[java-idp-plugin-webauthn] branch main updated: Reset forceAuthn property default to false, to maintain compatibility

[Phil Smart]

This is an automated email from the git hooks/post-receive script.

philsmart pushed a commit to branch main
in repository java-idp-plugin-webauthn.

View the commit online:
http://git.shibboleth.net/view/?p=java-idp-plugin-webauthn.git;a=commit;h=0411d08c77a510342b5a9d76bab8df1568c6f961

The following commit(s) were added to refs/heads/main by this push:
     new 0411d08  Reset forceAuthn property default to false, to maintain compatibility
0411d08 is described below

commit 0411d08c77a510342b5a9d76bab8df1568c6f961
Author: Phil Smart <philip.smart at jisc.ac.uk>
AuthorDate: Mon Mar 10 09:07:20 2025 +0000

    Reset forceAuthn property default to false, to maintain compatibility
---
 .../src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml     | 4 ++--
 .../plugin/authn/webauthn/conf/authn/webauthn-registration.properties | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml b/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
index c768d5c..51e638d 100644
--- a/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
+++ b/webauthn-impl/src/main/resources/META-INF/net.shibboleth.idp/postconfig.xml
@@ -40,7 +40,7 @@
             p:loggingId="%{idp.authn.webauthn.admin.registration.logging:WebAuthnCredentialRegistration}"
             p:policyName="%{idp.authn.webauthn.admin.registration.accessPolicy:AccessByCurrentUser}"
             p:nonBrowserSupported="false"
-            p:forceAuthn="%{idp.authn.webauthn.admin.registration.forceAuthn:true}"
+            p:forceAuthn="%{idp.authn.webauthn.admin.registration.forceAuthn:false}"
             p:authenticated="%{idp.authn.webauthn.admin.registration.authenticated:true}"
             p:resolveAttributes="%{idp.authn.webauthn.admin.registration.resolveAttributes:true}">
         <property name="authenticationFlows">
@@ -63,7 +63,7 @@
             p:loggingId="%{idp.authn.webauthn.admin.management.logging:WebAuthnCredentialManagement}"
             p:policyName="%{idp.authn.webauthn.admin.management.accessPolicy:AccessByAdminUser}"
             p:nonBrowserSupported="false"
-            p:forceAuthn="%{idp.authn.webauthn.admin.management.forceAuthn:true}"
+            p:forceAuthn="%{idp.authn.webauthn.admin.management.forceAuthn:false}"
             p:authenticated="%{idp.authn.webauthn.admin.management.authenticated:true}"
             p:resolveAttributes="%{idp.authn.webauthn.admin.management.resolveAttributes:true}">
         <property name="authenticationFlows">
diff --git a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn-registration.properties b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn-registration.properties
index dd6f991..0f56175 100644
--- a/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn-registration.properties
+++ b/webauthn-impl/src/main/resources/net/shibboleth/idp/plugin/authn/webauthn/conf/authn/webauthn-registration.properties
@@ -1,5 +1,5 @@
 # Always require authentication to the registration flow, even if there is an existing SSO session
-#idp.authn.webauthn.admin.registration.forceAuthn = true
+#idp.authn.webauthn.admin.registration.forceAuthn = false
 
 # Allow credential registrations to be untrusted. If false, this requires attestation statements from the 
 # authenticator using 'idp.authn.webauthn.registration.attestationConveyancePreference = DIRECT' and FIDO metadata is 
@@ -87,7 +87,7 @@
 ## Administrator flow properties for managing user credentials
 
 # Always require authentication to the management flow, even if there is an existing SSO session
-#idp.authn.webauthn.admin.management.forceAuthn = true
+#idp.authn.webauthn.admin.management.forceAuthn = false
 
 #idp.authn.webauthn.admin.management.logging = WebAuthnCredentialManagement
 #idp.authn.webauthn.admin.management.accessPolicy = AccessByAdmin

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.