WebAuthnAdminAction|%WebAuthnAdminCR|%WebAuthnAdminAU|%UA
-#idp.authn.webauthn.admin.management.audit.category = Shibboleth-Audit.WebAuthnManagment
-
 #### Debugging
 
 # Display debug information about the registration and authentication ceremony on their respective views?
diff --git a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/module.properties b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/module.properties
index 0cb8091..5cb2bf6 100644
--- a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/module.properties
+++ b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/module.properties
@@ -14,39 +14,43 @@ idp.authn.WebAuthn.1.src = /net/shibboleth/idp/plugin/authn/webauthn/conf/authn/
 idp.authn.WebAuthn.1.dest = conf/authn/webauthn.properties
 idp.authn.WebAuthn.1.replace = false
 
-idp.authn.WebAuthn.2.src = /net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn-config.xml
-idp.authn.WebAuthn.2.dest = conf/authn/webauthn-config.xml
+idp.authn.WebAuthn.2.src = /net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn-registration.properties
+idp.authn.WebAuthn.2.dest = conf/authn/webauthn-registration.properties
 idp.authn.WebAuthn.2.replace = false
 
-idp.authn.WebAuthn.3.src = /net/shibboleth/idp/plugin/authn/webauthn/views/webauthn-authn.vm
-idp.authn.WebAuthn.3.dest = views/webauthn/webauthn-authn.vm
+idp.authn.WebAuthn.3.src = /net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn-config.xml
+idp.authn.WebAuthn.3.dest = conf/authn/webauthn-config.xml
+idp.authn.WebAuthn.3.replace = false
 
-idp.authn.WebAuthn.4.src = /net/shibboleth/idp/plugin/authn/webauthn/views/webauthn-register.vm
-idp.authn.WebAuthn.4.dest = views/webauthn/webauthn-register.vm
+idp.authn.WebAuthn.4.src = /net/shibboleth/idp/plugin/authn/webauthn/views/webauthn-authn.vm
+idp.authn.WebAuthn.4.dest = views/webauthn/webauthn-authn.vm
 
-idp.authn.WebAuthn.5.src = /net/shibboleth/idp/plugin/authn/webauthn/views/webauthn-register-username.vm
-idp.authn.WebAuthn.5.dest = views/webauthn/webauthn-register-username.vm
+idp.authn.WebAuthn.5.src = /net/shibboleth/idp/plugin/authn/webauthn/views/webauthn-register.vm
+idp.authn.WebAuthn.5.dest = views/webauthn/webauthn-register.vm
 
-idp.authn.WebAuthn.6.src = /net/shibboleth/idp/plugin/authn/webauthn/views/webauthn-authn-username.vm
-idp.authn.WebAuthn.6.dest = views/webauthn/webauthn-authn-username.vm
+idp.authn.WebAuthn.6.src = /net/shibboleth/idp/plugin/authn/webauthn/views/webauthn-register-username.vm
+idp.authn.WebAuthn.6.dest = views/webauthn/webauthn-register-username.vm
 
-idp.authn.WebAuthn.7.src = /net/shibboleth/idp/plugin/authn/webauthn/css/webauthn.css
-idp.authn.WebAuthn.7.dest = edit-webapp/css/webauthn.css
-idp.authn.WebAuthn.7.postenable = Customize edit-webapp/css/webauthn.css and rebuild war to deploy.
+idp.authn.WebAuthn.7.src = /net/shibboleth/idp/plugin/authn/webauthn/views/webauthn-authn-username.vm
+idp.authn.WebAuthn.7.dest = views/webauthn/webauthn-authn-username.vm
 
-idp.authn.WebAuthn.8.src = /net/shibboleth/idp/plugin/authn/webauthn/js/webauthn-json.browser-ponyfill.min.js
-idp.authn.WebAuthn.8.dest = edit-webapp/js/webauthn/webauthn-json.browser-ponyfill.min.js
+idp.authn.WebAuthn.8.src = /net/shibboleth/idp/plugin/authn/webauthn/css/webauthn.css
+idp.authn.WebAuthn.8.dest = edit-webapp/css/webauthn.css
+idp.authn.WebAuthn.8.postenable = Customize edit-webapp/css/webauthn.css and rebuild war to deploy.
 
-idp.authn.WebAuthn.9.src = /net/shibboleth/idp/plugin/authn/webauthn/js/webauthn-support.js
-idp.authn.WebAuthn.9.dest = edit-webapp/js/webauthn/webauthn-support.js
+idp.authn.WebAuthn.9.src = /net/shibboleth/idp/plugin/authn/webauthn/js/webauthn-json.browser-ponyfill.min.js
+idp.authn.WebAuthn.9.dest = edit-webapp/js/webauthn/webauthn-json.browser-ponyfill.min.js
 
-idp.authn.WebAuthn.10.src = /net/shibboleth/idp/plugin/authn/webauthn/views/webauthn-end.vm
-idp.authn.WebAuthn.10.dest = views/webauthn/webauthn-end.vm
+idp.authn.WebAuthn.10.src = /net/shibboleth/idp/plugin/authn/webauthn/js/webauthn-support.js
+idp.authn.WebAuthn.10.dest = edit-webapp/js/webauthn/webauthn-support.js
 
-idp.authn.WebAuthn.11.src = /net/shibboleth/idp/plugin/authn/webauthn/views/webauthn-management.vm
-idp.authn.WebAuthn.11.dest = views/webauthn/webauthn-management.vm
+idp.authn.WebAuthn.11.src = /net/shibboleth/idp/plugin/authn/webauthn/views/webauthn-end.vm
+idp.authn.WebAuthn.11.dest = views/webauthn/webauthn-end.vm
 
-idp.authn.WebAuthn.12.src = /net/shibboleth/idp/plugin/authn/webauthn/views/webauthn-management-search.vm
-idp.authn.WebAuthn.12.dest = views/webauthn/webauthn-management-search.vm
+idp.authn.WebAuthn.12.src = /net/shibboleth/idp/plugin/authn/webauthn/views/webauthn-management.vm
+idp.authn.WebAuthn.12.dest = views/webauthn/webauthn-management.vm
+
+idp.authn.WebAuthn.13.src = /net/shibboleth/idp/plugin/authn/webauthn/views/webauthn-management-search.vm
+idp.authn.WebAuthn.13.dest = views/webauthn/webauthn-management-search.vm
 
 

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.

More information about the commits mailing list