# Package net.shibboleth.idp.plugin.authn.webauthn.impl

package net.shibboleth.idp.plugin.authn.webauthn.impl
This package has an authentication implementation for WebAuthn.

Related Packages
Package
Description
net.shibboleth.idp.plugin.authn.webauthn
Shibboleth WebAuthn authentication implementation.
Classes
Class
Description
AbstractWebAuthnAction<T>
A base class for WebAuthn actions.
AbstractWebAuthnExtractionAction
A base class for WebAuthn actions that extract a username for subsequent use.
AddUserVerificationRequirement
Add a UserVerification requirement to the `context`.
BaseWebAuthnAuthenticationContextConsumer
A base class that pulls out the `WebAuthnAuthenticationContext` for consumers to use.
CheckCredentialPolicy
A policy engine action that checks with the configured policy if the credential, used to sign the assertion can be used to authenticate.
CheckUserHandleExistsIfNoAllowCredentials
An action which checks if the userHandle is returned in the assertion response if the set of allowedCredentials in the request was empty.
CreatePublicKeyCredentialRequestOptions
Action to create CreatePublicKeyCredentialRequestOptions from the parameters in the WebAuthn context using the supplied `client`.
DefaultUserHandleLookupStrategy
A strategy to locate the userHandle first from an assertion response and then, if that does not exist, from the userId in the WebAuthn authentication context.
EnsureAllowedCredentialsIsEmpty
An action that blanks any existing registered credentials in the WebAuthn authentication context.
ExistingAuthenticationCredentialsLookupStrategy
A credential lookup function that returns the list of existing credentials from the `WebAuthnAuthenticationContext`.
ExtractPublicKeyCredentialAssertionFromFormRequest
An action that extracts the PublicKeyCredential containing the authenticator assertion response from the incoming HTTP request.
ExtractUsernameFromForm
An action to populate a username into the `BaseWebAuthnContext`.
FilterCredentialsOnPolicy
A policy engine that filters the set of existing credentials held in the context based on the policy.
GenerateServerChallenge
An action to generate an appropriate server challenge for use in either the PublicKeyCredentialCreationOptions or the PublicKeyCredentialRequestOptions.
GenerateServerChallenge.DefaultChallengeGenerator
Default challenge generator that generates a 32 byte randomized challenge of sufficient entropy.
InitializeSubjectCanonicalizationContext
An action that creates a new `SubjectCanonicalizationContext` out of the username in the base context, ready for the c14n flows to canonicalize.
LookupRegisteredCredentials
An action that lookups existing registered credentials based on the username contained in the WebAuthn context and sets them back onto the context.
LookupRegisteredCredentialsFromUserHandle
An action that lookups existing registered credentials from the userHandle supplied in the authenticators assertion response and sets them back onto the context.
PopulateWebAuthnAuthenticationContext
An action to create (or lookup) the `WebAuthnAuthenticationContext` and populate with the username found from the username lookup strategy.
SetPaswordlessUsageToContextConsumer
A consumer that sets the isPasswordless mode flag to the authentication context.
SetSecondFactorUsageToContextConsumer
A consumer that sets the isSecondFactor mode flag to the authentication context.
SetUsernamelessUsageToContextConsumer
A consumer that sets the isUsernameless mode flag to the authentication context.
UpdateWebAuthnContextWithC14nPrincipal
A WebAuthn action that sets the principal name from the SubjectCanonicalizationContext back onto the WebAuthn context.
UsernameFromAuthenticationContextLookupStrategy
A strategy that takes the UsernamePrincipal from the authentication context iff there is only one.
ValidateWebAuthnAssertion
An action that validates a WebAuthn authenticator assertion that results from a call to WebAuthn's 'get' credential API.
ValidateWebAuthnAssertion.WebAuthnCleanupHook
A default cleanup hook that removes the `WebAuthnAuthenticationContext` from the tree.
WebAuthnEncoder
Encoder for `credentials` that converts raw values into a format suitable for views.
WebAuthnSupport
Helper methods for WebAuthn.