Package net.shibboleth.idp.plugin.authn.webauthn.admin.impl

package net.shibboleth.idp.plugin.authn.webauthn.admin.impl

This package has audit functions for WebAuthn.

Related Packages

Package	Description
net.shibboleth.idp.plugin.authn.webauthn.admin	Administrative flow APIs for WebAuthn.
net.shibboleth.idp.plugin.authn.webauthn.admin.policy	This package contains the APIs for registration policies.

Classes

Class	Description
AddAttestationConveyancePreference	Add an attestation conveyance preference to the context.
AddAuthenticatorAttachmentRequirement	Add an authenticator attachment requirement to the context.
AddDisplayName	An action to generate or lookup a user.displayName.
AddNicknameRequired	An action that sets onto the context if nickname collection is required.
AddResidentKeyRequirement	Add a ResidentKey requirement to the context.
AddUserId	An action to generate or lookup a user.id (stored by an authenticator as the userHandle).
AddUserName	An action to generate or lookup a WebAuthn user.name.
AdminDeletePublicKeyCredential	An action that removes a public key credential from the credential repository based on the credential ID found in the management context.
AdminSearchCredentialsLookupFunction	A credential lookup function that returns the credentials belonging to the user that has been searched for in the management interface.
AllowCurrentUserAccessPredicate	An access control predicate that should implement comparison logic to allow access only to authenticated users who initiated the WebAuthn registration/authentication process.
AllowCurrentUserAccessPredicate.DefaultCurrentUserComparisonPredicate	Default comparison predicate which just compares the equality of the input strings.
ChainingCredentialLabeller	A credential labeller that labels credentials based on a chain of other labellers.
CheckRegistrationPolicy	A registration policy engine action that checks with the configured policy if the authenticator can be used to register credentials with the IdP.
CreatePublicKeyCredentialCreationOptions	Action to create a PublicKeyCredentialCreationOptions from the parameters in the WebAuthn context using the available client.
DeletePublicKeyCredential	An action that removes a credential registration from the credential repository.
ExistingRegistrationCredentialsLookupStrategy	A credential lookup function that returns the list of existing credentials from the WebAuthnRegistrationContext.
ExtractKeyInformationFromFormRequest	An action that extracts the credential ID for from the incoming HTTP request and uses a BiConsumer to set it back onto an appropriate context.
ExtractNicknameFromFormRequest	An action that extracts the key nickname from the incoming HTTP request.
ExtractPublicKeyCredentialAttestationFromFormRequest	An action that extracts the PublicKeyCredential containing the authenticator attestation response from the incoming HTTP request.
ExtractUsernameFromRegistrationForm	An action to populate a username into the BaseWebAuthnContext.
ExtractUsernameSearchFromFormRequest	An action that extracts the username search value from the incoming HTTP request.
InitializeAdminSubjectCanonicalizationContext	An action that creates a new SubjectCanonicalizationContext out of the search username in the admin context, ready for the c14n flows to canonicalize.
InlineEnrolmentRedirectFunction	A function that generates a redirect URL to return the user to a resource relative to the server root.
LabelCredentialRecords	Use the labelling function to add labels to each EnhancedCredentialRecord found in the context.
LookupCredentialsForUser	An action that lookups registered credentials for a username contained in the WebAuthn management context and sets them back onto the context.
ManagementContextCredentialRemovalConsumer	A BiConsumer that sets the credential ID to remove onto the WebAuthn management context.
MultiPredicateAccessPredicate	Access control implementation based on a List of predicates over a ProfileRequestContext.
PasskeyCredentialLabeller	A credential labeller function that labels credentials as 'Passkey' if they are discoverable.
PopulateInlineEnrolmentContext	Populate the InlineEnrolmentContext from the HTTP referer header in the HTTP request iff the registration query parameter contains 'inline'.
PopulateWebAuthnManagementContext	An action to create (or lookup) the WebAuthnManagementContext and set the admin principal name from the lookup strategy.
PopulateWebAuthnRegistrationContext	An action to create (or lookup) the WebAuthnRegistrationContext and populate with the username found from the lookup strategy.
RandomUserIdGenerator	A user.id generator that generates a random 64 byte user.id.
RegistrationContextCredentialRemovalConsumer	A BiConsumer that sets the credential ID to remove onto the WebAuthn registration context.
RegistrationContextCredentialToModifyConsumer	A BiConsumer that sets the credential ID to modify onto the WebAuthn registration context.
RequireStrongFreshAuthnAccessPredicate	Access control predicate, used within a WebAuthn registration flow, to check if a user with existing WebAuthn/FIDO2 credentials has performed a fresh, strong, authentication.
SecondFactorOnlyCredentialLabeller	A credential labeller function that labels credentials as 'SecondFactor' if the authenticator that created the credential should only be used as a second factor, and not sole factor of authentication.
StorePublicKeyCredential	An action that adds the public key credential in the registration context to the credential repository.
TriggerRegistrationOnLoad	Predicate wrapping an injectable predicate, indicating whether the WebAuthn registration ceremony should be automatically triggered when the page loads.
UpdateAdminContextWithC14nPrincipal	A WebAuthn management action that sets the principal name from the SubjectCanonicalizationContext back onto the WebAuthn context as the search username.
UpdateCredentialNickname	An action that updates the nickname of a credential in the credential repository.
ValidateAuthenticatorAttestationResponse	Validate the public key registration attempt by delegating the created public key credential to the WebAuthn client.