Index

A B C D E F G H I J L M N O P R S T U V W Y
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form

A

aaguid - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

The AAGUID of the authenticator that created this credential.

aaguid - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.Builder

The AAGUID of the authenticator.

AAGUID_PATTERN - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.authn.AuthenticatorSupport

The acceptable AAGUID pattern, taken from @link AAGUID.

AaguidEntry - Class in net.shibboleth.idp.plugin.authn.webauthn.metadata

A entry in the Passkeys AAGUID JSON file.

AaguidEntry() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.metadata.AaguidEntry

aaguidMetadata - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.EnhancedCredentialRecord

An AAGUID entry provided by a supplementary JSON file that describes authenticators not in the MDS feed e.g.

aaguidService - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnAction

Supplementary description and icon information for passkey providers not in the MDS feed (mostly software providers).

AbstractAttributeContextUserIdentityStrategy<T> - Class in net.shibboleth.idp.plugin.authn.webauthn.context.navigate

A base class for functions that retrieve a single attribute value from the attribute context.

AbstractAttributeContextUserIdentityStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.AbstractAttributeContextUserIdentityStrategy

Constructor.

AbstractAuthenticatorPolicyRule - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl

A base class for authenticator policies.

AbstractAuthenticatorPolicyRule() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AbstractAuthenticatorPolicyRule

Constructor.

AbstractCredentialPolicyRule - Class in net.shibboleth.idp.plugin.authn.webauthn.policy.impl

A base class for credential policies.

AbstractCredentialPolicyRule() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.AbstractCredentialPolicyRule

Constructor.

AbstractWebAuthnAction<T> - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

A base class for WebAuthn actions.

AbstractWebAuthnAction(Function<ProfileRequestContext, T>) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnAction

Constructor.

AbstractWebAuthnAuditExtractor<T> - Class in net.shibboleth.idp.plugin.authn.webauthn.audit

An abstract audit extractor function to extract values directly from various WebAuthn contexts.

AbstractWebAuthnAuditExtractor(Function<ProfileRequestContext, BaseWebAuthnContext>) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.audit.AbstractWebAuthnAuditExtractor

Constructor.

AbstractWebAuthnAuditingAction<T> - Class in net.shibboleth.idp.plugin.authn.webauthn.audit.impl

A base class for actions that include audit logging support.

AbstractWebAuthnAuditingAction(Function<ProfileRequestContext, T>) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.AbstractWebAuthnAuditingAction

Constructor.

AbstractWebAuthnExtractionAction - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

A base class for WebAuthn actions that extract a username for subsequent use.

AbstractWebAuthnExtractionAction() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnExtractionAction

Constructor.

AbstractWebAuthnManagementAuditExtractor<T> - Class in net.shibboleth.idp.plugin.authn.webauthn.audit

An abstract audit extractor function to extract values directly from the WebAuthn management context.

AbstractWebAuthnManagementAuditExtractor(Function<ProfileRequestContext, WebAuthnManagementContext>) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.audit.AbstractWebAuthnManagementAuditExtractor

Constructor.

AbstractWebAuthnRegistrationAuditExtractor<T> - Class in net.shibboleth.idp.plugin.authn.webauthn.audit

An abstract audit extractor function to extract values directly from the WebAuthn registration context.

AbstractWebAuthnRegistrationAuditExtractor(Function<ProfileRequestContext, WebAuthnRegistrationContext>) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.audit.AbstractWebAuthnRegistrationAuditExtractor

Constructor.

accept(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.BaseWebAuthnAuthenticationContextConsumer

accept(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion.WebAuthnCleanupHook

accept(ProfileRequestContext, byte[]) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ManagementContextCredentialRemovalConsumer

accept(ProfileRequestContext, byte[]) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.RegistrationContextCredentialRemovalConsumer

accept(ProfileRequestContext, byte[]) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.RegistrationContextCredentialToModifyConsumer

ACCEPT - Enum constant in enum class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.AuthenticatorPolicy.AuthenticatorPolicyOutcome

Accept the authenticator.

ACCEPT - Enum constant in enum class net.shibboleth.idp.plugin.authn.webauthn.policy.CredentialPolicy.CredentialPolicyOutcome

Allow the credential to be used.

ACTION - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.audit.WebAuthnAuditFields

The type of action performed.

ACTION_OUTCOME - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.audit.WebAuthnAuditFields

The outcome of an action, typically success or failure.

activationCondition - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AbstractAuthenticatorPolicyRule

Does this policy rule apply? Default is true.

activationCondition - Variable in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.AbstractCredentialPolicyRule

Does this policy rule apply? Default is true.

AddAttestationConveyancePreference - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

Add an attestation conveyance preference to the context.

AddAttestationConveyancePreference() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddAttestationConveyancePreference

Constructor.

AddAuthenticatorAttachmentRequirement - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

Add an authenticator attachment requirement to the context.

AddAuthenticatorAttachmentRequirement() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddAuthenticatorAttachmentRequirement

Constructor.

addClassifiedError(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationErrorContext

Adds a classified error to the context, ensuring that it will be returned from WebAuthnRegistrationErrorContext.getLastClassifiedError() until another is added.

addClassifiedMessage(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationInformationContext

Adds a classified message to the context, ensuring that it will be returned from WebAuthnRegistrationInformationContext.getClassifiedMessages() until another is added.

AddDisplayName - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

An action to generate or lookup a user.displayName.

AddDisplayName() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddDisplayName

Constructor.

AddNicknameRequired - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

An action that sets onto the context if nickname collection is required.

AddNicknameRequired() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddNicknameRequired

Constructor.

addRegistrationByUsername(String, CredentialRecord) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

Add a new credential registration for a given user, by their username.

addRegistrationByUsername(String, CredentialRecord) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.storage.WebAuthnCredentialRepository

Add a new credential registration for a given user, by their username.

AddResidentKeyRequirement - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

Add a ResidentKey requirement to the context.

AddResidentKeyRequirement() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddResidentKeyRequirement

Constructor.

AddUserId - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

An action to generate or lookup a user.id (stored by an authenticator as the userHandle).

AddUserId() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddUserId

Constructor.

AddUserName - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

An action to generate or lookup a WebAuthn user.name.

AddUserName() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddUserName

Constructor.

AddUserVerificationRequirement - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

Add a UserVerification requirement to the context.

AddUserVerificationRequirement() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.AddUserVerificationRequirement

Constructor.

ADMIN_AFFECTED_USER - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.audit.WebAuthnAuditFields

The user the admin performed an action on.

AdminDeletePublicKeyCredential - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

An action that removes a public key credential from the credential repository based on the credential ID found in the management context.

AdminDeletePublicKeyCredential() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AdminDeletePublicKeyCredential

Constructor.

AdminSearchCredentialsLookupFunction - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

A credential lookup function that returns the credentials belonging to the user that has been searched for in the management interface.

AdminSearchCredentialsLookupFunction() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AdminSearchCredentialsLookupFunction

allowCredentials - Variable in class net.shibboleth.idp.plugin.authn.webauthn.authn.CredentialRequestOptionsParameters

Credentials that have already been registered with the credential repository.

allowCredentials - Variable in class net.shibboleth.idp.plugin.authn.webauthn.authn.CredentialRequestOptionsParameters.Builder

Credentials that have already been registered with the IdP.

AllowCurrentUserAccessPredicate - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

An access control predicate that should implement comparison logic to allow access only to authenticated users who initiated the WebAuthn registration/authentication process.

AllowCurrentUserAccessPredicate() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AllowCurrentUserAccessPredicate

Constructor.

AllowCurrentUserAccessPredicate.DefaultCurrentUserComparisonPredicate - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

Default comparison predicate which just compares the equality of the input strings.

allowedAuthenticators - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AllowlistAuthenticatorPolicy

A set of allowed authenticators, based on their AAGUID.

allowedPreviousFactors - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsSecondFactor

Which previous factors are acceptable to allow a second factor only WebAuthn flow.

AllowlistAuthenticatorPolicy - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl

A basic authenticator policy that rejects all authenticators not in the allowed list.

AllowlistAuthenticatorPolicy() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AllowlistAuthenticatorPolicy

Constructor.

allowOriginPort - Variable in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

Allow unrestricted origin ports? Default is false.

allowOriginSubdomain - Variable in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

Allow subdomains in origins? Default is false.

allowUntrustedAttestation - Variable in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

Should we allow an untrusted attestation?

apply(EnhancedCredentialRecord, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ChainingCredentialLabeller

apply(EnhancedCredentialRecord, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PasskeyCredentialLabeller

apply(EnhancedCredentialRecord, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.SecondFactorOnlyCredentialLabeller

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AdminSearchCredentialsLookupFunction

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExistingRegistrationCredentialsLookupStrategy

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.RandomUserIdGenerator

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.audit.AbstractWebAuthnAuditExtractor

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.audit.AbstractWebAuthnManagementAuditExtractor

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.audit.AbstractWebAuthnRegistrationAuditExtractor

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.AttributeContextByteArrayLookupStrategy

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.AttributeContextStringLookupStrategy

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.RegistrationErrorMessageLookupFunction

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.RegistrationInfoMessageLookupFunction

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.UsernameLookupFromHttpRequest

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.UsernameLookupFromRegistrationContext

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.UsernameLookupFromSubjectContext

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.WebAuthnErrorMessageLookupFunction

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.DefaultUserHandleLookupStrategy

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.ExistingAuthenticationCredentialsLookupStrategy

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.GenerateServerChallenge.DefaultChallengeGenerator

apply(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.UsernameFromAuthenticationContextLookupStrategy

apply(RequestContext, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.InlineEnrolmentRedirectFunction

applyTransforms(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnExtractionAction

Apply any configured regular expression replacements to an input value and return the result.

assertion - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.CheckCredentialPolicy

The stashed assertion response.

assertion - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.CheckUserHandleExistsIfNoAllowCredentials

The stashed assertion from the context.

assertion - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentialsFromUserHandle

The stashed assertion from the context.

AssertionFailureException - Exception in net.shibboleth.idp.plugin.authn.webauthn.exception

Exception that is throw if an authentication assertion is not valid.

AssertionFailureException() - Constructor for exception net.shibboleth.idp.plugin.authn.webauthn.exception.AssertionFailureException

Constructor.

AssertionFailureException(String) - Constructor for exception net.shibboleth.idp.plugin.authn.webauthn.exception.AssertionFailureException

Constructor.

AssertionFailureException(String, Throwable) - Constructor for exception net.shibboleth.idp.plugin.authn.webauthn.exception.AssertionFailureException

Constructor.

AssertionFailureException(Throwable) - Constructor for exception net.shibboleth.idp.plugin.authn.webauthn.exception.AssertionFailureException

Constructor.

AssertionResult - Class in net.shibboleth.idp.plugin.authn.webauthn.authn

The result of calling WebAuthnAuthenticationClient.validateAuthenticatorAssertionResponse(String, byte[], com.yubico.webauthn.data.PublicKeyCredentialRequestOptions, com.yubico.webauthn.data.PublicKeyCredential).

AssertionResult(AssertionResult.Builder) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult

Constructor.

AssertionResult.Builder - Class in net.shibboleth.idp.plugin.authn.webauthn.authn

The AssertionResult builder.

AssertionResult.IBuildStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.authn

Builder stage.

AssertionResult.ISignatureCounterValidStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.authn

Builder stage.

AssertionResult.ISuccessStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.authn

Builder stage.

AssertionResult.IUserIdStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.authn

Builder stage.

AssertionResult.IUsernameStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.authn

Builder stage.

AssertionResult.IUserVerifiedStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.authn

Builder stage.

attestation - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.CheckRegistrationPolicy

The stashed attestation response.

attestation - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ValidateAuthenticatorAttestationResponse

The stashed public key credential authenticator attestation response.

attestationConveyancePreference - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters

The attestation conveyance preference.

attestationConveyancePreference - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.Builder

The Attestation conveyance preference.

attestationConveyancePreference - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

The attestation conveyance preference.

attestationConveyancePreferenceLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddAttestationConveyancePreference

A strategy to lookup the attestation conveyance preference.

attestationTrusted - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.RegistrationResult

Is the attestation signature valid.

attestationTrusted - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.RegistrationResult.Builder

Is the attestation signature valid.

attestationType - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.RegistrationResult

The attestation type that was used for this credential.

attestationType - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.RegistrationResult.Builder

The attestation type that was used for this credential.

AttributeContextByteArrayLookupStrategy - Class in net.shibboleth.idp.plugin.authn.webauthn.context.navigate

An AbstractAttributeContextUserIdentityStrategy that pulls out an StringAttributeValue from the attribute context and represents it as a UTF-8 encoded byte array.

AttributeContextByteArrayLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.AttributeContextByteArrayLookupStrategy

attributeContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.AbstractAttributeContextUserIdentityStrategy

Strategy used to locate the AttributeContext associated with a given ProfileRequestContext.

AttributeContextStringLookupStrategy - Class in net.shibboleth.idp.plugin.authn.webauthn.context.navigate

An AbstractAttributeContextUserIdentityStrategy that pulls out an StringAttributeValue from the attribute context.

AttributeContextStringLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.AttributeContextStringLookupStrategy

attributeId - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.AbstractAttributeContextUserIdentityStrategy

The attribute Id to extract the value from.

auditContextCreationStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.AbstractWebAuthnAuditingAction

Strategy used to locate or create the AuditContext to populate.

auditFailure(ProfileRequestContext, String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.AbstractWebAuthnAuditingAction

Audit a failed operation.

auditSuccess(ProfileRequestContext, String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.AbstractWebAuthnAuditingAction

Audit a successful operation.

authenticatorAttachment - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters

The authenticator attachment requirement.

authenticatorAttachment - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.Builder

The AuthenticatorAttachment requirement.

authenticatorAttachmentRequirement - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

The authenticator attachment requirement (cross-platform or platform).

authenticatorAttachmentRequirementLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddAuthenticatorAttachmentRequirement

A strategy to lookup the AuthenticatorAttachment requirement.

AuthenticatorCapabilitiesPolicyRule - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl

An authenticator policy that inspects metadata to determine if the authenticator should be allowed or rejected.

AuthenticatorCapabilitiesPolicyRule() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AuthenticatorCapabilitiesPolicyRule

Constructor.

authenticatorCapabilityAcceptor - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AuthenticatorCapabilitiesPolicyRule

A customizable predicate that determines if this authenticators capabilities should be accepted or rejected.

AuthenticatorGetInfoUVCapable - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl

An authenticator capability acceptor that only allows authenticators that support user verification.

AuthenticatorGetInfoUVCapable() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AuthenticatorGetInfoUVCapable

authenticatorMetadata - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.EnhancedCredentialRecord

Optional metadata about the authenticator.

authenticatorPolicy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.CheckRegistrationPolicy

The authenticator policy to check.

AuthenticatorPolicy - Interface in net.shibboleth.idp.plugin.authn.webauthn.admin.policy

An API for applying policy checks to an authenticator.

AuthenticatorPolicy.AuthenticatorPolicyOutcome - Enum Class in net.shibboleth.idp.plugin.authn.webauthn.admin.policy

Representation of the three outcomes of an AuthenticatorPolicy.

authenticatorPolicyChain - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.ChainingAuthenticatorPolicyRule

An ordered chain of authenticator policies.

AuthenticatorPolicyOutcome() - Constructor for enum class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.AuthenticatorPolicy.AuthenticatorPolicyOutcome

AuthenticatorSupport - Class in net.shibboleth.idp.plugin.authn.webauthn.authn

A helper class for various FIDO2 Authenticator functions.

AuthenticatorSupport() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.authn.AuthenticatorSupport

Private constructor.

authnContext - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.CheckCredentialPolicy

The stashed authentication context.

B

BaseOptionsParameters - Class in net.shibboleth.idp.plugin.authn.webauthn.authn

Abstract options parameters class.

BaseOptionsParameters(UserVerificationRequirement, byte[]) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.authn.BaseOptionsParameters

Constructor.

BaseWebAuthnAuthenticationContextConsumer - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

A base class that pulls out the WebAuthnAuthenticationContext for consumers to use.

BaseWebAuthnAuthenticationContextConsumer() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.BaseWebAuthnAuthenticationContextConsumer

Constructor.

BaseWebAuthnContext - Class in net.shibboleth.idp.plugin.authn.webauthn.context

The base WebAuthn context for both registration and authentication ceremonies.

BaseWebAuthnContext() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.context.BaseWebAuthnContext

build() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.Builder

build() - Method in interface net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.IBuildStage

Build the options.

build() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.RegistrationResult.Builder

build() - Method in interface net.shibboleth.idp.plugin.authn.webauthn.admin.RegistrationResult.IBuildStage

Build a registration result.

build() - Method in class net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult.Builder

build() - Method in interface net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult.IBuildStage

Build the result.

build() - Method in class net.shibboleth.idp.plugin.authn.webauthn.authn.CredentialRequestOptionsParameters.Builder

build() - Method in interface net.shibboleth.idp.plugin.authn.webauthn.authn.CredentialRequestOptionsParameters.IBuildStage

Build the request options parameters.

build() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.Builder

build() - Method in interface net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.IBuildStage

Build this credential registration.

buildAuthenticationResult(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion

builder() - Static method in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters

Get a new builder.

builder() - Static method in class net.shibboleth.idp.plugin.authn.webauthn.admin.RegistrationResult

Get the builder used to construct this object.

builder() - Static method in class net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult

Builder.

builder() - Static method in class net.shibboleth.idp.plugin.authn.webauthn.authn.CredentialRequestOptionsParameters

Create a new builder.

builder() - Static method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

Builder stage.

Builder() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.Builder

Constructor.

Builder() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.RegistrationResult.Builder

Constructor.

Builder() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult.Builder

Constructor.

Builder() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.authn.CredentialRequestOptionsParameters.Builder

Constructor.

Builder() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.Builder

Constructor.

Builder(CredentialRecord) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.Builder

Constructor to build a new CredentialRecord from the given one.

C

cacheFile - Variable in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

Where to cache the metadata blob.

ChainingAuthenticatorPolicyRule - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl

A AuthenticatorPolicy implementation that verifies an authenticator is acceptable based on a chain of configured rules.

ChainingAuthenticatorPolicyRule() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.ChainingAuthenticatorPolicyRule

ChainingCredentialLabeller - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

A credential labeller that labels credentials based on a chain of other labellers.

ChainingCredentialLabeller(List<BiFunction<EnhancedCredentialRecord, ProfileRequestContext, List<String>>>) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ChainingCredentialLabeller

Constructor.

ChainingCredentialPolicyRule - Class in net.shibboleth.idp.plugin.authn.webauthn.policy.impl

A CredentialPolicy implementation that verifies an authentication credential is acceptable based on a chain of configured rules.

ChainingCredentialPolicyRule() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.ChainingCredentialPolicyRule

challenge - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.Builder

The challenge sent to the authenticator in registration ceremonies.

challenge - Variable in class net.shibboleth.idp.plugin.authn.webauthn.authn.BaseOptionsParameters

The challenge sent to the authenticator in authentication or registration ceremonies.

challenge - Variable in class net.shibboleth.idp.plugin.authn.webauthn.authn.CredentialRequestOptionsParameters.Builder

The challenge sent to the authenticator in authentication ceremonies.

challengeGenerator - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.GenerateServerChallenge.DefaultChallengeGenerator

The secure random challenge generation strategy.

challengeGeneratorStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.GenerateServerChallenge

Strategy used to generate the challenge to use.

CheckCredentialPolicy - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

A policy engine action that checks with the configured policy if the credential, used to sign the assertion can be used to authenticate.

CheckCredentialPolicy() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.CheckCredentialPolicy

Constructor.

CheckRegistrationPolicy - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

A registration policy engine action that checks with the configured policy if the authenticator can be used to register credentials with the IdP.

CheckRegistrationPolicy() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.CheckRegistrationPolicy

Constructor.

CheckUserHandleExistsIfNoAllowCredentials - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

An action which checks if the userHandle is returned in the assertion response if the set of allowedCredentials in the request was empty.

CheckUserHandleExistsIfNoAllowCredentials() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.CheckUserHandleExistsIfNoAllowCredentials

Constructor.

chooseLatestAndTransform(Instant, Instant) - Static method in class net.shibboleth.idp.plugin.authn.webauthn.impl.WebAuthnEncoder

Choose the latest (on the time-line) instant, format it into a display friendly string, and return it.

classifiedErrors - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationErrorContext

Error conditions detected through classified error messages.

classifiedMessages - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationInformationContext

Event conditions detected through classified messages.

clone() - Method in class net.shibboleth.idp.plugin.authn.webauthn.principal.WebAuthnUserIdPrinicpal

comparisonPredicate - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AllowCurrentUserAccessPredicate

The predicate that performs the comparison.

context - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion

The WebAuthn authentication context.

contextSettingConsumer - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractKeyInformationFromFormRequest

A consumer for setting the credential ID back to the context.

contextUpdateConsumer - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.PopulateWebAuthnAuthenticationContext

Consumer to update the context conditionally.

createAuthenticationRequest(CredentialRequestOptionsParameters) - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebAuthnAuthenticationClient

createAuthenticationRequest(CredentialRequestOptionsParameters) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.client.WebAuthnAuthenticationClient

Create a PublicKeyCredentialRequestOptions for the WebAuthn 'get' call to generate an authentication assertion.

createInstance() - Method in interface net.shibboleth.idp.plugin.authn.webauthn.client.WebAuthnAuthenticationClientFactory

Create an WebAuthnAuthenticationClient instance.

CreatePublicKeyCredentialCreationOptions - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

Action to create a PublicKeyCredentialCreationOptions from the parameters in the WebAuthn context using the available client.

CreatePublicKeyCredentialCreationOptions() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.CreatePublicKeyCredentialCreationOptions

Constructor.

CreatePublicKeyCredentialRequestOptions - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

Action to create CreatePublicKeyCredentialRequestOptions from the parameters in the WebAuthn context using the supplied client.

CreatePublicKeyCredentialRequestOptions() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.CreatePublicKeyCredentialRequestOptions

Constructor.

createRegistrationRequest(CredentialCreationOptionsParameters) - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebAuthnAuthenticationClient

Create a PublicKeyCredentialCreationOptions for the WebAuthn 'create' call to generate a new registration attestation.

createRegistrationRequest(CredentialCreationOptionsParameters) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.client.WebAuthnAuthenticationClient

Create a PublicKeyCredentialCreationOptions for the WebAuthn 'create' call to generate a new registration attestation.

CRED_ADDED - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.audit.WebAuthnAuditFields

The Id of the credential that has been added.

CRED_REMOVED - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.audit.WebAuthnAuditFields

The Id of the credential that has been removed.

credential - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.RegistrationResult.Builder

The verified attestation response.

credential - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.RegistrationResult

The verified attestation response.

credential - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.Builder

The registered credential.

credential - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

The credential to register.

CREDENTIAL_POLICY_REJECTION - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.authn.WebAuthnAuthenticationEventIds

A credential policy rejected the credential/authenticator.

CredentialCreationOptionsParameters - Class in net.shibboleth.idp.plugin.authn.webauthn.admin

A class to hold the parameters required to build a PublicKeyCredentialRequestOptions.

CredentialCreationOptionsParameters(CredentialCreationOptionsParameters.Builder) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters

Constructor.

CredentialCreationOptionsParameters.Builder - Class in net.shibboleth.idp.plugin.authn.webauthn.admin

Builder class.

CredentialCreationOptionsParameters.IAttestationConveyancePreferenceStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.admin

Stage interface.

CredentialCreationOptionsParameters.IBuildStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.admin

Stage interface.

CredentialCreationOptionsParameters.IChallengeStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.admin

Stage interface.

CredentialCreationOptionsParameters.IDisplayNameStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.admin

Stage interface.

CredentialCreationOptionsParameters.IExcludeCredentialsStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.admin

Stage interface.

CredentialCreationOptionsParameters.INameStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.admin

Stage interface.

CredentialCreationOptionsParameters.IResidentKeyRequirementStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.admin

Stage interface.

CredentialCreationOptionsParameters.IUserHandleStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.admin

Stage interface.

CredentialCreationOptionsParameters.IUserVerificationRequirementStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.admin

Stage interface.

credentialId - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnAuthenticationContext

The credential identifier generated by the authenticator.

credentialIdParameterName - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractKeyInformationFromFormRequest

Name of credential Id parameter.

credentialIdToModify - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

The ID of the credential that is going to be modified.

credentialIdToRemove - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnManagementContext

The ID of a credential that is going to be removed.

credentialIdToRemove - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

The ID of a credential that is going to be removed.

credentialNickname - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

A display friendly nickname for the credential that is to be registered.

credentialNickname - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.Builder

The credential's nickname.

credentialNickname - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

An optional nickname of the credential.

credentialNicknameParameterName - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractNicknameFromFormRequest

Name of the nickname parameter.

credentialPolicy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.CheckCredentialPolicy

The credential policy to check.

credentialPolicy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.FilterCredentialsOnPolicy

The credential policy to check.

CredentialPolicy - Interface in net.shibboleth.idp.plugin.authn.webauthn.policy

An API for applying policy checks to an authentication credential.

CredentialPolicy.CredentialPolicyOutcome - Enum Class in net.shibboleth.idp.plugin.authn.webauthn.policy

Representation of the three outcomes of an CredentialPolicy.

credentialPolicyChain - Variable in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.ChainingCredentialPolicyRule

An ordered chain of authentication credentials policies.

CredentialPolicyOutcome() - Constructor for enum class net.shibboleth.idp.plugin.authn.webauthn.policy.CredentialPolicy.CredentialPolicyOutcome

credentialRecord - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.EnhancedCredentialRecord

The wrapped credential record.

CredentialRecord - Class in net.shibboleth.idp.plugin.authn.webauthn.storage

A credential record used to hold a registered credential.

CredentialRecord(CredentialRecord.Builder) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

Builder constructor.

CredentialRecord.Builder - Class in net.shibboleth.idp.plugin.authn.webauthn.storage

Builder.

CredentialRecord.IBuildStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.storage

Optional builder stage.

CredentialRecord.ICredentialStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.storage

Builder stage.

CredentialRecord.IRegistrationTimeStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.storage

Builder stage.

CredentialRecord.ITransportsStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.storage

Builder stage.

CredentialRecord.IUserIdentityStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.storage

Builder stage.

CredentialRecord.IUsernameStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.storage

Builder stage.

CredentialRegistrationSerializer - Class in net.shibboleth.idp.plugin.authn.webauthn.storage.impl

Serialize the WebauthnPublicKeyCredentialRecord to a string using Hex encoding.

CredentialRegistrationSerializer() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.CredentialRegistrationSerializer

Constructor.

credentialRepository - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.RequireStrongFreshAuthnAccessPredicate

The credential repository.

credentialRepository - Variable in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

The credential repository to store valid credentials in.

credentialRepository - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnAction

The credential repository to store valid credentials in.

credentialRepository - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion

The credential repository to validate assertion responses against.

CredentialRepositoryException - Exception in net.shibboleth.idp.plugin.authn.webauthn.exception

An unchecked exception that is throw when there is an unrecoverable error occurs handling requests to the credential repository.

CredentialRepositoryException() - Constructor for exception net.shibboleth.idp.plugin.authn.webauthn.exception.CredentialRepositoryException

Constructor.

CredentialRepositoryException(Exception) - Constructor for exception net.shibboleth.idp.plugin.authn.webauthn.exception.CredentialRepositoryException

Constructor.

CredentialRepositoryException(String) - Constructor for exception net.shibboleth.idp.plugin.authn.webauthn.exception.CredentialRepositoryException

Constructor.

CredentialRepositoryException(String, Exception) - Constructor for exception net.shibboleth.idp.plugin.authn.webauthn.exception.CredentialRepositoryException

Constructor.

CredentialRequestOptionsParameters - Class in net.shibboleth.idp.plugin.authn.webauthn.authn

The parameters required to build a PublicKeyCredentialRequestOptions.

CredentialRequestOptionsParameters(CredentialRequestOptionsParameters.Builder) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.authn.CredentialRequestOptionsParameters

Constructor.

CredentialRequestOptionsParameters.Builder - Class in net.shibboleth.idp.plugin.authn.webauthn.authn

Builder class.

CredentialRequestOptionsParameters.IAllowCredentialsStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.authn

Stage interface.

CredentialRequestOptionsParameters.IBuildStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.authn

Build the options.

CredentialRequestOptionsParameters.IChallengeStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.authn

Stage interface.

CredentialRequestOptionsParameters.IUserVerificationRequirementStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.authn

Stage interface.

credentials - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository.VersionedCredentialSet

The wrapped set of credentials.

credentialsLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.LabelCredentialRecords

The credential record lookup strategy.

credentialsSet - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.BaseWebAuthnContext

Have the existingCredentials been set.

crls - Variable in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

A List of CRLs to check the revocation status of the metadata signature.

D

DEFAULT_LABEL - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PasskeyCredentialLabeller

The default label to use.

DEFAULT_LABEL - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.SecondFactorOnlyCredentialLabeller

The default label to use for second factor only credentials.

DEFAULT_NICKNAME_FIELD_NAME - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractNicknameFromFormRequest

Default nickname parameter name.

DEFAULT_PARAMETER_NAME - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractKeyInformationFromFormRequest

Default credential Id parameter name.

DEFAULT_PARAMETER_NAME - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractPublicKeyCredentialAttestationFromFormRequest

Default public key credential attestation parameter name.

DEFAULT_PARAMETER_NAME - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractUsernameSearchFromFormRequest

Default credential Id parameter name.

DEFAULT_PARAMETER_NAME - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.ExtractPublicKeyCredentialAssertionFromFormRequest

Default public key credential assertion parameter name.

DefaultChallengeGenerator() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.GenerateServerChallenge.DefaultChallengeGenerator

Constructor.

DefaultCurrentUserComparisonPredicate() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AllowCurrentUserAccessPredicate.DefaultCurrentUserComparisonPredicate

DefaultUserHandleLookupStrategy - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

A strategy to locate the userHandle first from an assertion response and then, if that does not exist, from the userId in the WebAuthn authentication context.

DefaultUserHandleLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.DefaultUserHandleLookupStrategy

DeletePublicKeyCredential - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

An action that removes a credential registration from the credential repository.

DeletePublicKeyCredential() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.DeletePublicKeyCredential

Constructor.

deserialize(long, String, String, String, Long) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.CredentialRegistrationSerializer

discoverable - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.Builder

Is the credential a discoverable type.

discoverable - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

Is the credential a discoverable type (passkey).

displayName - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.Builder

The user.displayName supplied to the authenticator during registration.

displayName - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters

The user.displayName supplied to the authenticator during registration.

displayName - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

The user.displayName supplied to the authenticator during generation of a new credential.

displayNameLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddDisplayName

Strategy used to lookup the user.displayName.

doAccept(AAGUID, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AbstractAuthenticatorPolicyRule

Execute the policy.

doAccept(AAGUID, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AllowlistAuthenticatorPolicy

Execute the policy.

doAccept(AAGUID, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AuthenticatorCapabilitiesPolicyRule

Execute the policy.

doAccept(AAGUID, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.ChainingAuthenticatorPolicyRule

Execute the policy.

doAccept(AAGUID, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.FunctionalAuthenticatorPolicyRule

Execute the policy.

doAccept(WebAuthnAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.BaseWebAuthnAuthenticationContextConsumer

Consume the WebAuthn authentication context.

doAccept(WebAuthnAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.SetPaswordlessUsageToContextConsumer

Consume the WebAuthn authentication context.

doAccept(WebAuthnAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.SetSecondFactorUsageToContextConsumer

Consume the WebAuthn authentication context.

doAccept(WebAuthnAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.SetUsernamelessUsageToContextConsumer

Consume the WebAuthn authentication context.

doAudit(ProfileRequestContext, boolean, String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.AbstractWebAuthnAuditingAction

Do audit extraction and output.

doDestroy() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

doEvaluate(EnhancedCredentialRecord, ProfileRequestContext, WebAuthnAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.AbstractCredentialPolicyRule

Execute the policy.

doEvaluate(EnhancedCredentialRecord, ProfileRequestContext, WebAuthnAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.ChainingCredentialPolicyRule

Execute the policy.

doEvaluate(EnhancedCredentialRecord, ProfileRequestContext, WebAuthnAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.FunctionalCredentialPolicyRule

Execute the policy.

doEvaluate(EnhancedCredentialRecord, ProfileRequestContext, WebAuthnAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.SecondFactorOnlyCredentialPolicyRule

Execute the policy.

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractKeyInformationFromFormRequest

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractUsernameFromRegistrationForm

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateInlineEnrolmentContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateWebAuthnManagementContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateWebAuthnRegistrationContext

doExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnAction

Delegates to AbstractWebAuthnAction.doExecute(ProfileRequestContext, Object).

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.LabelCredentialRecords

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.ExtractUsernameFromForm

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.PopulateWebAuthnAuthenticationContext

doExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion

doExecute(ProfileRequestContext, BaseWebAuthnContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.AddUserVerificationRequirement

Performs this WebAuthn authentication action using the supplied WebAuthn context.

doExecute(ProfileRequestContext, BaseWebAuthnContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.GenerateServerChallenge

Performs this WebAuthn authentication action using the supplied WebAuthn context.

doExecute(ProfileRequestContext, BaseWebAuthnContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.InitializeSubjectCanonicalizationContext

Performs this WebAuthn authentication action using the supplied WebAuthn context.

doExecute(ProfileRequestContext, BaseWebAuthnContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentials

Performs this WebAuthn authentication action using the supplied WebAuthn context.

doExecute(ProfileRequestContext, BaseWebAuthnContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.UpdateWebAuthnContextWithC14nPrincipal

Performs this WebAuthn authentication action using the supplied WebAuthn context.

doExecute(ProfileRequestContext, WebAuthnAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.CheckCredentialPolicy

doExecute(ProfileRequestContext, WebAuthnAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.CheckUserHandleExistsIfNoAllowCredentials

doExecute(ProfileRequestContext, WebAuthnAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.CreatePublicKeyCredentialRequestOptions

doExecute(ProfileRequestContext, WebAuthnAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.EnsureAllowedCredentialsIsEmpty

Performs this WebAuthn authentication action using the supplied WebAuthn context.

doExecute(ProfileRequestContext, WebAuthnAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.ExtractPublicKeyCredentialAssertionFromFormRequest

doExecute(ProfileRequestContext, WebAuthnAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.FilterCredentialsOnPolicy

doExecute(ProfileRequestContext, WebAuthnAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentialsFromUserHandle

Performs this WebAuthn authentication action using the supplied WebAuthn context.

doExecute(ProfileRequestContext, WebAuthnManagementContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AdminDeletePublicKeyCredential

doExecute(ProfileRequestContext, WebAuthnManagementContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractUsernameSearchFromFormRequest

doExecute(ProfileRequestContext, WebAuthnManagementContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.InitializeAdminSubjectCanonicalizationContext

Performs this WebAuthn authentication action using the supplied WebAuthn context.

doExecute(ProfileRequestContext, WebAuthnManagementContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.LookupCredentialsForUser

Performs this WebAuthn authentication action using the supplied WebAuthn context.

doExecute(ProfileRequestContext, WebAuthnManagementContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.UpdateAdminContextWithC14nPrincipal

Performs this WebAuthn authentication action using the supplied WebAuthn context.

doExecute(ProfileRequestContext, WebAuthnRegistrationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddAttestationConveyancePreference

Performs this WebAuthn authentication action using the supplied WebAuthn context.

doExecute(ProfileRequestContext, WebAuthnRegistrationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddAuthenticatorAttachmentRequirement

Performs this WebAuthn authentication action using the supplied WebAuthn context.

doExecute(ProfileRequestContext, WebAuthnRegistrationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddDisplayName

Performs this WebAuthn authentication action using the supplied WebAuthn context.

doExecute(ProfileRequestContext, WebAuthnRegistrationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddNicknameRequired

Performs this WebAuthn authentication action using the supplied WebAuthn context.

doExecute(ProfileRequestContext, WebAuthnRegistrationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddResidentKeyRequirement

Performs this WebAuthn authentication action using the supplied WebAuthn context.

doExecute(ProfileRequestContext, WebAuthnRegistrationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddUserId

Performs this WebAuthn authentication action using the supplied WebAuthn context.

doExecute(ProfileRequestContext, WebAuthnRegistrationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddUserName

Performs this WebAuthn authentication action using the supplied WebAuthn context.

doExecute(ProfileRequestContext, WebAuthnRegistrationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.CheckRegistrationPolicy

doExecute(ProfileRequestContext, WebAuthnRegistrationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.CreatePublicKeyCredentialCreationOptions

doExecute(ProfileRequestContext, WebAuthnRegistrationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.DeletePublicKeyCredential

doExecute(ProfileRequestContext, WebAuthnRegistrationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractNicknameFromFormRequest

doExecute(ProfileRequestContext, WebAuthnRegistrationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractPublicKeyCredentialAttestationFromFormRequest

doExecute(ProfileRequestContext, WebAuthnRegistrationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.StorePublicKeyCredential

doExecute(ProfileRequestContext, WebAuthnRegistrationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.UpdateCredentialNickname

doExecute(ProfileRequestContext, WebAuthnRegistrationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ValidateAuthenticatorAttestationResponse

doExecute(ProfileRequestContext, T) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnAction

Performs this WebAuthn authentication action using the supplied WebAuthn context.

doExecute(RequestContext, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.AbstractWebAuthnAuditingAction

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddDisplayName

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddNicknameRequired

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddUserId

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddUserName

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AdminDeletePublicKeyCredential

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.DeletePublicKeyCredential

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractKeyInformationFromFormRequest

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.LabelCredentialRecords

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.LookupCredentialsForUser

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.RequireStrongFreshAuthnAccessPredicate

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.StorePublicKeyCredential

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.UpdateCredentialNickname

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.ChainingAuthenticatorPolicyRule

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnAction

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.CheckCredentialPolicy

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.ExtractPublicKeyCredentialAssertionFromFormRequest

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.GenerateServerChallenge

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentials

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentialsFromUserHandle

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.ChainingCredentialPolicyRule

doInitialize() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

doLookup(BaseWebAuthnContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.audit.AbstractWebAuthnAuditExtractor

Implemented to perform the actual lookup.

doLookup(BaseWebAuthnContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.WebAuthnFlowModeAuditExtractor

Implemented to perform the actual lookup.

doLookup(BaseWebAuthnContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.WebAuthnUserIdAuditExtractor

Implemented to perform the actual lookup.

doLookup(BaseWebAuthnContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.WebAuthnUsernameAuditExtractor

Implemented to perform the actual lookup.

doLookup(BaseWebAuthnContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.WebAuthnUserVerificationAuditExtractor

Implemented to perform the actual lookup.

doLookup(WebAuthnManagementContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.audit.AbstractWebAuthnManagementAuditExtractor

Implemented to perform the actual lookup.

doLookup(WebAuthnManagementContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.WebAuthnCredentialToRemoveAuditExtractor

Implemented to perform the actual lookup.

doLookup(WebAuthnManagementContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.WebAuthnSearchUserAuditExtractor

Implemented to perform the actual lookup.

doLookup(WebAuthnRegistrationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.audit.AbstractWebAuthnRegistrationAuditExtractor

Implemented to perform the actual lookup.

doLookup(WebAuthnRegistrationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.WebAuthnUserCredentialAddedAuditExtractor

Implemented to perform the actual lookup.

doLookup(WebAuthnRegistrationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.WebAuthnUserCredentialToRemoveAuditExtractor

Implemented to perform the actual lookup.

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractUsernameFromRegistrationForm

doPreExecute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnAction

doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.ExtractUsernameFromForm

doPreExecute(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion

doPreExecute(ProfileRequestContext, WebAuthnAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.CheckCredentialPolicy

Performs this authentication action's pre-execute step.

doPreExecute(ProfileRequestContext, WebAuthnAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.CheckUserHandleExistsIfNoAllowCredentials

Performs this authentication action's pre-execute step.

doPreExecute(ProfileRequestContext, WebAuthnAuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentialsFromUserHandle

Performs this authentication action's pre-execute step.

doPreExecute(ProfileRequestContext, WebAuthnRegistrationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddDisplayName

Performs this authentication action's pre-execute step.

doPreExecute(ProfileRequestContext, WebAuthnRegistrationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddUserId

Performs this authentication action's pre-execute step.

doPreExecute(ProfileRequestContext, WebAuthnRegistrationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddUserName

Performs this authentication action's pre-execute step.

doPreExecute(ProfileRequestContext, WebAuthnRegistrationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.CheckRegistrationPolicy

Performs this authentication action's pre-execute step.

doPreExecute(ProfileRequestContext, WebAuthnRegistrationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ValidateAuthenticatorAttestationResponse

Performs this authentication action's pre-execute step.

doPreExecute(ProfileRequestContext, T) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnAction

Performs this authentication action's pre-execute step.

E

enableCredProperties - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.Builder

Enable the credential properties extenions.

enableCredProperties - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters

Enable the credential properties extensions.

enabled - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateInlineEnrolmentContext

Is inline enrolment enabled? Enabled by default.

enabled - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsSecondFactor

Determines if 2FA support should be enabled (true) or disabled (false).

enabled - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.UsernamelessFlowEnabled

Determines if we want a usernameless flow (true), or a passwordless flow (false).

enhancedCredentialRecord(Collection<CredentialRecord>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnAction

Create EnhancedCredentialRecords from the given CredentialRecords and add any appropriate metadata to each record.

EnhancedCredentialRecord - Class in net.shibboleth.idp.plugin.authn.webauthn.storage

An ephemeral wrapper class that holds a CredentialRecord and any associated metadata.

EnhancedCredentialRecord(CredentialRecord) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.storage.EnhancedCredentialRecord

Constructor.

EnsureAllowedCredentialsIsEmpty - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

An action that blanks any existing registered credentials in the WebAuthn authentication context.

EnsureAllowedCredentialsIsEmpty() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.EnsureAllowedCredentialsIsEmpty

Constructor.

equals(Object) - Method in class net.shibboleth.idp.plugin.authn.webauthn.principal.WebAuthnUserIdPrinicpal

equals(Object) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

evaluate(AAGUID, ProfileRequestContext) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.admin.policy.AuthenticatorPolicy

Execute and evaluate the policy.

evaluate(AAGUID, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AbstractAuthenticatorPolicyRule

Execute and evaluate the policy.

evaluate(EnhancedCredentialRecord, ProfileRequestContext) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.policy.CredentialPolicy

Execute the policy.

evaluate(EnhancedCredentialRecord, ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.AbstractCredentialPolicyRule

Execute the policy.

excludeCredentials - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.Builder

Credentials that have already been registered with the IdP.

excludeCredentials - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters

Credentials that have already been registered with the IdP.

ExistingAuthenticationCredentialsLookupStrategy - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

A credential lookup function that returns the list of existing credentials from the WebAuthnAuthenticationContext.

ExistingAuthenticationCredentialsLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.ExistingAuthenticationCredentialsLookupStrategy

existingCredentials - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.BaseWebAuthnContext

Credentials that have already been registered with the IdP.

ExistingRegistrationCredentialsLookupStrategy - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

A credential lookup function that returns the list of existing credentials from the WebAuthnRegistrationContext.

ExistingRegistrationCredentialsLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExistingRegistrationCredentialsLookupStrategy

expectedLegalHeaders - Variable in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

The expected set of legal headers on the FIDO metadata blob.

ExtractKeyInformationFromFormRequest - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

An action that extracts the credential ID for from the incoming HTTP request and uses a BiConsumer to set it back onto an appropriate context.

ExtractKeyInformationFromFormRequest() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractKeyInformationFromFormRequest

Constructor.

ExtractNicknameFromFormRequest - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

An action that extracts the key nickname from the incoming HTTP request.

ExtractNicknameFromFormRequest() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractNicknameFromFormRequest

Constructor.

ExtractPublicKeyCredentialAssertionFromFormRequest - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

An action that extracts the PublicKeyCredential containing the authenticator assertion response from the incoming HTTP request.

ExtractPublicKeyCredentialAssertionFromFormRequest() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.ExtractPublicKeyCredentialAssertionFromFormRequest

Constructor.

ExtractPublicKeyCredentialAttestationFromFormRequest - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

An action that extracts the PublicKeyCredential containing the authenticator attestation response from the incoming HTTP request.

ExtractPublicKeyCredentialAttestationFromFormRequest() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractPublicKeyCredentialAttestationFromFormRequest

Constructor.

ExtractUsernameFromForm - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

An action to populate a username into the BaseWebAuthnContext.

ExtractUsernameFromForm() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.ExtractUsernameFromForm

Constructor.

ExtractUsernameFromRegistrationForm - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

An action to populate a username into the BaseWebAuthnContext.

ExtractUsernameFromRegistrationForm() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractUsernameFromRegistrationForm

Constructor.

ExtractUsernameSearchFromFormRequest - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

An action that extracts the username search value from the incoming HTTP request.

ExtractUsernameSearchFromFormRequest() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractUsernameSearchFromFormRequest

Constructor.

F

fidoMetadataService - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AbstractAuthenticatorPolicyRule

FIDO metadata service resolver.

fidoMetadataService - Variable in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

If configured, a FIDO metadata service resolver.

fidoMetadataService - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnAction

Optional FIDO metadata service resolver.

fidoMetadataService - Variable in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.AbstractCredentialPolicyRule

FIDO metadata service resolver.

FidoMetadataServiceFactory - Class in net.shibboleth.idp.plugin.authn.webauthn.metadata.impl

Spring factory bean for creating a FidoMetadataService.

FidoMetadataServiceFactory() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

Constructor.

FilterCredentialsOnPolicy - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

A policy engine that filters the set of existing credentials held in the context based on the policy.

FilterCredentialsOnPolicy() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.FilterCredentialsOnPolicy

Constructor.

FLOW_MODE - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.audit.WebAuthnAuditFields

What mode produced the final result e.g.

formatDiscoverable(Optional<Boolean>) - Static method in class net.shibboleth.idp.plugin.authn.webauthn.impl.WebAuthnEncoder

Format the isDiscoverable flag for display.

formatInstant(Instant) - Static method in class net.shibboleth.idp.plugin.authn.webauthn.impl.WebAuthnEncoder

Format the given instant into a display friendly string.

formatInstant(Instant, String) - Static method in class net.shibboleth.idp.plugin.authn.webauthn.impl.WebAuthnEncoder

Format the given instant into a display friendly string using the given pattern.

formatInstant(Instant, String, String) - Static method in class net.shibboleth.idp.plugin.authn.webauthn.impl.WebAuthnEncoder

Format the given instant into a display friendly string using the given pattern and time zone.

formatInstant(Instant, DateTimeFormatter) - Static method in class net.shibboleth.idp.plugin.authn.webauthn.impl.WebAuthnEncoder

Format the given instant into a display friendly string using the given formatter.

formatTransports(Set<AuthenticatorTransport>) - Static method in class net.shibboleth.idp.plugin.authn.webauthn.impl.WebAuthnEncoder

Convert a set of transports into a CSV string.

foundCredentials - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnManagementContext

The located set of credentials registered for the given searchUsername.

FunctionalAuthenticatorPolicyRule - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl

A AuthenticatorPolicy that evaluates a BiFunction to determine if the authenticator that created the credential registration should be accepted or rejected.

FunctionalAuthenticatorPolicyRule() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.FunctionalAuthenticatorPolicyRule

Constructor.

FunctionalCredentialPolicyRule - Class in net.shibboleth.idp.plugin.authn.webauthn.policy.impl

A CredentialPolicy that evaluates a BiFunction to determine if a credential should be accepted or rejected.

FunctionalCredentialPolicyRule() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.FunctionalCredentialPolicyRule

Constructor.

FunctionalRuleContext - Class in net.shibboleth.idp.plugin.authn.webauthn.policy.impl

A context class that provides access to the ProfileRequestContext and FidoMetadataService from BiFunctions that implement registration or authentication rules.

FunctionalRuleContext(ProfileRequestContext, FidoMetadataService) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.FunctionalRuleContext

Constructor.

G

GenerateServerChallenge - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

An action to generate an appropriate server challenge for use in either the PublicKeyCredentialCreationOptions or the PublicKeyCredentialRequestOptions.

GenerateServerChallenge() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.GenerateServerChallenge

Constructor.

GenerateServerChallenge.DefaultChallengeGenerator - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

Default challenge generator that generates a 32 byte randomized challenge of sufficient entropy.

genericMessageID - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.RegistrationErrorMessageLookupFunction

Message ID to use for generic messages.

genericMessageID - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.RegistrationInfoMessageLookupFunction

Message ID to use for generic messages.

genericMessageID - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.WebAuthnErrorMessageLookupFunction

Message ID to use for generic messages.

getAaguid() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.RegistrationResult

Get the AAGUID of the authenticator.

getAaguid() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

Get the AAGUID of the authenticator that created this credential.

getAaguidMetadata(AAGUID) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnAction

Get basic authenticator/provider information from the AAGUID.

getAaguidService() - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnAction

Get the supplementary description service which contains descriptions and icons for passkey providers not in the MDS feed.

getAllowCredentials() - Method in class net.shibboleth.idp.plugin.authn.webauthn.authn.CredentialRequestOptionsParameters

Get the set of credentials that are acceptable to the IdP.

getAllRegistrations() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

Get all credential registrations known to the repository.

getAllRegistrations() - Method in interface net.shibboleth.idp.plugin.authn.webauthn.storage.WebAuthnCredentialRepository

Get all credential registrations known to the repository.

getAttestationConveyancePreference() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters

Get the attestation conveyance preference.

getAttestationConveyancePreference() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

Get the attestation conveyance preference.

getAttestationType() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.RegistrationResult

The attestation type that was used for this credential.

getAttribute(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.AbstractAttributeContextUserIdentityStrategy

Get the attribute from either the filtered or unfiltered set of attributes with the given attribute Id from the AttributeContext (if it exists).

getAttributeId() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.AbstractAttributeContextUserIdentityStrategy

Get the attribute Id to extract the value from.

getAuditContext(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.AbstractWebAuthnAuditingAction

Create or locate the AuditContext via the defined strategy.

getAuditFields(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.AbstractWebAuthnAuditingAction

Subclasses can override this method to supply additional audit fields to store.

getAuthenticatorAttachment() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters

Get the authenticator attachment requirement.

getAuthenticatorAttachmentRequirement() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

Get the authenticator attachment requirement.

getAuthenticatorDescription() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.EnhancedCredentialRecord

Get the human-readable, short description of the authenticator (in English) iff either; the attestation metadata exists or aaguid metadata exists (preferencing the FIDO2 attestation metadata).

getAuthenticatorMetadata() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.EnhancedCredentialRecord

Get the authenticator metadata.

getAuthenticatorMetadata(ByteArray) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnAction

Find FIDO2 MDS metadata for the authenticator.

getCacheFile() - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

Get where to cache the metadata blob.

getChallenge() - Method in class net.shibboleth.idp.plugin.authn.webauthn.authn.BaseOptionsParameters

Get the challenge.

getClassifiedErrors() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationErrorContext

Get a mutable collection of error "tokens" associated with the context.

getClassifiedMessage(MessageSourceAccessor, String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.RegistrationErrorMessageLookupFunction

Get classified message.

getClassifiedMessage(MessageSourceAccessor, String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.RegistrationInfoMessageLookupFunction

Get classified message.

getClassifiedMessage(MessageSourceAccessor, String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.WebAuthnErrorMessageLookupFunction

Get classified message.

getClassifiedMessages() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationInformationContext

Get a mutable collection of message "tokens" associated with the context.

getCredential() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.RegistrationResult

Get the attestation response.

getCredential() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

Get the registered credential.

getCredentialId() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnAuthenticationContext

Get the credential Id.

getCredentialIdBase64() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

Get the credential ID as a base64 encoded string.

getCredentialIdBase64Url() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

Get the credential ID as a base64URL encoded string.

getCredentialIdHex() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

Get the credential ID as a Hex encoded string.

getCredentialIdsForUsername(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

getCredentialIdToModify() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

Get the ID of the credential that is going to be modified.

getCredentialIdToRemove() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnManagementContext

Get the ID of the credential that is going to be removed.

getCredentialIdToRemove() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

Get the ID of the credential that is going to be removed.

getCredentialNickname() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

Get the display friendly nickname for this credential.

getCredentialRecord() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.EnhancedCredentialRecord

Get the wrapped credential record.

getCredentialRepository() - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

Get the credential repository used to store the valid webauthn credential.

getCredentialRepository() - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnAction

Get the credential repository used to store WebAuthn credentials.

getCredentials() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository.VersionedCredentialSet

Get the wrapped set of credentials.

getCrls() - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

Get the CRLs to use to check the revocation status of the metadata signature.

getDisplayName() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters

Get the user.displayName.

getDisplayName() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

Get the human-palatable name for the user account.

getEntry(AAGUID) - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.PasskeyAaguidMetadataService

Get a metadata entry based on the AAGUID.

getEntry(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.PasskeyAaguidMetadataService

Get a metadata entry based on the AAGUID as a string.

getExcludeCredentials() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters

Get the set of credentials that have already been registered with the IdP.

getExistingCredentials() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.BaseWebAuthnContext

Get the user's credentials that have already been registered with the credential repository.

getExpectedLegalHeaders() - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

Get the expected legal headers on the FIDO metadata blob.

getFidoMetadataService() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AbstractAuthenticatorPolicyRule

Get the metadata service to use.

getFidoMetadataService() - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

Get the FIDO Alliance metadata service resolver to use as the attestation trust source.

getFidoMetadataService() - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnAction

Get the FIDO Alliance metadata service resolver to use as the attestation trust source.

getFidoMetadataService() - Method in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.AbstractCredentialPolicyRule

Get the metadata service to use.

getFoundCredentials() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnManagementContext

Get the credentials found to belong to the given searchUsername.

getHttpServletRequest() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.UsernameLookupFromHttpRequest

Get the current HTTP request if available.

getIcon() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.EnhancedCredentialRecord

Get a data: URL encoded PNG icon for the authenticator.

getIconDark() - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.AaguidEntry

Get the base64 SVG data encoded dark icon for this provider.

getIconLight() - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.AaguidEntry

Get the base64 SVG data encoded light icon for this provider.

getKeyId() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.RegistrationResult

Get the credential ID and transports of the created credential.

getLabels() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.EnhancedCredentialRecord

Get labels about the credential or the authenticator that created it.

getLastClassifiedError() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationErrorContext

Gets the last classified error added, or null if none.

getLastClassifiedMessage() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationInformationContext

Gets the last classified message added, or null if none.

getLastUsedTime() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

Get the time the credential was last used for authentication.

getMetadataBlobFile() - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

Get the metadata blob file.

getMetadataBlobUrl() - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

Get the URL of the metadata blob file to fetch.

getMetadataService() - Method in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.FunctionalRuleContext

Get the metadata service.

getName() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters

Get the WebAuthn user.name.

getName() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

The WebAuthn user.name of the user to use during credential registration.

getName() - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.AaguidEntry

Get the name of the authenticator/provider.

getName() - Method in class net.shibboleth.idp.plugin.authn.webauthn.principal.WebAuthnUserIdPrinicpal

getNickname() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

Get the nickname of this credential.

getObject() - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

getObject() - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

getObject() - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.PasskeyAaguidMetadataFactory

getObjectType() - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

getObjectType() - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

getObjectType() - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.PasskeyAaguidMetadataFactory

getOrigins() - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

Get the allowable origins for this Relying Party.

getPasskeyAaguidFile() - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.PasskeyAaguidMetadataFactory

Get the passkey Aaguid JSON file.

getPreferredPublickeyParams() - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

Get the ordered list of preferred public key credential parameters to send to the authenticator during registration.

getPrincipalName() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnManagementContext

Get the canonical principal name of the authenticated subject.

getProfileRequestContext() - Method in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.FunctionalRuleContext

Get the profile request context.

getPublicKeyCose() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.RegistrationResult

Get the public key of the created credential in COSE format.

getPublicKeyCredentialAssertionResponse() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnAuthenticationContext

Get the public key credential with authenticator assertion response, from the authentication ceremony.

getPublicKeyCredentialAttestationResponse() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

Get the public key credential containing the attestation response as a result of creating a new credential.

getPublicKeyCredentialCreationOptions() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

Get the options used to create public key credentials.

getPublicKeyCredentialRequestOptions() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnAuthenticationContext

Get the public key credential request options for generating an authentication assertion.

getRawSearchUsername() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnManagementContext

Gets the raw username entered by the admin to search for.

getRawUsername() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.BaseWebAuthnContext

Gets the raw username entered by the user in one of the username collection steps.

getRegistrationByUserHandleAndCredentialId(ByteArray, ByteArray) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

Get the credential belonging to the user by userHandle and credentialID.

getRegistrationByUserHandleAndCredentialId(ByteArray, ByteArray) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.storage.WebAuthnCredentialRepository

Get the credential belonging to the user by userHandle and credentialID.

getRegistrationByUsernameAndCredentialId(String, ByteArray) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

Get the credential belonging to the user by its credential identifier.

getRegistrationByUsernameAndCredentialId(String, ByteArray) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.storage.WebAuthnCredentialRepository

Get the credential belonging to the user by its credential identifier.

getRegistrationResult() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

Get the credential public key which is the result of registration of a new key pair generated by the authenticator.

getRegistrationsByUserHandle(ByteArray) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

Get registrations from any user by userHandle.

getRegistrationsByUsername(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

Get credential registrations by username.

getRegistrationsByUsername(String) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.storage.WebAuthnCredentialRepository

Get credential registrations by username.

getRegistrationsByUsernameWithVersion(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

Get credential registrations by username and return the storage record version.

getRegistrationTime() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

Get the time the registration took place.

getRelyingPartyId() - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

Get the relying party identifier.

getRelyingPartyName() - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

Get the relying party name.

getResidentKeyRequirement() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters

Get the resident key requirement.

getResidentKeyRequirement() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

Get the ResidentKey requirement.

getSearchUsername() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnManagementContext

Get the username of the user to find and manage credentials for.

getServerChallenge() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.BaseWebAuthnContext

Get the server challenge sent to (or to send to) the authenticator.

getSsoUrl() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.InlineEnrolmentContext

Get the URL to redirect the user to after the flow has ended.

getTransports() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

Get the set of transports the authenticator can use to communicate with the client.

getTrustRootFile() - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

Get the trust root file.

getUserHandleForUsername(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

getUserId() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters

Get the user.id.

getUserId() - Method in class net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult

Get the user.id of the authenticated user.

getUserId() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.BaseWebAuthnContext

Get the WebAuthn user.id used to map public key credentials to the user's account.

getUserIdentity() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

Get the identity of the user this credential has been registered for.

getUsername() - Method in class net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult

Get the username of the authenticated user.

getUsername() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.BaseWebAuthnContext

Gets the internal IdP username.

getUsername() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

Get the username of the user to the IdP.

getUsernameForUserHandle(ByteArray) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

getUsernameFromForm() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractUsernameFromRegistrationForm

Gets the username from a form submission.

getUsernameFromForm() - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.ExtractUsernameFromForm

Gets the username from a form submission.

getUserVerificationRequirement() - Method in class net.shibboleth.idp.plugin.authn.webauthn.authn.BaseOptionsParameters

Get the user verification requirement.

getUserVerificationRequirement() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.BaseWebAuthnContext

Get the user verification requirement.

getVersion() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository.VersionedCredentialSet

Get the storage record version.

getWebAuthnClient() - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnAction

Get the WebAuthn client used to handle registration and authentication ceremonies.

getWebAuthnUserName() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

Get the WebAuthn user.name of the user identity registered.

H

hashCode() - Method in class net.shibboleth.idp.plugin.authn.webauthn.principal.WebAuthnUserIdPrinicpal

hashCode() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

httpServletRequestSupplier - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.UsernameLookupFromHttpRequest

Supplier for the Current HTTP request, if available.

I

iconDark - Variable in class net.shibboleth.idp.plugin.authn.webauthn.metadata.AaguidEntry

The base64 SVG data encoded dark icon for this provider.

iconLight - Variable in class net.shibboleth.idp.plugin.authn.webauthn.metadata.AaguidEntry

The base64 SVG data encoded light icon for this provider.

idGeneratorStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.RandomUserIdGenerator

The user.id generation strategy.

IdPStorageServiceCredentialRespository - Class in net.shibboleth.idp.plugin.authn.webauthn.storage.impl

A CredentialRepository adaptor for the Shibboleth StorageService.

IdPStorageServiceCredentialRespository() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

IdPStorageServiceCredentialRespository.VersionedCredentialSet - Class in net.shibboleth.idp.plugin.authn.webauthn.storage.impl

A class to wrap a set of deserialized credentials alongside the storage record version reported by the storage service.

IGNORE - Enum constant in enum class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.AuthenticatorPolicy.AuthenticatorPolicyOutcome

The policy was not active and should be ignored.

IGNORE - Enum constant in enum class net.shibboleth.idp.plugin.authn.webauthn.policy.CredentialPolicy.CredentialPolicyOutcome

The policy was not active and should be ignored.

InitializeAdminSubjectCanonicalizationContext - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

An action that creates a new SubjectCanonicalizationContext out of the search username in the admin context, ready for the c14n flows to canonicalize.

InitializeAdminSubjectCanonicalizationContext() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.InitializeAdminSubjectCanonicalizationContext

Constructor.

InitializeSubjectCanonicalizationContext - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

An action that creates a new SubjectCanonicalizationContext out of the username in the base context, ready for the c14n flows to canonicalize.

InitializeSubjectCanonicalizationContext() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.InitializeSubjectCanonicalizationContext

Constructor.

inlineEnrolementContextCreationStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.InlineEnrolmentRedirectFunction

Strategy used to locate the InlineEnrolmentContext.

inlineEnrolementContextCreationStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateInlineEnrolmentContext

Strategy used to locate or create the InlineEnrolmentContext to populate.

InlineEnrolmentContext - Class in net.shibboleth.idp.plugin.authn.webauthn.context

A context that holds information about a resumable SSO flow.

InlineEnrolmentContext() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.context.InlineEnrolmentContext

InlineEnrolmentRedirectFunction - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

A function that generates a redirect URL to return the user to a resource relative to the server root.

InlineEnrolmentRedirectFunction() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.InlineEnrolmentRedirectFunction

Constructor.

INVALID_ADMIN_ACTION - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.WebAuthnRegistrationEventIds

A general event ID that is signalled if there is an issue performing an 'admin' action (e.g., registration or user management).

INVALID_MANAGEMENT_CTX - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.WebAuthnRegistrationEventIds

Management context is invalid.

INVALID_REGISTRATION - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.WebAuthnRegistrationEventIds

Registration failed.

INVALID_REGISTRATION_CTX - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.WebAuthnRegistrationEventIds

Registration context is invalid.

IsAdminUsernameCollectionEnabled - Class in net.shibboleth.idp.plugin.authn.webauthn.context.logic

A predicate that determines if username collection is required as a first step to the registration process.

IsAdminUsernameCollectionEnabled() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsAdminUsernameCollectionEnabled

isAllowOriginPort() - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

Is origin matching relaxed to allow any port number?

isAllowOriginSubdomain() - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

Is origin matching relaxed to allow any subdomain?

isAllowUntrustedAttestation() - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

Allow untrusted attestations?

isAttestationTrusted() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.RegistrationResult

Is the attestation signature valid.

isAuthenticatorMetadataAttached(EnhancedCredentialRecord) - Static method in class net.shibboleth.idp.plugin.authn.webauthn.impl.WebAuthnEncoder

Does the credential have attached metadata.

isClassifiedError(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationErrorContext

Check for the presence of a particular error condition in the context.

isClassifiedMessage(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationInformationContext

Check for the presence of a particular message condition in the context.

isDiscoverable() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.RegistrationResult

Try to determine if this credential is a discoverable (passkey) type by inspecting the ResidentKey flag inside the credential properties extension.

isDiscoverable() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

Is the created credential discoverable?

IsDiscoverableCredentialRequired - Class in net.shibboleth.idp.plugin.authn.webauthn.context.logic

A predicate that determines if the authentication ceremony requires a discoverable credential (ResidentKey) supplied by the authenticator, or if we have a username to determine which credentials to use from the IdP.

IsDiscoverableCredentialRequired() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsDiscoverableCredentialRequired

isEnableCredProperties() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters

Is the credential properties extension enabled?

isNicknameRequired() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

Is nickname collection required or not.

isPasswordless() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnAuthenticationContext

Is this authentication part of a passwordless flow/mode.

IsPasswordlessAuthenticationMode - Class in net.shibboleth.idp.plugin.authn.webauthn.context.logic

A predicate that lookups into the context to find if the authentication flow is passwordless.

IsPasswordlessAuthenticationMode() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsPasswordlessAuthenticationMode

isSecondFactor() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnAuthenticationContext

Is this authentication part of a second factor flow/mode?

IsSecondFactor - Class in net.shibboleth.idp.plugin.authn.webauthn.context.logic

A predicate that determines if the authentication flow is being used as a second factor of authentication, and not a first (and possibly only) factor.

IsSecondFactor() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsSecondFactor

Constructor.

IsSecondFactorAuthenticationMode - Class in net.shibboleth.idp.plugin.authn.webauthn.context.logic

A predicate that lookups into the context to find if the authentication flow is acting as a second factor.

IsSecondFactorAuthenticationMode() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsSecondFactorAuthenticationMode

isSignatureCounterValid() - Method in class net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult

Is the signature counter valid?

isSingleton() - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

isStronglyAuthenticated() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnGuardContext

Did the user performed some kind of 'strong' authentication? (as determined by the flow)

isSuccess() - Method in class net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult

Is this assertion valid?

IsUsernameCollectionRequired - Class in net.shibboleth.idp.plugin.authn.webauthn.context.logic

A predicate that determines if a username already exists in the authentication context.

IsUsernameCollectionRequired() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsUsernameCollectionRequired

isUsernameless() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnAuthenticationContext

Is this authentication part of a usernameless flow/mode?

IsUsernamelessAuthenticationMode - Class in net.shibboleth.idp.plugin.authn.webauthn.context.logic

A predicate that lookups into the context to find if the authentication flow is usernameless.

IsUsernamelessAuthenticationMode() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsUsernamelessAuthenticationMode

isUserVerified() - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.RegistrationResult

Was the user verified by a suitable authorization gesture during the registration ceremony?

isUserVerified() - Method in class net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult

Was the user verified by the authenticator during authentication?

isUserVerified() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

Was user verification performed during registration?

isUseUnfilteredAttributes() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.AbstractAttributeContextUserIdentityStrategy

Get whether to source the input attributes from the unfiltered set.

isVerifyDownloadOnly() - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

Only verify the signature in the blob file from a fresh download?

isWebAuthnAvailable() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.BaseWebAuthnContext

Does the user have existing, registered, credentials available to use for authentication.

J

jsonMapper - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.CredentialRegistrationSerializer

The CBOR friendly json mapper.

L

label - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PasskeyCredentialLabeller

The label to use.

label - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.SecondFactorOnlyCredentialLabeller

The label to use for second factor only credentials.

LabelCredentialRecords - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

Use the labelling function to add labels to each EnhancedCredentialRecord found in the context.

LabelCredentialRecords() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.LabelCredentialRecords

Constructor.

labeller - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.LabelCredentialRecords

The labeller used to generate labels for the credential, for display only.

labellers - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ChainingCredentialLabeller

The chain of credential labellers to use.

labels - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.EnhancedCredentialRecord

Labels that can be set about the credential or authenticator that created it.

lastUsedTime - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.Builder

The time the credential was last used for authentication.

lastUsedTime - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

The time the credential was last used for authentication.

loadCrls() - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

Load CRLs from the given set of CRL resources into a collection of CRL objects.

loadMetadataJwt(Resource) - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

Load the given metadata blob file into a String.

lock - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

A shared lock to synchronize access to read and write operations.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddAttestationConveyancePreference

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddAuthenticatorAttachmentRequirement

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddDisplayName

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddNicknameRequired

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddResidentKeyRequirement

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddUserId

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddUserName

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AdminDeletePublicKeyCredential

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AllowCurrentUserAccessPredicate.DefaultCurrentUserComparisonPredicate

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AllowCurrentUserAccessPredicate

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.CheckRegistrationPolicy

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.CreatePublicKeyCredentialCreationOptions

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.DeletePublicKeyCredential

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractKeyInformationFromFormRequest

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractNicknameFromFormRequest

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractPublicKeyCredentialAttestationFromFormRequest

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractUsernameFromRegistrationForm

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractUsernameSearchFromFormRequest

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.InitializeAdminSubjectCanonicalizationContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.LabelCredentialRecords

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.LookupCredentialsForUser

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ManagementContextCredentialRemovalConsumer

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateInlineEnrolmentContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateWebAuthnManagementContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateWebAuthnRegistrationContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.RandomUserIdGenerator

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.RegistrationContextCredentialRemovalConsumer

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.RegistrationContextCredentialToModifyConsumer

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.RequireStrongFreshAuthnAccessPredicate

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.SecondFactorOnlyCredentialLabeller

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.StorePublicKeyCredential

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.UpdateAdminContextWithC14nPrincipal

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.UpdateCredentialNickname

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ValidateAuthenticatorAttestationResponse

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AbstractAuthenticatorPolicyRule

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AllowlistAuthenticatorPolicy

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AuthenticatorCapabilitiesPolicyRule

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.ChainingAuthenticatorPolicyRule

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.FunctionalAuthenticatorPolicyRule

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebAuthnAuthenticationClient

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsAdminUsernameCollectionEnabled

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsDiscoverableCredentialRequired

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsPasswordlessAuthenticationMode

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsSecondFactor

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsSecondFactorAuthenticationMode

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsUsernameCollectionRequired

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsUsernamelessAuthenticationMode

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.UsernamelessFlowEnabled

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.AbstractAttributeContextUserIdentityStrategy

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.AttributeContextByteArrayLookupStrategy

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.AttributeContextStringLookupStrategy

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.UsernameLookupFromRegistrationContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.UsernameLookupFromSubjectContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnAction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnExtractionAction

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.AddUserVerificationRequirement

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.CheckCredentialPolicy

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.CheckUserHandleExistsIfNoAllowCredentials

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.CreatePublicKeyCredentialRequestOptions

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.DefaultUserHandleLookupStrategy

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.EnsureAllowedCredentialsIsEmpty

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.ExtractPublicKeyCredentialAssertionFromFormRequest

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.ExtractUsernameFromForm

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.FilterCredentialsOnPolicy

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.GenerateServerChallenge.DefaultChallengeGenerator

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.GenerateServerChallenge

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.InitializeSubjectCanonicalizationContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentials

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentialsFromUserHandle

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.PopulateWebAuthnAuthenticationContext

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.UpdateWebAuthnContextWithC14nPrincipal

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.AbstractCredentialPolicyRule

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.ChainingCredentialPolicyRule

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.FunctionalCredentialPolicyRule

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.SecondFactorOnlyCredentialPolicyRule

Class logger.

log - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

Class logger.

LOG - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.WebAuthnEncoder

Class logger.

logRegistration(WebAuthnRegistrationContext, String, RegistrationResult) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.StorePublicKeyCredential

Log a successful registration event.

lookup(ByteArray, ByteArray) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

lookupAll(ByteArray) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

LookupCredentialsForUser - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

An action that lookups registered credentials for a username contained in the WebAuthn management context and sets them back onto the context.

LookupCredentialsForUser() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.LookupCredentialsForUser

Constructor.

LookupRegisteredCredentials - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

An action that lookups existing registered credentials based on the username contained in the WebAuthn context and sets them back onto the context.

LookupRegisteredCredentials() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentials

Constructor.

LookupRegisteredCredentialsFromUserHandle - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

An action that lookups existing registered credentials from the userHandle supplied in the authenticators assertion response and sets them back onto the context.

LookupRegisteredCredentialsFromUserHandle() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentialsFromUserHandle

Constructor.

lowercase - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnExtractionAction

Convert to lowercase prior to transforms?

M

ManagementContextCredentialRemovalConsumer - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

A BiConsumer that sets the credential ID to remove onto the WebAuthn management context.

ManagementContextCredentialRemovalConsumer() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ManagementContextCredentialRemovalConsumer

Constructor.

metadata - Variable in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.PasskeyAaguidMetadataService

The metadata.

metadataBlobFile - Variable in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

The File location of the metadata blob.

metadataBlobUrl - Variable in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

The HTTPS location of the metadata blob to download.

metadataService - Variable in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.FunctionalRuleContext

The stored FIDO metadata service.

MultiPredicateAccessPredicate - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

Access control implementation based on a List of predicates over a ProfileRequestContext.

MultiPredicateAccessPredicate(List<Predicate<ProfileRequestContext>>) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.MultiPredicateAccessPredicate

Constructor.

N

name - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.Builder

The user.name.

name - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters

The user.name of the user identity.

name - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

The WebAuthn user.name of the user.

name - Variable in class net.shibboleth.idp.plugin.authn.webauthn.metadata.AaguidEntry

The name of the authenticator/provider.

net.shibboleth.idp.plugin.authn.webauthn - package net.shibboleth.idp.plugin.authn.webauthn

Shibboleth WebAuthn authentication implementation.

net.shibboleth.idp.plugin.authn.webauthn.admin - package net.shibboleth.idp.plugin.authn.webauthn.admin

Administrative flow APIs for WebAuthn.

net.shibboleth.idp.plugin.authn.webauthn.admin.impl - package net.shibboleth.idp.plugin.authn.webauthn.admin.impl

This package has audit functions for WebAuthn.

net.shibboleth.idp.plugin.authn.webauthn.admin.policy - package net.shibboleth.idp.plugin.authn.webauthn.admin.policy

This package contains the APIs for registration policies.

net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl - package net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl

This package has registration policy implementations.

net.shibboleth.idp.plugin.authn.webauthn.audit - package net.shibboleth.idp.plugin.authn.webauthn.audit

Audit function APIs for WebAuthn.

net.shibboleth.idp.plugin.authn.webauthn.audit.impl - package net.shibboleth.idp.plugin.authn.webauthn.audit.impl

This package has administrative functions for WebAuthn.

net.shibboleth.idp.plugin.authn.webauthn.authn - package net.shibboleth.idp.plugin.authn.webauthn.authn

This package has authentication APIs for WebAuthn.

net.shibboleth.idp.plugin.authn.webauthn.client - package net.shibboleth.idp.plugin.authn.webauthn.client

Client APIs for WebAuthn.

net.shibboleth.idp.plugin.authn.webauthn.client.impl - package net.shibboleth.idp.plugin.authn.webauthn.client.impl

This package has WebAuthn client implementations for WebAuthn.

net.shibboleth.idp.plugin.authn.webauthn.context - package net.shibboleth.idp.plugin.authn.webauthn.context

Context APIs for WebAuthn.

net.shibboleth.idp.plugin.authn.webauthn.context.logic - package net.shibboleth.idp.plugin.authn.webauthn.context.logic

Context logic APIs for WebAuthn.

net.shibboleth.idp.plugin.authn.webauthn.context.navigate - package net.shibboleth.idp.plugin.authn.webauthn.context.navigate

Context navigation APIs for WebAuthn.

net.shibboleth.idp.plugin.authn.webauthn.exception - package net.shibboleth.idp.plugin.authn.webauthn.exception

Exception classes for WebAuthn.

net.shibboleth.idp.plugin.authn.webauthn.impl - package net.shibboleth.idp.plugin.authn.webauthn.impl

This package has an authentication implementation for WebAuthn.

net.shibboleth.idp.plugin.authn.webauthn.metadata - package net.shibboleth.idp.plugin.authn.webauthn.metadata

This package contains the APIs for handling FIDO metadata.

net.shibboleth.idp.plugin.authn.webauthn.metadata.impl - package net.shibboleth.idp.plugin.authn.webauthn.metadata.impl

This package has the FIDO metadata implementation for WebAuthn.

net.shibboleth.idp.plugin.authn.webauthn.policy - package net.shibboleth.idp.plugin.authn.webauthn.policy

This package contains the APIs for authentication policies.

net.shibboleth.idp.plugin.authn.webauthn.policy.impl - package net.shibboleth.idp.plugin.authn.webauthn.policy.impl

This package has authentication policy implementations.

net.shibboleth.idp.plugin.authn.webauthn.principal - package net.shibboleth.idp.plugin.authn.webauthn.principal

User principals for WebAuthn.

net.shibboleth.idp.plugin.authn.webauthn.storage - package net.shibboleth.idp.plugin.authn.webauthn.storage

Storage APIs for WebAuthn.

net.shibboleth.idp.plugin.authn.webauthn.storage.impl - package net.shibboleth.idp.plugin.authn.webauthn.storage.impl

This package has storage implementations for WebAuthn.

nicknameRequired - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

Is nickname collection enabled or disabled?.

nicknameRequiredPredicate - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddNicknameRequired

Predicate used to determine if nickname collection is optional for this request.

NO_REGISTERED_WEBAUTHN_CREDENTIALS - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.authn.WebAuthnAuthenticationEventIds

The user has no registered WebAuthn credentials.

NO_SEARCH_USERNAME_AFTER_C14N - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.WebAuthnRegistrationEventIds

There is no search username to search on in the management interface because c14n failed.

noCredentialNicknameEventId - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractNicknameFromFormRequest

The EventID of the event to build if no credential nickname can be found in the request and a nickname is required.

noCredentialsEventId - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.FilterCredentialsOnPolicy

The EventID of the event to build if no credentials remain after filtering.

noCredentialsEventId - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentials

The EventID of the event to build if no credentials are found and triggerEventOnNoCredentialsPredicate evaluates to true.

noCredentialsEventId - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentialsFromUserHandle

The EventID of the event to build if no credentials are found and triggerEventOnNoCredentialsPredicate evaluates to true.

O

objectMapper - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.ExtractPublicKeyCredentialAssertionFromFormRequest

JSON object mapper.

of(boolean) - Static method in enum class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.AuthenticatorPolicy.AuthenticatorPolicyOutcome

Helper method to create an AuthenticatorPolicy.AuthenticatorPolicyOutcome from a boolean flag.

of(boolean) - Static method in enum class net.shibboleth.idp.plugin.authn.webauthn.policy.CredentialPolicy.CredentialPolicyOutcome

Helper method to create an CredentialPolicy.CredentialPolicyOutcome from a boolean flag.

onFailureAuditHook - Variable in class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.AbstractWebAuthnAuditingAction

A hook to be executed during a failure audit even.

onSuccessAuditHook - Variable in class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.AbstractWebAuthnAuditingAction

A hook to be executed during a success audit even.

origins - Variable in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

Allowable origins the authenticator response can contain.

P

parse(String) - Static method in class net.shibboleth.idp.plugin.authn.webauthn.authn.AuthenticatorSupport

Parse an AAGUID from a string value.

passkeyAaguidFile - Variable in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.PasskeyAaguidMetadataFactory

The File location of the passkey AAGUID JSON file.

PasskeyAaguidMetadataFactory - Class in net.shibboleth.idp.plugin.authn.webauthn.metadata.impl

A spring factory bean for create a PasskeyAaguidMetadataService.

PasskeyAaguidMetadataFactory() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.PasskeyAaguidMetadataFactory

PasskeyAaguidMetadataService - Class in net.shibboleth.idp.plugin.authn.webauthn.metadata.impl

A service that looks up icons and descriptions about passkey providers (authenticators) from a map.

PasskeyAaguidMetadataService(Map<String, AaguidEntry>) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.PasskeyAaguidMetadataService

Constructor.

PasskeyCredentialLabeller - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

A credential labeller function that labels credentials as 'Passkey' if they are discoverable.

PasskeyCredentialLabeller() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PasskeyCredentialLabeller

Constructor.

passwordless - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnAuthenticationContext

Are we operating in passwordless mode.

pkCredCreationOptions - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ValidateAuthenticatorAttestationResponse

The stashed public key credential creation options used to create a new credential.

populateAuditContextAction - Variable in class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.AbstractWebAuthnAuditingAction

Optional audit extraction action.

PopulateInlineEnrolmentContext - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

Populate the InlineEnrolmentContext from the HTTP referer header in the HTTP request iff the registration query parameter contains 'inline'.

PopulateInlineEnrolmentContext() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateInlineEnrolmentContext

Constructor.

populateSubject(Subject) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion

PopulateWebAuthnAuthenticationContext - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

An action to create (or lookup) the WebAuthnAuthenticationContext and populate with the username found from the username lookup strategy.

PopulateWebAuthnAuthenticationContext() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.PopulateWebAuthnAuthenticationContext

Constructor.

PopulateWebAuthnManagementContext - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

An action to create (or lookup) the WebAuthnManagementContext and set the admin principal name from the lookup strategy.

PopulateWebAuthnManagementContext() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateWebAuthnManagementContext

Constructor.

PopulateWebAuthnRegistrationContext - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

An action to create (or lookup) the WebAuthnRegistrationContext and populate with the username found from the lookup strategy.

PopulateWebAuthnRegistrationContext() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateWebAuthnRegistrationContext

Constructor.

predicates - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.MultiPredicateAccessPredicate

List of predicates to evaluate.

preferredPublickeyParams - Variable in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebAuthnAuthenticationClient

List of acceptable public key algorithms.

preferredPublickeyParams - Variable in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

List of acceptable public key algorithms.

principalName - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnManagementContext

Canonical principal name of the authenticated user, acting as an admin.

principalNameLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateWebAuthnManagementContext

Lookup strategy to determine the username to extract and register WebAuthn credentials for.

processFormSubmission(ProfileRequestContext, AuthenticationContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.ExtractUsernameFromForm

Process the form submission: extract and transform the username, processes do-not-cache instruction.

processUsername(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractUsernameFromRegistrationForm

Gets the username from a form submission and apply transformations to it.

profileRequestContext - Variable in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.FunctionalRuleContext

The stored profile request context.

publicKeyCredentialAssertionParameterName - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.ExtractPublicKeyCredentialAssertionFromFormRequest

Name of public key credential with the assertion response parameter.

publicKeyCredentialAssertionResponse - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnAuthenticationContext

A public key credential with assertion response that is the result of authentication.

publicKeyCredentialAttestationParameterName - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractPublicKeyCredentialAttestationFromFormRequest

Name of the public key credential attestation parameter.

publicKeyCredentialAttestationResponse - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

A public key credential containing the assertion response that is the result of creating a new credential.

publicKeyCredentialCreationOptions - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

The public key credential creation options for creating a new credential.

publicKeyCredentialRequestOptions - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnAuthenticationContext

The public key credential request options for generating an authentication assertion.

publicKeyCredentialRequestOptions - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion

The options used to create the authentication request.

R

RandomUserIdGenerator - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

A user.id generator that generates a random 64 byte user.id.

RandomUserIdGenerator() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.RandomUserIdGenerator

Constructor.

rawSearchUsername - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnManagementContext

The raw username entered by the admin to search for.

rawUsername - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.BaseWebAuthnContext

The raw username entered by the user in one of the username collection steps.

REG_QUERY_PARAM - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateInlineEnrolmentContext

The name of the query parameter that contains a signal that the request was for inline enrolment.

RegistrationContextCredentialRemovalConsumer - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

A BiConsumer that sets the credential ID to remove onto the WebAuthn registration context.

RegistrationContextCredentialRemovalConsumer() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.RegistrationContextCredentialRemovalConsumer

Constructor.

RegistrationContextCredentialToModifyConsumer - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

A BiConsumer that sets the credential ID to modify onto the WebAuthn registration context.

RegistrationContextCredentialToModifyConsumer() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.RegistrationContextCredentialToModifyConsumer

Constructor.

RegistrationErrorMessageLookupFunction - Class in net.shibboleth.idp.plugin.authn.webauthn.context.navigate

A function that examines the state of a request and produces an appropriate message for WebAuthn flow views.

RegistrationErrorMessageLookupFunction() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.RegistrationErrorMessageLookupFunction

Constructor.

RegistrationFailureException - Exception in net.shibboleth.idp.plugin.authn.webauthn.exception

Exception that is throw if a public key credential registration (attestation) is not valid.

RegistrationFailureException() - Constructor for exception net.shibboleth.idp.plugin.authn.webauthn.exception.RegistrationFailureException

Constructor.

RegistrationFailureException(String) - Constructor for exception net.shibboleth.idp.plugin.authn.webauthn.exception.RegistrationFailureException

Constructor.

RegistrationFailureException(String, Throwable) - Constructor for exception net.shibboleth.idp.plugin.authn.webauthn.exception.RegistrationFailureException

Constructor.

RegistrationFailureException(Throwable) - Constructor for exception net.shibboleth.idp.plugin.authn.webauthn.exception.RegistrationFailureException

Constructor.

RegistrationInfoMessageLookupFunction - Class in net.shibboleth.idp.plugin.authn.webauthn.context.navigate

A function that examines the state of a request and produces an appropriate message for WebAuthn flow views.

RegistrationInfoMessageLookupFunction() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.RegistrationInfoMessageLookupFunction

Constructor.

registrationResult - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

The credential public key which is the result of registration of a new key pair generated by an authenticator.

RegistrationResult - Class in net.shibboleth.idp.plugin.authn.webauthn.admin

The result of a call to (com.yubico.webauthn.data.PublicKeyCredentialCreationOptions, com.yubico.webauthn.data.PublicKeyCredential).

RegistrationResult(RegistrationResult.Builder) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.RegistrationResult

Private constructor for use by the builder.

RegistrationResult.Builder - Class in net.shibboleth.idp.plugin.authn.webauthn.admin

Builder.

RegistrationResult.IAttestationTrustedStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.admin

Builder stage.

RegistrationResult.IAttestationTypeStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.admin

Builder stage.

RegistrationResult.IBuildStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.admin

Builder stage.

RegistrationResult.ICredentialStage - Interface in net.shibboleth.idp.plugin.authn.webauthn.admin

Builder stage.

registrationTime - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.Builder

The credential registration time .

registrationTime - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

The time the registration took place.

REJECT - Enum constant in enum class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.AuthenticatorPolicy.AuthenticatorPolicyOutcome

Reject the authenticator.

REJECT - Enum constant in enum class net.shibboleth.idp.plugin.authn.webauthn.policy.CredentialPolicy.CredentialPolicyOutcome

Reject the credential.

relyingPartyId - Variable in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

The relying party identifier.

relyingPartyName - Variable in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

The relying party name.

removeExistingRegistrationContext - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateWebAuthnRegistrationContext

Predicate to determine if we should remove any existing registration context.

removeRegistrationByCredentialId(ByteArray) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

Remove the credential by its identifier for any user it is registered for.

removeRegistrationByCredentialId(ByteArray) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.storage.WebAuthnCredentialRepository

Remove the credential by its identifier for any user it is registered for.

removeRegistrationByUsername(String, CredentialRecord) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

Remove the registration for the given user.

removeRegistrationByUsername(String, CredentialRecord) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.storage.WebAuthnCredentialRepository

Remove the registration for the given user.

removeRegistrationByUsernameAndCredentialId(String, ByteArray) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

Remove the credential with the given credential Id for the given user.

removeRegistrationByUsernameAndCredentialId(String, ByteArray) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.storage.WebAuthnCredentialRepository

Remove the credential with the given credential Id for the given user.

repository - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddUserId

The credential repository to use.

repository - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddUserName

The credential repository to use.

repository - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AdminDeletePublicKeyCredential

The credential repository to use.

repository - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.DeletePublicKeyCredential

The credential repository to use.

repository - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.LookupCredentialsForUser

The credential repository to use.

repository - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.StorePublicKeyCredential

The credential repository to use.

repository - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.UpdateCredentialNickname

The credential repository to use.

repository - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.CheckCredentialPolicy

The credential repository to use.

repository - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentials

The credential repository to use.

repository - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentialsFromUserHandle

The credential repository to use.

requestContext - Variable in class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.AbstractWebAuthnAuditingAction

The Spring RequestContext to operate on.

requestOptions - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.CheckUserHandleExistsIfNoAllowCredentials

The stashed request options from the context.

requestOptions - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentialsFromUserHandle

The stashed request options from the context.

requestParameterToExtract - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractUsernameSearchFromFormRequest

Name of the request parameter to extract.

RequireStrongFreshAuthnAccessPredicate - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

Access control predicate, used within a WebAuthn registration flow, to check if a user with existing WebAuthn/FIDO2 credentials has performed a fresh, strong, authentication.

RequireStrongFreshAuthnAccessPredicate() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.RequireStrongFreshAuthnAccessPredicate

Constructor.

reset() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationErrorContext

Reset the error context by clearing the classified messages.

reset() - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationInformationContext

Reset the information context by clearing the classified messages.

residentKeyRequirement - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.Builder

The requirement on registering a ResidentKey.

residentKeyRequirement - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters

The requirement on registering a ResidentKey.

residentKeyRequirement - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

The requirement on registering a ResidentKey.

residentKeyRequirementLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddResidentKeyRequirement

A strategy to lookup the ResidentKey requirement.

rp - Variable in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebAuthnAuthenticationClient

Information pertaining to the relying party.

rule - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.FunctionalAuthenticatorPolicyRule

The function to run.

rule - Variable in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.FunctionalCredentialPolicyRule

The function to run.

S

scCtxLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.InitializeAdminSubjectCanonicalizationContext

Strategy used to find or create the SubjectCanonicalizationContext from the ProfileRequestContext.

scCtxLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.UpdateAdminContextWithC14nPrincipal

Strategy used to find the SubjectCanonicalizationContext from the ProfileRequestContext.

scCtxLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.InitializeSubjectCanonicalizationContext

Strategy used to find or create the SubjectCanonicalizationContext from the ProfileRequestContext.

scCtxLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.UpdateWebAuthnContextWithC14nPrincipal

Strategy used to find the SubjectCanonicalizationContext from the ProfileRequestContext.

searchUsername - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnManagementContext

The username of the user to find and manage credentials for.

secondFactor - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnAuthenticationContext

Are we operating as a second factor of authentication?

secondFactorOnlyAuthenticators - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.SecondFactorOnlyCredentialLabeller

A set of authenticators that should only be used for second factor authentication, based on their AAGUID.

secondFactorOnlyAuthenticators - Variable in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.SecondFactorOnlyCredentialPolicyRule

A set of authenticators that should only be used for second factor authentication, based on their AAGUID.

SecondFactorOnlyCredentialLabeller - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

A credential labeller function that labels credentials as 'SecondFactor' if the authenticator that created the credential should only be used as a second factor, and not sole factor of authentication.

SecondFactorOnlyCredentialLabeller() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.SecondFactorOnlyCredentialLabeller

Constructor.

SecondFactorOnlyCredentialPolicyRule - Class in net.shibboleth.idp.plugin.authn.webauthn.policy.impl

A CredentialPolicy that rejects credentials used in sole-factor mode if created by authenticators which should only be used for second factor authentication.

SecondFactorOnlyCredentialPolicyRule() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.SecondFactorOnlyCredentialPolicyRule

Constructor.

secondFactorOverride - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsSecondFactor

If true, set isSecondFactor to true irrespective of the conventional logic.

serialize(Set<CredentialRecord>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.CredentialRegistrationSerializer

serializePublicKeyCredentialOptionsAsJSON(PublicKeyCredentialCreationOptions) - Static method in class net.shibboleth.idp.plugin.authn.webauthn.impl.WebAuthnEncoder

Serialize the PublicKeyCredentialOptions request into a JSON string.

serializePublicKeyCredentialRequestOptionsAsJSON(PublicKeyCredentialRequestOptions) - Static method in class net.shibboleth.idp.plugin.authn.webauthn.impl.WebAuthnEncoder

Serialize the PublicKeyCredentialRequestOptions request into a JSON string.

serializer - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

Storage record serializer.

serialVersionUID - Static variable in exception net.shibboleth.idp.plugin.authn.webauthn.exception.AssertionFailureException

Generated serial UID.

serialVersionUID - Static variable in exception net.shibboleth.idp.plugin.authn.webauthn.exception.CredentialRepositoryException

Serial version UID.

serialVersionUID - Static variable in exception net.shibboleth.idp.plugin.authn.webauthn.exception.RegistrationFailureException

Generated serial UID.

serialVersionUID - Static variable in exception net.shibboleth.idp.plugin.authn.webauthn.exception.WebAuthnAuthenticationClientException

Serial UID.

serverChallenge - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.BaseWebAuthnContext

The challenge sent to the authenticator in both registration and authentication ceremonies.

setAaguidMetadata(AaguidEntry) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.EnhancedCredentialRecord

Set the AAGUID entry that describes the authenticator.

setAaguidService(PasskeyAaguidMetadataService) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnAction

Set the supplementary description service which contains descriptions and icons for passkey providers not in the MDS feed.

setActivationCondition(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AbstractAuthenticatorPolicyRule

Set an activation condition for this policy rule.

setActivationCondition(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.AbstractCredentialPolicyRule

Set an activation condition for this policy rule.

setActivationConditionStrategy(BiPredicate<AAGUID, ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AbstractAuthenticatorPolicyRule

Set an activation condition for this policy rule.

setActivationConditionStrategy(BiPredicate<EnhancedCredentialRecord, ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.AbstractCredentialPolicyRule

Set an activation condition for this policy rule.

setAllowedAuthenticators(Set<String>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AllowlistAuthenticatorPolicy

Set the allowable authenticators based on their AAGUID.

setAllowedPreviousFactors(Collection<String>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsSecondFactor

Set the allowable previous factors.

setAllowOriginPort(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

Allow unrestricted origin ports?

setAllowOriginSubdomain(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

Set if any subdomain is allowed.

setAllowUntrustedAttestation(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

Set if untrusted attestations (registrations) are allowed.

setAttestationConveyancePreference(AttestationConveyancePreference) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

Set the attestation conveyance preference.

setAttestationConveyancePreference(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddAttestationConveyancePreference

Set the attestation conveyance preference.

setAttestationConveyancePreferenceLookupStrategy(Function<ProfileRequestContext, AttestationConveyancePreference>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddAttestationConveyancePreference

Set the strategy used to lookup the attestation conveyance preference.

setAttributeContextLookupStrategy(Function<ProfileRequestContext, AttributeContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.AbstractAttributeContextUserIdentityStrategy

Set the strategy used to locate the AttributeContext associated with a given ProfileRequestContext.

setAttributeId(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.AbstractAttributeContextUserIdentityStrategy

Set the attribute Id to extract the value from.

setAuditContextCreationStrategy(Function<ProfileRequestContext, AuditContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.AbstractWebAuthnAuditingAction

Set the strategy used to locate the AuditContext associated with a given ProfileRequestContext.

setAuthenticatorAttachmentRequirement(AuthenticatorAttachment) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

Set the authenticator attachment requirement.

setAuthenticatorAttachmentRequirement(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddAuthenticatorAttachmentRequirement

Set the authenticator attachment requirement.

setAuthenticatorAttachmentRequirementLookupStrategy(Function<ProfileRequestContext, AuthenticatorAttachment>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddAuthenticatorAttachmentRequirement

Set the lookup strategy to find the authenticator attachment requirement.

setAuthenticatorCapabilityAcceptor(Predicate<Set<MetadataBLOBPayloadEntry>>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AuthenticatorCapabilitiesPolicyRule

Set the predicate that determines if this authenticators capabilities should be accepted or rejected.

setAuthenticatorMetadata(Set<MetadataBLOBPayloadEntry>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.EnhancedCredentialRecord

Set the authenticator metadata.

setAuthenticatorPolicy(AuthenticatorPolicy) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.CheckRegistrationPolicy

Set the policy to verify that the authenticator is authorized before the credential is stored.

setAuthenticatorPolicyChain(List<AuthenticatorPolicy>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.ChainingAuthenticatorPolicyRule

Set the chain of policies that should be applied to the authenticator.

setCacheFile(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

Set where to cache the metadata blob.

setCedentialIdParameterName(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractKeyInformationFromFormRequest

Set the name of the credential Id parameter.

setChallengeGeneratorStrategy(Function<ProfileRequestContext, byte[]>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.GenerateServerChallenge

Set the strategy used to generate the challenge.

setComparisonPredicate(BiPredicate<ProfileRequestContext, Pair<String, String>>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AllowCurrentUserAccessPredicate

Set the predicate that performs the comparison between the principal name from the subject context (as the first item in the pair) with the username in the registration context (as the second item in the pair).

setContextSettingConsumer(BiConsumer<ProfileRequestContext, byte[]>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractKeyInformationFromFormRequest

Set the context setting consumer action.

setContextUpdateConsumer(Consumer<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.PopulateWebAuthnAuthenticationContext

Set a consumer that updates any part of the profile request context.

setCredentialId(byte[]) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnAuthenticationContext

Set the credential Id.

setCredentialIdToModify(byte[]) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

Set the ID of the credential that is going to be modified.

setCredentialIdToRemove(byte[]) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnManagementContext

Set the ID of the credential that is going to be removed.

setCredentialIdToRemove(byte[]) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

Deprecated, for removal: This API element is subject to removal in a future version.

Use WebAuthnRegistrationContext.setCredentialIdToModify(byte[]) instead

setCredentialNickname(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

Set the display friendly nickname for this credential.

setCredentialNicknameParameterName(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractNicknameFromFormRequest

Set the name of the parameter to extract the credential nickname from.

setCredentialPolicy(CredentialPolicy) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.CheckCredentialPolicy

Set the policy to verify that the credential can be used for authentication.

setCredentialPolicy(CredentialPolicy) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.FilterCredentialsOnPolicy

Set the policy to verify that the credential can be used for authentication.

setCredentialPolicyChain(List<CredentialPolicy>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.ChainingCredentialPolicyRule

Set the chain of policies that should be applied to the authentication credential.

setCredentialRepository(CredentialRepository) - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

Set the credential repository used to store the valid webauthn credential.

setCredentialRepository(WebAuthnCredentialRepository) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.RequireStrongFreshAuthnAccessPredicate

Set the credential repository used to store WebAuthn credentials.

setCredentialRepository(WebAuthnCredentialRepository) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnAction

Set the credential repository used to store WebAuthn credentials.

setCredentialRepository(WebAuthnCredentialRepository) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion

Set the credential repository used to store WebAuthn credentials.

setCredentialsLookupStrategy(Function<ProfileRequestContext, Collection<EnhancedCredentialRecord>>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.LabelCredentialRecords

Set the lookup strategy to find credentials to attach capabilities to.

setCrls(List<Resource>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

Set the CRLs to use to check the revocation status of the metadata signature.

setDisplayName(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

Set the human-palatable name for the user account.

setDisplayNameLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddDisplayName

Set the strategy used to generate the user.displayName.

setEnabled(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateInlineEnrolmentContext

Set if inline enrolment should be enabled.

setEnabled(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsSecondFactor

Set a flag that determines if 2FA support should be enabled (true) or disabled (false).

setEnabled(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.UsernamelessFlowEnabled

Set a flag that determines if we want a usernameless flow (true), or a passwordless flow (false).

setEnabled(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateInlineEnrolmentContext

Set if inline enrolment should be enabled.

setEnabled(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsSecondFactor

Set a predicate that determines if 2FA support should be enabled (true) or disabled (false).

setEnabled(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.UsernamelessFlowEnabled

Set a predicate that determines if we want a usernameless flow (true), or a passwordless flow (false).

setExistingCredentials(Collection<EnhancedCredentialRecord>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.BaseWebAuthnContext

Set the user's credentials that have already been registered with the credential repository.

setExpectedLegalHeaders(String[]) - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

Set the expected legal headers on the FIDO metadata blob.

setFidoMetadataService(FidoMetadataService) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AbstractAuthenticatorPolicyRule

Set the attestation trust source.

setFidoMetadataService(FidoMetadataService) - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

Set the FIDO Alliance metadata service resolver to use as the attestation trust source.

setFidoMetadataService(FidoMetadataService) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnAction

Set the FIDO Alliance metadata service resolver to use as the attestation trust source.

setFidoMetadataService(FidoMetadataService) - Method in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.AbstractCredentialPolicyRule

Set the FIDO metadata source.

setFoundCredentials(Collection<EnhancedCredentialRecord>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnManagementContext

Set the credentials found to belong to the given searchUsername.

setGenericMessageID(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.RegistrationErrorMessageLookupFunction

Sets whether non-message-based error messages should be exposed or turned into a more generic value.

setGenericMessageID(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.RegistrationInfoMessageLookupFunction

Sets whether non-message-based error messages should be exposed or turned into a more generic value.

setGenericMessageID(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.WebAuthnErrorMessageLookupFunction

Sets whether non-message-based error messages should be exposed or turned into a more generic value.

setHttpServletRequestSupplier(NonnullSupplier<HttpServletRequest>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.UsernameLookupFromHttpRequest

Set the current HTTP request Supplier.

setIconDark(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.AaguidEntry

Set the base64 SVG data encoded dark icon for this provider.

setIconLight(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.AaguidEntry

Set the base64 SVG data encoded light icon for this provider.

setInlineEnrolementContextCreationStrategy(Function<ProfileRequestContext, InlineEnrolmentContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.InlineEnrolmentRedirectFunction

Set the strategy used to locate the InlineEnrolmentContext.

setInlineEnrolementContextCreationStrategy(Function<ProfileRequestContext, InlineEnrolmentContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateInlineEnrolmentContext

Set the strategy used to locate or create the InlineEnrolmentContext.

setLabel(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PasskeyCredentialLabeller

Set the label to use.

setLabel(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.SecondFactorOnlyCredentialLabeller

Set the label to use for second factor only credentials.

setLabeller(BiFunction<EnhancedCredentialRecord, ProfileRequestContext, List<String>>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.LabelCredentialRecords

Set the labeller used to generate labels for the credential, for display only.

setLabels(List<String>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.EnhancedCredentialRecord

Set labels about the credential or authenticator that created it.

setLookupStrategy(Function<ProfileRequestContext, SubjectCanonicalizationContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.InitializeAdminSubjectCanonicalizationContext

Set the context lookup/creation strategy.

setLookupStrategy(Function<ProfileRequestContext, SubjectCanonicalizationContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.UpdateAdminContextWithC14nPrincipal

Set the context lookup strategy.

setLookupStrategy(Function<ProfileRequestContext, SubjectCanonicalizationContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.InitializeSubjectCanonicalizationContext

Set the context lookup/creation strategy.

setLookupStrategy(Function<ProfileRequestContext, SubjectCanonicalizationContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.UpdateWebAuthnContextWithC14nPrincipal

Set the context lookup strategy.

setLowercase(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnExtractionAction

Controls conversion to lowercase prior to applying any transforms.

setMetadataBlobFile(Resource) - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

Set the location of the local metadata blob file.

setMetadataBlobUrl(Resource) - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

Set the URL of the metadata blob file to fetch.

setName(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

Set the WebAuthn user.name of the user to use during credential registration.

setName(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.AaguidEntry

Set the name of the authenticator/provider.

setNicknameRequired(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

Set if nickname collection is required or not.

setNicknameRequiredPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddNicknameRequired

Set the predicate used to determine if the nickname is required or not.

setNoCredentialNicknameEventId(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractNicknameFromFormRequest

Set the EventID of the event to build if no credential nickname can be found in the request and a nickname is required.

setNoCredentialsEventId(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.FilterCredentialsOnPolicy

Set the EventID of the event to build if no credentials are found and triggerEventOnNoCredentials is set.

setNoCredentialsEventId(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentials

Set the EventID of the event to build if no credentials are found and triggerEventOnNoCredentials is set.

setNoCredentialsEventId(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentialsFromUserHandle

Set the EventID of the event to build if no credentials are found and triggerEventOnNoCredentials is set.

setObjectMapper(ObjectMapper) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.ExtractPublicKeyCredentialAssertionFromFormRequest

Set the JSON ObjectMapper.

setOnFailureAuditHook(BiConsumer<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.AbstractWebAuthnAuditingAction

Set a hook to run on a failure audit event.

setOnSuccessAuditHook(BiConsumer<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.AbstractWebAuthnAuditingAction

Set a hook to run on a success audit event.

setOrigins(Set<String>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

Set the allowable origins for this Relying Party.

setPasskeyAaguidFile(Resource) - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.PasskeyAaguidMetadataFactory

Set the passkey Aaguid JSON file.

setPasswordless(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnAuthenticationContext

Set if this authentication is part of a passwordless flow/mode.

SetPaswordlessUsageToContextConsumer - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

A consumer that sets the isPasswordless mode flag to the authentication context.

SetPaswordlessUsageToContextConsumer() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.SetPaswordlessUsageToContextConsumer

setPopulateAuditContextAction(PopulateAuditContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.AbstractWebAuthnAuditingAction

Sets an audit context population action to run.

setPreferredPublickeyParams(List<String>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

Set the ordered list of preferred public key credential parameters to send to the authenticator during registration.

setPreferredPublickeyParamsNative(List<PublicKeyCredentialParameters>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

Set the ordered list of preferred public key credential parameters to send to the authenticator during registration.

setPrincipalName(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnManagementContext

Set the canonical principal name of the authenticated subject.

setPrincipalNameLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateWebAuthnManagementContext

Set the lookup strategy to use to determine the admin principal.

setPublicKeyCredentialAssertionParameterName(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.ExtractPublicKeyCredentialAssertionFromFormRequest

Set the name of the public key credential assertion parameter to extract.

setPublicKeyCredentialAssertionResponse(PublicKeyCredential<AuthenticatorAssertionResponse, ClientAssertionExtensionOutputs>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnAuthenticationContext

Set the raw public key credential with authenticator assertion response, returned after the authentication ceremony.

setPublicKeyCredentialAttestationResponse(PublicKeyCredential<AuthenticatorAttestationResponse, ClientRegistrationExtensionOutputs>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

Set the public key credential containing the attestation response as a result of creating a new credential.

setPublicKeyCredentialCreationOptions(PublicKeyCredentialCreationOptions) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

Set the options used to create public key credentials.

setPublicKeyCredentialRequestOptions(PublicKeyCredentialRequestOptions) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnAuthenticationContext

Set the public key credential request options for generating an authentication assertion.

setPublickKeyCredentialAttestationParameterName(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractPublicKeyCredentialAttestationFromFormRequest

Set the name of the parameter to extract the public key credential attestation response from.

setRawSearchUsername(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnManagementContext

Sets the raw username entered by the admin to search for.

setRawUsername(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.BaseWebAuthnContext

Sets the raw username entered by the user in one of the username collection steps.

setRegistrationResult(RegistrationResult) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

Set the registration result which is the result of registration of a new key pair generated by an authenticator.

setRelyingPartyId(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

Set the relying party identifier.

setRelyingPartyName(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

Set the relying party name.

setRemoveExistingRegistrationContext(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateWebAuthnRegistrationContext

Set a flag to determine if an existing registration context should be removed.

setRemoveExistingRegistrationContextPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateWebAuthnRegistrationContext

Set a strategy to determine if an existing registration context should be removed.

setRequestParameterName(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractUsernameSearchFromFormRequest

Set the name of the request parameter to extract the value from.

setResidentKeyRequirement(ResidentKeyRequirement) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

Set the ResidentKey requirement.

setResidentKeyRequirement(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddResidentKeyRequirement

Set the ResidentKey requirement.

setResidentKeyRequirementLookupStrategy(Function<ProfileRequestContext, ResidentKeyRequirement>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddResidentKeyRequirement

Set the lookup strategy to determine the ResidentKey requirement.

setRule(BiFunction<AAGUID, FunctionalRuleContext, AuthenticatorPolicy.AuthenticatorPolicyOutcome>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.FunctionalAuthenticatorPolicyRule

Set the policy function rule to run.

setRule(BiFunction<EnhancedCredentialRecord, FunctionalRuleContext, CredentialPolicy.CredentialPolicyOutcome>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.FunctionalCredentialPolicyRule

Set the policy function to run.

setSearchUsername(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnManagementContext

Set the username of the user to find and manage credentials for.

setSecondFactor(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnAuthenticationContext

Set if this authentication is part of a second factor flow/mode.

setSecondFactorOnlyAuthenticators(Set<String>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.SecondFactorOnlyCredentialLabeller

Set the authenticators that should only be used for second factor authentication based on their AAGUID.

setSecondFactorOnlyAuthenticators(Set<String>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.SecondFactorOnlyCredentialPolicyRule

Set the authenticators that should only be used for second factor authentication based on their AAGUID.

setSecondFactorOverride(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsSecondFactor

Set an override flag that determines if a second factory authentication flow should be assumed.

setSecondFactorOverride(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsSecondFactor

Set an override predicate that determines if a second factory authentication flow should be assumed.

SetSecondFactorUsageToContextConsumer - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

A consumer that sets the isSecondFactor mode flag to the authentication context.

SetSecondFactorUsageToContextConsumer() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.SetSecondFactorUsageToContextConsumer

setSerializer(StorageSerializer<Set<CredentialRecord>>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

Set the storage service serializer to handle CredentialRecords.

setServerChallenge(byte[]) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.BaseWebAuthnContext

Set the server challenge that forms part of the information the client authenticator needs to sign.

setSSOBypassFieldName(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.ExtractUsernameFromForm

Set the SSO bypass parameter name.

setSsoUrl(URL) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.InlineEnrolmentContext

Set the URL to redirect the user to after the flow has ended.

setStorageService(StorageService) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

Set the storage service to store credentials.

setStronglyAuthenticated(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnGuardContext

Set a flag to indicate the user performed some kind of 'strong' authentication.

setSubjectContextLookupStrategy(Function<ProfileRequestContext, SubjectContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AllowCurrentUserAccessPredicate

Set the lookup strategy to use to locate the SubjectContext.

setSubjectContextLookupStrategy(Function<ProfileRequestContext, SubjectContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.RequireStrongFreshAuthnAccessPredicate

Set the lookup strategy to use to locate the SubjectContext.

setTransforms(Collection<Pair<String, String>>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnExtractionAction

A collection of regular expression and replacement pairs.

setTriggerEventOnNoCredentials(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentials

Set a flag which triggers a custom event to be built if no credentials are found.

setTriggerEventOnNoCredentials(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentialsFromUserHandle

Set a flag which triggers a custom event to be built if no credentials are found.

setTriggerEventOnNoCredentialsPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentials

Set a predicate which triggers a custom event to be built if no credentials are found.

setTriggerEventOnNoCredentialsPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentialsFromUserHandle

Set a predicate which triggers a custom event to be built if no credentials are found.

setTrim(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnExtractionAction

Controls whitespace trimming prior to applying any transforms.

setTrustRootFile(Resource) - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

Set the trust root file.

setUpdateLastUsedTimePredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion

Set the predicate to determine if we should update the last used time on the credential in the repository after successful validation?

setUpdateSignatureCount(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion

Set the flag to determine if we should update the signature count on the credential in the repository after successful validation?

setUpdateSignatureCountPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion

Set the predicate to determine if we should update the signature count on the credential in the repository after successful validation?

setUppercase(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnExtractionAction

Controls conversion to uppercase prior to applying any transforms.

setUserHandleLookupStrategy(Function<ProfileRequestContext, byte[]>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.CheckCredentialPolicy

Set the strategy to locate the userHandle of the user that holds the credential used to sign the assertion.

setUserId(byte[]) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.BaseWebAuthnContext

Set the WebAuthn user.id used to map public key credentials to the user's account.

setUserIdGeneratorStrategy(Function<ProfileRequestContext, byte[]>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddUserId

Set the strategy used to generate the user.id.

setUsername(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.BaseWebAuthnContext

Sets the internal IdP username.

setUsernameCollectionRequired(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsAdminUsernameCollectionEnabled

Set the flag that determines if username collection is required.

setUsernameCollectionRequiredPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsAdminUsernameCollectionEnabled

Set the predicate that determines if username collection is required.

setUsernameFieldName(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractUsernameFromRegistrationForm

Sets the name of the form field that carries the username.

setUsernameFieldName(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.UsernameLookupFromHttpRequest

Sets the name of the form field to carry the username.

setUsernameFieldName(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.ExtractUsernameFromForm

Sets the name of the form field that carries the username.

setUsernameless(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnAuthenticationContext

Set if this authentication is part of a usernameless flow/mode.

SetUsernamelessUsageToContextConsumer - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

A consumer that sets the isUsernameless mode flag to the authentication context.

SetUsernamelessUsageToContextConsumer() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.SetUsernamelessUsageToContextConsumer

setUsernameLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateWebAuthnRegistrationContext

Set the lookup strategy to find the username.

setUsernameLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsSecondFactor

Set the lookup strategy to check if a username has already been collected.

setUsernameLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.PopulateWebAuthnAuthenticationContext

Set the username lookup strategy.

setUserNameLookupStrategy(Function<ProfileRequestContext, String>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddUserName

Set the strategy used to lookup or create the WebAuthn user.name.

setUsernameRequired(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateWebAuthnRegistrationContext

Set a flag to determine if the username is required or not.

setUsernameRequired(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentials

Set a flag to determine if the username is required or not.

setUsernameRequired(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.PopulateWebAuthnAuthenticationContext

Set a flag to determine if the username is required or not.

setUsernameRequiredPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateWebAuthnRegistrationContext

Set a strategy to determine if the username is required or not.

setUsernameRequiredPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentials

Set a strategy to determine if the username is required or not.

setUsernameRequiredPredicate(Predicate<ProfileRequestContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.PopulateWebAuthnAuthenticationContext

Set a strategy to determine if the username is required or not.

setUserVerificationRequirement(UserVerificationRequirement) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.BaseWebAuthnContext

Set the user verification requirement.

setUserVerificationRequirement(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.AddUserVerificationRequirement

Set the UserVerification requirement.

setUseUnfilteredAttributes(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.AbstractAttributeContextUserIdentityStrategy

Set whether to source the input attributes from the unfiltered set.

setVerifyDownloadOnly(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

Set if signatures are only verified in the blob file from a fresh download.

setWebAuthnClient(WebAuthnAuthenticationClient) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnAction

Set the WebAuthn client used to handle registration and authentication ceremonies.

setWebAuthnClient(WebAuthnAuthenticationClient) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion

Set the WebAuthn client used to handle validation of the authentication ceremony.

setWebauthnContextLookupStrategy(Function<ProfileRequestContext, WebAuthnAuthenticationContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AllowCurrentUserAccessPredicate

Set the WebAuthn authentication context lookup strategy to use.

setWebAuthnContextLookupStrategy(Function<ProfileRequestContext, BaseWebAuthnContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractUsernameFromRegistrationForm

Set the strategy used to locate the BaseWebAuthnContext to operate on.

setWebAuthnContextLookupStrategy(Function<ProfileRequestContext, BaseWebAuthnContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.ExtractUsernameFromForm

Set the strategy used to locate the BaseWebAuthnContext to operate on.

setWebAuthnContextLookupStrategy(Function<ProfileRequestContext, WebAuthnAuthenticationContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.AbstractCredentialPolicyRule

Set the WebAuthn context lookup strategy to use.

setWebAuthnContextLookupStrategy(Function<ProfileRequestContext, T>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnAction

Set the WebAuthn context lookup strategy to use.

setWebauthnErrorContextLookupStrategy(Function<ProfileRequestContext, WebAuthnRegistrationErrorContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.RegistrationErrorMessageLookupFunction

Set the strategy used to lookup the WebAuthnRegistrationErrorContext.

setWebAuthnGuardContextLookupStrategy(Function<ProfileRequestContext, WebAuthnGuardContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.RequireStrongFreshAuthnAccessPredicate

Set the lookup strategy to use to locate the WebAuthnGuardContext.

setWebauthnInfoContextLookupStrategy(Function<ProfileRequestContext, WebAuthnRegistrationInformationContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.RegistrationInfoMessageLookupFunction

Set the strategy used to lookup the WebAuthnRegistrationInformationContext.

setWebAuthnManagementContextCreationStrategy(Function<ProfileRequestContext, WebAuthnManagementContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateWebAuthnManagementContext

Set the strategy used to lookup or create the WebAuthn managment context.

setWebauthnManagementContextLookupStrategy(Function<ProfileRequestContext, WebAuthnManagementContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ManagementContextCredentialRemovalConsumer

Set WebAuthn management context lookup strategy to use.

setWebAuthnRegistrationContextCreationStrategy(Function<ProfileRequestContext, WebAuthnRegistrationContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateWebAuthnRegistrationContext

Set the strategy used to lookup or create the WebAuthn registration context.

setWebauthnRegistrationContextLookupStrategy(Function<ProfileRequestContext, WebAuthnRegistrationContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AllowCurrentUserAccessPredicate

Set the WebAuthn registration context lookup strategy to use.

setWebauthnRegistrationContextLookupStrategy(Function<ProfileRequestContext, WebAuthnRegistrationContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.RegistrationContextCredentialRemovalConsumer

Set WebAuthn registration context lookup strategy to use.

setWebauthnRegistrationContextLookupStrategy(Function<ProfileRequestContext, WebAuthnRegistrationContext>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.RegistrationContextCredentialToModifyConsumer

Set WebAuthn registration context lookup strategy to use.

setWriteAuditLogAction(WriteAuditLog) - Method in class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.AbstractWebAuthnAuditingAction

Sets an audit output action to run.

signatureCounterValid - Variable in class net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult.Builder

Is the signature count valid?

signatureCounterValid - Variable in class net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult

Is the signature count valid?

ssoBypassFieldName - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.ExtractUsernameFromForm

Parameter name for SSO bypass.

ssoUrl - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.InlineEnrolmentContext

The URL to redirect the user to once the flow has ended.

STORAGE_CONTEXT - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

The context to use to partition the storage records.

storageService - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

The composed storage Service.

StorePublicKeyCredential - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

An action that adds the public key credential in the registration context to the credential repository.

StorePublicKeyCredential() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.StorePublicKeyCredential

Constructor.

stronglyAuthenticated - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnGuardContext

A flag that can be set to indicate the user just (fresh) performed some kind of 'strong' authentication.

subjectContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AllowCurrentUserAccessPredicate

Strategy function to lookup SubjectContext.

subjectContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.RequireStrongFreshAuthnAccessPredicate

Strategy function to lookup SubjectContext.

success - Variable in class net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult.Builder

Is this assertion valid?

success - Variable in class net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult

Is this assertion valid?

T

test(Set<MetadataBLOBPayloadEntry>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.impl.AuthenticatorGetInfoUVCapable

test(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AllowCurrentUserAccessPredicate

test(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.MultiPredicateAccessPredicate

test(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.RequireStrongFreshAuthnAccessPredicate

test(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsAdminUsernameCollectionEnabled

test(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsDiscoverableCredentialRequired

test(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsPasswordlessAuthenticationMode

test(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsSecondFactor

test(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsSecondFactorAuthenticationMode

test(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsUsernameCollectionRequired

test(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsUsernamelessAuthenticationMode

test(ProfileRequestContext) - Method in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.UsernamelessFlowEnabled

test(ProfileRequestContext, Pair<String, String>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AllowCurrentUserAccessPredicate.DefaultCurrentUserComparisonPredicate

toBase64OrUnknown(byte[]) - Static method in class net.shibboleth.idp.plugin.authn.webauthn.impl.WebAuthnSupport

Convert the value to a Base64 encoded string.

toBase64UrlOrUnknown(byte[]) - Static method in class net.shibboleth.idp.plugin.authn.webauthn.impl.WebAuthnSupport

Convert the value to a Base64 URL encoded string.

toBuilder() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

Get a builder based on this record which can be updated until it is finalised and built.

toPublicKeyCredentialDescriptor() - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

Convert the credential registration into a PublicKeyCredentialDescriptor.

toString() - Method in class net.shibboleth.idp.plugin.authn.webauthn.principal.WebAuthnUserIdPrinicpal

transforms - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnExtractionAction

Match patterns and replacement strings to apply.

transports - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.Builder

The transports.

transports - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

The set of transports the authenticator can use to communicate with the client.

triggerEventOnNoCredentialsPredicate - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentials

Should an non-proceed event be built if there are no credentials found?.

triggerEventOnNoCredentialsPredicate - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentialsFromUserHandle

Should an event be built if there are no credentials found?.

trim - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnExtractionAction

Trim prior to transforms?

trustRootFile - Variable in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

The file location of the trust root that verifies the downloaded metadata's signature.

U

UpdateAdminContextWithC14nPrincipal - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

A WebAuthn management action that sets the principal name from the SubjectCanonicalizationContext back onto the WebAuthn context as the search username.

UpdateAdminContextWithC14nPrincipal() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.UpdateAdminContextWithC14nPrincipal

Constructor.

UpdateCredentialNickname - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

An action that updates the nickname of a credential in the credential repository.

UpdateCredentialNickname() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.UpdateCredentialNickname

Constructor.

updateLastUsedTime - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion

Should we updated the last used time on successful validation?.

updateLastUsedTime(String, ByteArray, Instant) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

Update the last used time for the credential that belongs to the given user.

updateLastUsedTime(String, ByteArray, Instant) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.storage.WebAuthnCredentialRepository

Update the last used time for the credential that belongs to the given user.

updateLastUsedTime(String, PublicKeyCredential<AuthenticatorAssertionResponse, ClientAssertionExtensionOutputs>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion

Update the last used time of the credential to Instant.now().

updateNickname(String, ByteArray, String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

Update the nickname for the credential that belongs to the given user.

updateNickname(String, ByteArray, String) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.storage.WebAuthnCredentialRepository

Update the nickname for the credential that belongs to the given user.

updateSignatureCount - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion

Should we update the signature count on the credential in the repository after successful validation? Defaults to true.

updateSignatureCount(String, PublicKeyCredential<AuthenticatorAssertionResponse, ClientAssertionExtensionOutputs>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion

Take the new signature count from the authenticator assertion response and update the stored credential with that value.

updateSignatureCounter(String, ByteArray, long) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository

Update the signature counter of the credential that belongs to the given user.

updateSignatureCounter(String, ByteArray, long) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.storage.WebAuthnCredentialRepository

Update the signature counter of the credential that belongs to the given user.

UpdateWebAuthnContextWithC14nPrincipal - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

A WebAuthn action that sets the principal name from the SubjectCanonicalizationContext back onto the WebAuthn context.

UpdateWebAuthnContextWithC14nPrincipal() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.UpdateWebAuthnContextWithC14nPrincipal

Constructor.

uppercase - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnExtractionAction

Convert to uppercase prior to transforms?

USER_HANDLE_NOT_REGISTERED - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.authn.WebAuthnAuthenticationEventIds

The user has no registered WebAuthn credentials for the user handle supplied.

userHandleLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.CheckCredentialPolicy

Get the userHandle to help find the credential used to sign the assertion.

userId - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.Builder

The userhandle supplied to the authenticator during registration.

userId - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters

The user.id supplied to the authenticator during registration.

userId - Variable in class net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult.Builder

The user.id.

userId - Variable in class net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult

The user.id.

userId - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.BaseWebAuthnContext

The user.id supplied to the authenticator during registration.

USERID - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.audit.WebAuthnAuditFields

The user.id of the currently authenticated user.

userIdBase64Encoded - Variable in class net.shibboleth.idp.plugin.authn.webauthn.principal.WebAuthnUserIdPrinicpal

The username.

userIdentity - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.Builder

The users identity.

userIdentity - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

The users identity.

userIdGeneratorStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddUserId

Strategy used to generate the user.id.

username - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddDisplayName

The stashed internal username.

username - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddUserId

The stashed username.

username - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddUserName

The stashed internal username.

username - Variable in class net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult.Builder

The username of the user this result corresponds to.

username - Variable in class net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult

The username of the user this result corresponds to.

username - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.BaseWebAuthnContext

The internal IdP username of the user, used as a key to store credentials against.

username - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.Builder

The username of the user to the IdP.

username - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

The username of the user to the IdP.

usernameCollectionRequiredPredicate - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsAdminUsernameCollectionEnabled

The predicate that determines if username collection is required.

usernameFieldName - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractUsernameFromRegistrationForm

Form parameter name that carries the username.

usernameFieldName - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.UsernameLookupFromHttpRequest

Form parameter name to carry username.

usernameFieldName - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.ExtractUsernameFromForm

Form parameter name to carry username.

UsernameFromAuthenticationContextLookupStrategy - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

A strategy that takes the UsernamePrincipal from the authentication context iff there is only one.

UsernameFromAuthenticationContextLookupStrategy() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.UsernameFromAuthenticationContextLookupStrategy

usernameless - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnAuthenticationContext

Are we operating in usernameless mode.

UsernamelessFlowEnabled - Class in net.shibboleth.idp.plugin.authn.webauthn.context.logic

Predicate to determine if the user is required to enter their username or not.

UsernamelessFlowEnabled() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.context.logic.UsernamelessFlowEnabled

Constructor.

UsernameLookupFromHttpRequest - Class in net.shibboleth.idp.plugin.authn.webauthn.context.navigate

Extract a username from the HTTP request, returning null if not found.

UsernameLookupFromHttpRequest() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.UsernameLookupFromHttpRequest

Constructor.

UsernameLookupFromRegistrationContext - Class in net.shibboleth.idp.plugin.authn.webauthn.context.navigate

Pull out a username from a WebAuthn Registration Context if it exists.

UsernameLookupFromRegistrationContext() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.UsernameLookupFromRegistrationContext

UsernameLookupFromSubjectContext - Class in net.shibboleth.idp.plugin.authn.webauthn.context.navigate

Pull out a username/principalName from the SubjectContext.getPrincipalName() if it exists.

UsernameLookupFromSubjectContext() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.UsernameLookupFromSubjectContext

usernameLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateWebAuthnRegistrationContext

Lookup strategy to determine the username to extract and register WebAuthn credentials for.

usernameLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.logic.IsSecondFactor

Lookup strategy to find if a username has already been collected.

usernameLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.PopulateWebAuthnAuthenticationContext

Lookup strategy for the username.

userNameLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AddUserName

Strategy used to lookup or create the user.name.

usernameRequiredPredicate - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateWebAuthnRegistrationContext

Is the username required?

usernameRequiredPredicate - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.LookupRegisteredCredentials

Is the username required? If not, just leave an empty set of existing credentials.

usernameRequiredPredicate - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.PopulateWebAuthnAuthenticationContext

Is the username required?

userVerificationRequirement - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.Builder

Does the authentication/registration require user verification.

userVerificationRequirement - Variable in class net.shibboleth.idp.plugin.authn.webauthn.authn.BaseOptionsParameters

Does the authentication/registration require user verification.

userVerificationRequirement - Variable in class net.shibboleth.idp.plugin.authn.webauthn.authn.CredentialRequestOptionsParameters.Builder

Does the authentication/registration require user verification.

userVerificationRequirement - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.BaseWebAuthnContext

Does the authentication/registration require user verification?

userVerificationRequirement - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.AddUserVerificationRequirement

Set the user verification requirement.

userVerified - Variable in class net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult.Builder

Was the user verified by the authenticator during authentication?

userVerified - Variable in class net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult

Was the user verified by the authenticator during authentication?

userVerified - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.Builder

has the user been verified.

userVerified - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

Was the user verified during registration.

useUnfilteredAttributes - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.AbstractAttributeContextUserIdentityStrategy

Whether to look at filtered or unfiltered attributes.

UV - Static variable in class net.shibboleth.idp.plugin.authn.webauthn.audit.WebAuthnAuditFields

Was the currently authenticated user verified (UserVerification).

V

validateAuthenticatorAssertionResponse(String, byte[], PublicKeyCredentialRequestOptions, PublicKeyCredential<AuthenticatorAssertionResponse, ClientAssertionExtensionOutputs>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebAuthnAuthenticationClient

validateAuthenticatorAssertionResponse(String, byte[], PublicKeyCredentialRequestOptions, PublicKeyCredential<AuthenticatorAssertionResponse, ClientAssertionExtensionOutputs>) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.client.WebAuthnAuthenticationClient

Validate the PublicKeyCredential authenticator assertion response from an authentication request.

validateAuthenticatorAttestationResponse(PublicKeyCredentialCreationOptions, PublicKeyCredential<AuthenticatorAttestationResponse, ClientRegistrationExtensionOutputs>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebAuthnAuthenticationClient

Validate the PublicKeyCredential authenticator attestation response from a registration request.

validateAuthenticatorAttestationResponse(PublicKeyCredentialCreationOptions, PublicKeyCredential<AuthenticatorAttestationResponse, ClientRegistrationExtensionOutputs>) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.client.WebAuthnAuthenticationClient

Validate the PublicKeyCredential authenticator attestation response from a registration request.

ValidateAuthenticatorAttestationResponse - Class in net.shibboleth.idp.plugin.authn.webauthn.admin.impl

Validate the public key registration attempt by delegating the created public key credential to the WebAuthn client.

ValidateAuthenticatorAttestationResponse() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ValidateAuthenticatorAttestationResponse

Constructor.

ValidateWebAuthnAssertion - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

An action that validates a WebAuthn authenticator assertion that results from a call to WebAuthn's 'get' credential API.

ValidateWebAuthnAssertion() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion

Constructor.

ValidateWebAuthnAssertion.WebAuthnCleanupHook - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

A default cleanup hook that removes the WebAuthnAuthenticationContext from the tree.

valueOf(String) - Static method in enum class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.AuthenticatorPolicy.AuthenticatorPolicyOutcome

Returns the enum constant of this class with the specified name.

valueOf(String) - Static method in enum class net.shibboleth.idp.plugin.authn.webauthn.policy.CredentialPolicy.CredentialPolicyOutcome

Returns the enum constant of this class with the specified name.

values() - Static method in enum class net.shibboleth.idp.plugin.authn.webauthn.admin.policy.AuthenticatorPolicy.AuthenticatorPolicyOutcome

Returns an array containing the constants of this enum class, in the order they are declared.

values() - Static method in enum class net.shibboleth.idp.plugin.authn.webauthn.policy.CredentialPolicy.CredentialPolicyOutcome

Returns an array containing the constants of this enum class, in the order they are declared.

verifyDownloadOnly - Variable in class net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory

Only verify the signature in the blob file from a fresh download.

version - Variable in class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository.VersionedCredentialSet

The storage record version.

VersionedCredentialSet(long, Set<CredentialRecord>) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRespository.VersionedCredentialSet

Constructor.

W

WebAuthnAuditFields - Class in net.shibboleth.idp.plugin.authn.webauthn.audit

Audit fields for WebAuthn.

WebAuthnAuditFields() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.audit.WebAuthnAuditFields

Private constructor.

webauthnAuthContextCreationStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.BaseWebAuthnAuthenticationContextConsumer

Strategy used to locate the WebAuthnAuthenticationContext to populate.

webauthnAuthContextCreationStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.PopulateWebAuthnAuthenticationContext

Strategy used to locate or create the WebAuthnAuthenticationContext to populate.

WebAuthnAuthenticationClient - Interface in net.shibboleth.idp.plugin.authn.webauthn.client

A client that manages WebAuthn authentication and registration ceremonies.

WebAuthnAuthenticationClientException - Exception in net.shibboleth.idp.plugin.authn.webauthn.exception

An exception to signal an error condition during execution or creation of a Webauthn client.

WebAuthnAuthenticationClientException() - Constructor for exception net.shibboleth.idp.plugin.authn.webauthn.exception.WebAuthnAuthenticationClientException

Constructor.

WebAuthnAuthenticationClientException(String) - Constructor for exception net.shibboleth.idp.plugin.authn.webauthn.exception.WebAuthnAuthenticationClientException

Constructor.

WebAuthnAuthenticationClientException(String, Throwable) - Constructor for exception net.shibboleth.idp.plugin.authn.webauthn.exception.WebAuthnAuthenticationClientException

Constructor.

WebAuthnAuthenticationClientException(Throwable) - Constructor for exception net.shibboleth.idp.plugin.authn.webauthn.exception.WebAuthnAuthenticationClientException

Constructor.

WebAuthnAuthenticationClientFactory - Interface in net.shibboleth.idp.plugin.authn.webauthn.client

Abstract factory for creating singleton WebAuthnAuthenticationClient instances.

WebAuthnAuthenticationContext - Class in net.shibboleth.idp.plugin.authn.webauthn.context

Authentication context for processing WebAuthn authentication ceremonies.

WebAuthnAuthenticationContext() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnAuthenticationContext

WebAuthnAuthenticationEventIds - Class in net.shibboleth.idp.plugin.authn.webauthn.authn

Constants to use for ProfileAction EventContext results related to WebAuthn authentication.

WebAuthnAuthenticationEventIds() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.authn.WebAuthnAuthenticationEventIds

Private constructor.

webAuthnBaseContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.audit.AbstractWebAuthnAuditExtractor

Lookup strategy to locate the WebAuthn base context.

WebAuthnCleanupHook() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion.WebAuthnCleanupHook

webAuthnClient - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnAction

The WebAuthn client to use.

webAuthnClient - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion

The WebAuthn client to use.

webauthnContext - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnAction

The WebAuthn Context.

webAuthnContext - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractUsernameFromRegistrationForm

Context to operate on.

webAuthnContext - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.ExtractUsernameFromForm

Context to operate on.

webauthnContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AllowCurrentUserAccessPredicate

Lookup strategy to locate the WebAuthn authentication context.

webauthnContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.AbstractWebAuthnAction

Lookup strategy to locate the WebAuthn context.

webauthnContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion

Strategy used to locate or create the WebAuthnAuthenticationContext to populate.

webauthnContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.policy.impl.AbstractCredentialPolicyRule

Lookup strategy to locate the WebAuthn context.

webAuthnContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ExtractUsernameFromRegistrationForm

Strategy used to locate the BaseWebAuthnContext to operate on.

webAuthnContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.impl.ExtractUsernameFromForm

Strategy used to locate the BaseWebAuthnContext to operate on.

WebAuthnCredentialRepository - Interface in net.shibboleth.idp.plugin.authn.webauthn.storage

A WebAuthn credential repository that extends the CredentialRepository interface to support additional read and write operations.

WebAuthnCredentialToRemoveAuditExtractor - Class in net.shibboleth.idp.plugin.authn.webauthn.audit.impl

Function that returns the base64 encoded credential identifier of the credential that has been removed.

WebAuthnCredentialToRemoveAuditExtractor(Function<ProfileRequestContext, WebAuthnManagementContext>) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.WebAuthnCredentialToRemoveAuditExtractor

Constructor.

WebAuthnEncoder - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

Encoder for credentials that converts raw values into a format suitable for views.

WebAuthnEncoder() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.WebAuthnEncoder

Private constructor.

webauthnErrorContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.RegistrationErrorMessageLookupFunction

Lookup strategy to locate the WebAuthn registration information context.

WebAuthnErrorMessageLookupFunction - Class in net.shibboleth.idp.plugin.authn.webauthn.context.navigate

A function that examines the state of a request and produces an appropriate message for WebAuthn flow views.

WebAuthnErrorMessageLookupFunction() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.WebAuthnErrorMessageLookupFunction

WebAuthnFlowModeAuditExtractor - Class in net.shibboleth.idp.plugin.authn.webauthn.audit.impl

Function that returns which mode of flow was run e.g.

WebAuthnFlowModeAuditExtractor(Function<ProfileRequestContext, BaseWebAuthnContext>) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.WebAuthnFlowModeAuditExtractor

Constructor.

WebAuthnGuardContext - Class in net.shibboleth.idp.plugin.authn.webauthn.context

A context to hold signals about the type of authentication performed.

WebAuthnGuardContext() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnGuardContext

webAuthnGuardContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.RequireStrongFreshAuthnAccessPredicate

Lookup strategy to locate the WebAuthnGuardContext.

webauthnInfoContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.context.navigate.RegistrationInfoMessageLookupFunction

Lookup strategy to locate the WebAuthn registration information context.

WebAuthnManagementContext - Class in net.shibboleth.idp.plugin.authn.webauthn.context

A WebAuthn admin management context for the management admin flow.

WebAuthnManagementContext() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnManagementContext

webAuthnManagementContextCreationStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateWebAuthnManagementContext

Strategy used to locate or create the WebAuthnManagementContext to populate.

webauthnManagementContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.ManagementContextCredentialRemovalConsumer

Lookup strategy to locate the webauthn management context.

webAuthnManagementContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.audit.AbstractWebAuthnManagementAuditExtractor

Lookup strategy to locate the WebAuthn management context.

WebAuthnModule - Class in net.shibboleth.idp.plugin.authn.webauthn

IdP Module implementation for the WebAuthn login flow.

WebAuthnModule() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.WebAuthnModule

Constructor.

WebAuthnPlugin - Class in net.shibboleth.idp.plugin.authn.webauthn

Plugin description about the WebAuthn plugin.

WebAuthnPlugin() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.WebAuthnPlugin

Constructor.

WebAuthnPlugin(Class<? extends IdPPlugin>) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.WebAuthnPlugin

Constructor.

WebAuthnRegistrationContext - Class in net.shibboleth.idp.plugin.authn.webauthn.context

Registration context for processing WebAuthn Registration Ceremonies.

WebAuthnRegistrationContext() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationContext

webAuthnRegistrationContextCreationStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.PopulateWebAuthnRegistrationContext

Strategy used to locate or create the WebAuthnRegistrationContext to populate.

webauthnRegistrationContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.AllowCurrentUserAccessPredicate

Lookup strategy to locate the WebAuthn registration context.

webauthnRegistrationContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.RegistrationContextCredentialRemovalConsumer

Lookup strategy to locate the webauthn registration context.

webauthnRegistrationContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.admin.impl.RegistrationContextCredentialToModifyConsumer

Lookup strategy to locate the WebAuthn registration context.

webAuthnRegistrationContextLookupStrategy - Variable in class net.shibboleth.idp.plugin.authn.webauthn.audit.AbstractWebAuthnRegistrationAuditExtractor

Lookup strategy to locate the WebAuthn registration context.

WebAuthnRegistrationErrorContext - Class in net.shibboleth.idp.plugin.authn.webauthn.context

A WebAuthn version of AuthenticationErrorContext that holds information about WebAuthn registration events.

WebAuthnRegistrationErrorContext() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationErrorContext

Constructor.

WebAuthnRegistrationEventIds - Class in net.shibboleth.idp.plugin.authn.webauthn.admin

Constants to use for ProfileAction EventContext results related to WebAuthn registration.

WebAuthnRegistrationEventIds() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.admin.WebAuthnRegistrationEventIds

Private constructor.

WebAuthnRegistrationInformationContext - Class in net.shibboleth.idp.plugin.authn.webauthn.context

A WebAuthn version of AuthenticationWarningContext that holds information about WebAuthn registration events.

WebAuthnRegistrationInformationContext() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.context.WebAuthnRegistrationInformationContext

Constructor.

WebAuthnSearchUserAuditExtractor - Class in net.shibboleth.idp.plugin.authn.webauthn.audit.impl

Function that returns which username that the admin user searched for.

WebAuthnSearchUserAuditExtractor(Function<ProfileRequestContext, WebAuthnManagementContext>) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.WebAuthnSearchUserAuditExtractor

Constructor.

WebAuthnSupport - Class in net.shibboleth.idp.plugin.authn.webauthn.impl

Helper methods for WebAuthn.

WebAuthnSupport() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.impl.WebAuthnSupport

Private constructor.

WebAuthnUserCredentialAddedAuditExtractor - Class in net.shibboleth.idp.plugin.authn.webauthn.audit.impl

Function that returns the base64 encoded credential identifier of the credential that has been removed.

WebAuthnUserCredentialAddedAuditExtractor(Function<ProfileRequestContext, WebAuthnRegistrationContext>) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.WebAuthnUserCredentialAddedAuditExtractor

Constructor.

WebAuthnUserCredentialToRemoveAuditExtractor - Class in net.shibboleth.idp.plugin.authn.webauthn.audit.impl

Function that returns the base64 encoded credential identifier of the credential that has been removed.

WebAuthnUserCredentialToRemoveAuditExtractor(Function<ProfileRequestContext, WebAuthnRegistrationContext>) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.WebAuthnUserCredentialToRemoveAuditExtractor

Constructor.

WebAuthnUserIdAuditExtractor - Class in net.shibboleth.idp.plugin.authn.webauthn.audit.impl

Function that returns the user.id from the BaseWebAuthnContext base64 encoded, if any.

WebAuthnUserIdAuditExtractor(Function<ProfileRequestContext, BaseWebAuthnContext>) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.WebAuthnUserIdAuditExtractor

Constructor.

WebAuthnUserIdPrinicpal - Class in net.shibboleth.idp.plugin.authn.webauthn.principal

Principal based on the WebAuthn user.id base64 encoded.

WebAuthnUserIdPrinicpal(byte[]) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.principal.WebAuthnUserIdPrinicpal

Constructor.

WebAuthnUserIdPrinicpal(String) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.principal.WebAuthnUserIdPrinicpal

Constructor.

WebAuthnUsernameAuditExtractor - Class in net.shibboleth.idp.plugin.authn.webauthn.audit.impl

Function that returns the internal username from the BaseWebAuthnContext, if any.

WebAuthnUsernameAuditExtractor(Function<ProfileRequestContext, BaseWebAuthnContext>) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.WebAuthnUsernameAuditExtractor

Constructor.

WebAuthnUserVerificationAuditExtractor - Class in net.shibboleth.idp.plugin.authn.webauthn.audit.impl

Function that returns true if UserVerification was performed, false otherwise.

WebAuthnUserVerificationAuditExtractor(Function<ProfileRequestContext, BaseWebAuthnContext>) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.WebAuthnUserVerificationAuditExtractor

Constructor.

withAaguid(byte[]) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.Builder

withAaguid(byte[]) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.IBuildStage

Set the AAGUID of the authenticator that created this credential.

withAllowCredentials(List<PublicKeyCredentialDescriptor>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.authn.CredentialRequestOptionsParameters.Builder

withAllowCredentials(List<PublicKeyCredentialDescriptor>) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.authn.CredentialRequestOptionsParameters.IAllowCredentialsStage

Credentials that have already been registered with the IdP.

withAttestationConveyancePreference(AttestationConveyancePreference) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.Builder

withAttestationConveyancePreference(AttestationConveyancePreference) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.IAttestationConveyancePreferenceStage

The attestation conveyance preference.

withAttestationTrusted(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.RegistrationResult.Builder

withAttestationTrusted(boolean) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.admin.RegistrationResult.IAttestationTrustedStage

Is the attestation signature valid.

withAttestationType(AttestationType) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.RegistrationResult.Builder

withAttestationType(AttestationType) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.admin.RegistrationResult.IAttestationTypeStage

Set the attestation type.

withAuthenticatorAttachment(AuthenticatorAttachment) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.Builder

withAuthenticatorAttachment(AuthenticatorAttachment) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.IBuildStage

The AuthenticatorAttachment requirement.

withChallenge(byte[]) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.Builder

withChallenge(byte[]) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.IChallengeStage

The challenge sent to the authenticator in registration ceremonies.

withChallenge(byte[]) - Method in class net.shibboleth.idp.plugin.authn.webauthn.authn.CredentialRequestOptionsParameters.Builder

withChallenge(byte[]) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.authn.CredentialRequestOptionsParameters.IChallengeStage

The challenge sent to the authenticator in authentication ceremonies.

withCredential(PublicKeyCredential<AuthenticatorAttestationResponse, ClientRegistrationExtensionOutputs>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.RegistrationResult.Builder

withCredential(PublicKeyCredential<AuthenticatorAttestationResponse, ClientRegistrationExtensionOutputs>) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.admin.RegistrationResult.ICredentialStage

Set the public key credential attestation response.

withCredential(RegisteredCredential) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.Builder

withCredential(RegisteredCredential) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.ICredentialStage

Set the credential to register.

withCredential(RegisteredCredential) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord

Deprecated, for removal: This API element is subject to removal in a future version.

use CredentialRecord.toBuilder()

withCredentialNickname(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.Builder

withCredentialNickname(String) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.IBuildStage

Set an optional nickname of the credential.

withCredentialPropertiesExt(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.Builder

withCredentialPropertiesExt(boolean) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.IBuildStage

Is the credential properties extension enabled?

withDiscoverable(Optional<Boolean>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.Builder

withDiscoverable(Optional<Boolean>) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.IBuildStage

Is the credential a discoverable type (passkey).

withDisplayName(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.Builder

withDisplayName(String) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.IDisplayNameStage

The user.displayName supplied to the authenticator during registration.

withExcludeCredentials(Set<PublicKeyCredentialDescriptor>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.Builder

withExcludeCredentials(Set<PublicKeyCredentialDescriptor>) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.IExcludeCredentialsStage

Credentials that have already been registered with the IdP.

withLastUsedTime(Instant) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.Builder

withLastUsedTime(Instant) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.IBuildStage

Set the last authenticated time for this credential.

withName(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.Builder

withName(String) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.INameStage

The user.name of the user identity.

withRegistrationTime(Instant) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.Builder

withRegistrationTime(Instant) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.IRegistrationTimeStage

Set the time the registration took place.

withResidentKeyRequirement(ResidentKeyRequirement) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.Builder

withResidentKeyRequirement(ResidentKeyRequirement) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.IResidentKeyRequirementStage

The requirement on registering a ResidentKey.

withSignatureCounterValid(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult.Builder

withSignatureCounterValid(boolean) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult.ISignatureCounterValidStage

Set if the signature counter is valid.

withSuccess(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult.Builder

withSuccess(boolean) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult.ISuccessStage

Set if this assertion was verified.

withTransports(SortedSet<AuthenticatorTransport>) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.Builder

withTransports(SortedSet<AuthenticatorTransport>) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.ITransportsStage

Set the transports the authenticator can use to communicate with the client.

withUserId(byte[]) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.Builder

withUserId(byte[]) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.IUserHandleStage

The user.id supplied to the authenticator during registration.

withUserId(byte[]) - Method in class net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult.Builder

withUserId(byte[]) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult.IUserIdStage

Set the user.id.

withUserIdentity(UserIdentity) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.Builder

withUserIdentity(UserIdentity) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.IUserIdentityStage

The users identity.

withUsername(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult.Builder

withUsername(String) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult.IUsernameStage

Set the user.name of the authenticated user.

withUsername(String) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.Builder

withUsername(String) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.IUsernameStage

The username of the user to the IdP.

withUserVerificationRequirement(UserVerificationRequirement) - Method in class net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.Builder

withUserVerificationRequirement(UserVerificationRequirement) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.admin.CredentialCreationOptionsParameters.IUserVerificationRequirementStage

Does the authentication/registration require user verification.

withUserVerificationRequirement(UserVerificationRequirement) - Method in class net.shibboleth.idp.plugin.authn.webauthn.authn.CredentialRequestOptionsParameters.Builder

withUserVerificationRequirement(UserVerificationRequirement) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.authn.CredentialRequestOptionsParameters.IUserVerificationRequirementStage

Does the authentication/registration require user verification.

withUserVerified(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult.Builder

Set the userVerified flag.

withUserVerified(boolean) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.authn.AssertionResult.IUserVerifiedStage

Set the userVerified flag.

withUserVerified(boolean) - Method in class net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.Builder

withUserVerified(boolean) - Method in interface net.shibboleth.idp.plugin.authn.webauthn.storage.CredentialRecord.IBuildStage

Was the user verified during registration?

writeAuditLogAction - Variable in class net.shibboleth.idp.plugin.authn.webauthn.audit.impl.AbstractWebAuthnAuditingAction

Optional audit output action.

Y

YubicoWebAuthnAuthenticationClient - Class in net.shibboleth.idp.plugin.authn.webauthn.client.impl

Yubico implementation of a WebAuthnAuthenticationClient.

YubicoWebAuthnAuthenticationClient(RelyingParty, List<PublicKeyCredentialParameters>) - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebAuthnAuthenticationClient

Package-private Constructor.

YubicoWebauthnClientFactory - Class in net.shibboleth.idp.plugin.authn.webauthn.client.impl

Spring factory bean for creating a YubicoWebAuthnAuthenticationClient.

YubicoWebauthnClientFactory() - Constructor for class net.shibboleth.idp.plugin.authn.webauthn.client.impl.YubicoWebauthnClientFactory

Constructor.

A B C D E F G H I J L M N O P R S T U V W Y
All Classes and Interfaces|All Packages|Constant Field Values|Serialized Form