Package net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl

Class FunctionalAuthenticatorPolicyRule

java.lang.Object

net.shibboleth.shared.component.AbstractInitializableComponent

net.shibboleth.shared.component.AbstractIdentifiedInitializableComponent

net.shibboleth.shared.component.AbstractIdentifiableInitializableComponent

net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AbstractAuthenticatorPolicyRule

net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.FunctionalAuthenticatorPolicyRule

All Implemented Interfaces:

AuthenticatorPolicy, Component, DestructableComponent, IdentifiableComponent, IdentifiedComponent, InitializableComponent

public class FunctionalAuthenticatorPolicyRule
extends AbstractAuthenticatorPolicyRule

A AuthenticatorPolicy that evaluates a BiFunction to determine if the authenticator that created the credential registration should be accepted or rejected.

Nested Class Summary

Nested classes/interfaces inherited from interface net.shibboleth.idp.plugin.authn.webauthn.admin.policy.AuthenticatorPolicy

AuthenticatorPolicy.AuthenticatorPolicyOutcome

Field Summary

Fields

Modifier and Type	Field	Description
private final org.slf4j.Logger	log	Class logger.
private BiFunction<com.yubico.fido.metadata.AAGUID,FunctionalRuleContext,AuthenticatorPolicy.AuthenticatorPolicyOutcome>	rule	The function to run.

Constructor Summary

Constructors

Constructor	Description
FunctionalAuthenticatorPolicyRule()	Constructor.

Method Summary

Modifier and Type	Method	Description
protected AuthenticatorPolicy.AuthenticatorPolicyOutcome	doAccept(com.yubico.fido.metadata.AAGUID aaguid, ProfileRequestContext prc)	Execute the policy.
void	setRule(BiFunction<com.yubico.fido.metadata.AAGUID,FunctionalRuleContext,AuthenticatorPolicy.AuthenticatorPolicyOutcome> function)	Set the policy function rule to run.

Methods inherited from class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AbstractAuthenticatorPolicyRule

evaluate, getFidoMetadataService, setActivationCondition, setActivationConditionStrategy, setFidoMetadataService

Methods inherited from class net.shibboleth.shared.component.AbstractIdentifiableInitializableComponent

setId

Methods inherited from class net.shibboleth.shared.component.AbstractIdentifiedInitializableComponent

doInitialize, ensureId, getId, ifDestroyedThrowDestroyedComponentException, ifInitializedThrowUnmodifiabledComponentException, ifNotInitializedThrowUninitializedComponentException

Methods inherited from class net.shibboleth.shared.component.AbstractInitializableComponent

checkComponentActive, checkSetterPreconditions, destroy, doDestroy, initialize, isDestroyed, isInitialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface net.shibboleth.shared.component.IdentifiedComponent

getId

Field Details

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

rule

@Nonnull
private BiFunction<com.yubico.fido.metadata.AAGUID,FunctionalRuleContext,AuthenticatorPolicy.AuthenticatorPolicyOutcome> rule

The function to run. By default this returns AuthenticatorPolicy.AuthenticatorPolicyOutcome.IGNORE.

Constructor Details

FunctionalAuthenticatorPolicyRule

public FunctionalAuthenticatorPolicyRule()

Constructor.

Method Details

setRule

public void setRule(@Nonnull
 BiFunction<com.yubico.fido.metadata.AAGUID,FunctionalRuleContext,AuthenticatorPolicy.AuthenticatorPolicyOutcome> function)

Set the policy function rule to run.

Parameters:

function - the rule to set.

doAccept

protected AuthenticatorPolicy.AuthenticatorPolicyOutcome doAccept(com.yubico.fido.metadata.AAGUID aaguid,
 ProfileRequestContext prc)

Execute the policy. Return true if allowed, false otherwise. Implementations should override this method.

Specified by:

doAccept in class AbstractAuthenticatorPolicyRule

Parameters:

aaguid - the authenticator attestation GUID.

prc - the profile request context

Returns:

true if the policy allows the authenticator, false otherwise.