[java-idp-plugin-webauthn] branch main updated: JWEBAUTHN-38 - AllowUntrustedAttestation property is missing from default properties file

[Phil Smart]

This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-webauthn.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-webauthn.git;a=commit;h=29560d8883a8da85c7a9efbde336836e4d8e0f53

The following commit(s) were added to refs/heads/main by this push:
     new 29560d8  JWEBAUTHN-38 - AllowUntrustedAttestation property is missing from default properties file
29560d8 is described below

commit 29560d8883a8da85c7a9efbde336836e4d8e0f53
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Mon Jan 6 12:15:41 2025 +0000

    JWEBAUTHN-38 - AllowUntrustedAttestation property is missing from
    default properties file
    
     - Added back to the registration file
    
    https://shibboleth.atlassian.net/browse/JWEBAUTHN-38
---
 .../authn/webauthn/conf/authn/webauthn-registration.properties       | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn-registration.properties b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn-registration.properties
index 32b92ed..62200a0 100644
--- a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn-registration.properties
+++ b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn-registration.properties
@@ -1,3 +1,8 @@
+# Allow credential registrations to be untrusted. If false, this requires attestation statements from the 
+# authenticator using 'idp.authn.webauthn.registration.attestationConveyancePreference = DIRECT' and FIDO metadata is 
+# loaded.
+#idp.authn.webauthn.allowUntrustedAttestation = true
+
 # Should the registration process collect a username before initiating authentication?
 #idp.authn.webauthn.registration.collectUsername = true
 

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.