Package net.shibboleth.idp.plugin.authn.webauthn.impl
package net.shibboleth.idp.plugin.authn.webauthn.impl
This package has an authentication implementation for WebAuthn.
-
ClassesClassDescriptionA base class for WebAuthn actions.A base class for WebAuthn actions that extract a username for subsequent use.Add a UserVerification requirement to the
context.A base class that pulls out theWebAuthnAuthenticationContextfor consumers to use.A policy engine action that checks with the configured policy if the credential, used to sign the assertion can be used to authenticate.An action which checks if the userHandle is returned in the assertion response if the set of allowedCredentials in the request was empty.Action to create CreatePublicKeyCredentialRequestOptions from the parameters in the WebAuthn context using the suppliedclient.A strategy to locate the userHandle first from an assertion response and then, if that does not exist, from the userId in the WebAuthn authentication context.An action that blanks any existing registered credentials in the WebAuthn authentication context.A credential lookup function that returns the list of existing credentials from theWebAuthnAuthenticationContext.An action that extracts the PublicKeyCredential containing the authenticator assertion response from the incoming HTTP request.An action to populate a username into theBaseWebAuthnContext.A policy engine that filters the set of existing credentials held in the context based on the policy.An action to generate an appropriate server challenge for use in either the PublicKeyCredentialCreationOptions or the PublicKeyCredentialRequestOptions.Default challenge generator that generates a 32 byte randomized challenge of sufficient entropy.An action that creates a newSubjectCanonicalizationContextout of the username in the base context, ready for the c14n flows to canonicalize.An action that lookups existing registered credentials based on the username contained in the WebAuthn context and sets them back onto the context.An action that lookups existing registered credentials from the userHandle supplied in the authenticators assertion response and sets them back onto the context.An action to create (or lookup) theWebAuthnAuthenticationContextand populate with the username found from the username lookup strategy.A consumer that sets the isPasswordless mode flag to the authentication context.A consumer that sets the isSecondFactor mode flag to the authentication context.A consumer that sets the isUsernameless mode flag to the authentication context.A WebAuthn action that sets the principal name from the SubjectCanonicalizationContext back onto the WebAuthn context.A strategy that takes the UsernamePrincipal from the authentication context iff there is only one.An action that validates a WebAuthn authenticator assertion that results from a call to WebAuthn's 'get' credential API.A default cleanup hook that removes theWebAuthnAuthenticationContextfrom the tree.Encoder forcredentialsthat converts raw values into a format suitable for views.Helper methods for WebAuthn.