[java-idp-plugin-webauthn] 09/11: Temporarily remove unusable UV capabilities authenticator policy

[Phil Smart]

This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-webauthn.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-webauthn.git;a=commit;h=9896204b827238ca1d6e5daf258d1411c6b0602c

commit 9896204b827238ca1d6e5daf258d1411c6b0602c
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Fri Oct 11 16:24:50 2024 +0100

    Temporarily remove unusable UV capabilities authenticator policy
    
     - Leaving the function, but removing it from the default configuration.
    Will look to add this back when the Yubico library handles the
    authenticator/ctap options correctly.
---
 .../admin/webauthn-registration/webauthn-registration-beans.xml     | 6 ------
 .../authn/webauthn/conf/authn/webauthn-registration.properties      | 4 ----
 2 files changed, 10 deletions(-)

diff --git a/webauthn-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/admin/webauthn-registration/webauthn-registration-beans.xml b/webauthn-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/admin/webauthn-registration/webauthn-registration-beans.xml
index 3bf9db5..5de5fb2 100644
--- a/webauthn-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/admin/webauthn-registration/webauthn-registration-beans.xml
+++ b/webauthn-impl/src/main/resources/META-INF/net/shibboleth/idp/flows/admin/webauthn-registration/webauthn-registration-beans.xml
@@ -188,12 +188,6 @@
             class="net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AllowlistAuthenticatorPolicy"
             p:allowedAuthenticators="%{idp.authn.webauthn.registration.authenticator.policy.allowedAuthenticators:null}"
             p:activationCondition="%{idp.authn.webauthn.registration.authenticator.policy.allowedAuthenticators.enabled:true}"/>
-             
-        <bean id="AuthenticatorCapabilitiesPolicyRuleUV" parent="AbstractAuthenticatorPolicyRule"
-            class="net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AuthenticatorCapabilitiesPolicyRule"
-            p:activationCondition="%{idp.authn.webauthn.registration.authenticator.policy.authenticatorCapabilities.enabled:true}"
-            p:authenticatorCapabilityAcceptor="#{getObject('%{idp.authn.webauthn.registration.authenticator.policy.authenticatorCapabilities:shibboleth.authn.webauthn.registration.authenticator.policy.AuthenticatorGetInfoUVCapable}')}">
-        </bean>
          
     </util:list>
     
diff --git a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn-registration.properties b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn-registration.properties
index 0d9f432..fc6dcad 100644
--- a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn-registration.properties
+++ b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn-registration.properties
@@ -58,10 +58,6 @@
 #idp.authn.webauthn.registration.authenticator.policy.allowedAuthenticators.enabled = true
 # When using the default chained policy, give a comma seperated list of allowed authenticator attestation GUIDs (AAGUID)
 #idp.authn.webauthn.registration.authenticator.policy.allowedAuthenticators = 
-# When using the default chained policy, should we enable the 'authenticator capabilities' policy
-#idp.authn.webauthn.registration.authenticator.policy.authenticatorCapabilities.enabled = true
-# When the 'authenticator capabilities' policy is enabled, which policy bean should be applied
-#idp.authn.webauthn.registration.authenticator.policy.authenticatorCapabilities = shibboleth.authn.webauthn.registration.authenticator.policy.AuthenticatorGetInfoUVCapable
 
 # Enable the authenticator inspector engine?
 #idp.authn.webauthn.registration.authenticator.inspector.enabled = false

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.