# Package net.shibboleth.idp.plugin.authn.webauthn.admin.impl

package net.shibboleth.idp.plugin.authn.webauthn.admin.impl
This package has audit functions for WebAuthn.

Related Packages
Package
Description
net.shibboleth.idp.plugin.authn.webauthn.admin
Administrative flow APIs for WebAuthn.
net.shibboleth.idp.plugin.authn.webauthn.admin.policy
This package contains the APIs for registration policies.
Classes
Class
Description
AddAttestationConveyancePreference
Add an attestation conveyance preference to the `context`.
AddAuthenticatorAttachmentRequirement
Add an authenticator attachment requirement to the `context`.
AddDisplayName
An action to generate or lookup a user.displayName.
AddNicknameRequired
An action that sets onto the context if nickname collection is required.
AddResidentKeyRequirement
Add a ResidentKey requirement to the `context`.
AddUserId
An action to generate or lookup a user.id (stored by an authenticator as the userHandle).
AddUserName
An action to generate or lookup a WebAuthn user.name.
AdminDeletePublicKeyCredential
An action that removes a public key credential from the credential repository based on the credential ID found in the management context.
AdminSearchCredentialsLookupFunction
A credential lookup function that returns the credentials belonging to the user that has been searched for in the management interface.
AllowCurrentUserAccessPredicate
An access control predicate that should implement comparison logic to allow access only to authenticated users who initiated the WebAuthn registration/authentication process.
AllowCurrentUserAccessPredicate.DefaultCurrentUserComparisonPredicate
Default comparison predicate which just compares the equality of the input strings.
ChainingCredentialLabeller
A credential labeller that labels credentials based on a chain of other labellers.
CheckRegistrationPolicy
A registration policy engine action that checks with the configured policy if the authenticator can be used to register credentials with the IdP.
CreatePublicKeyCredentialCreationOptions
Action to create a PublicKeyCredentialCreationOptions from the parameters in the WebAuthn context using the available `client`.
DeletePublicKeyCredential
An action that removes a credential registration from the credential repository.
ExistingRegistrationCredentialsLookupStrategy
A credential lookup function that returns the list of existing credentials from the `WebAuthnRegistrationContext`.
ExtractKeyInformationFromFormRequest
An action that extracts the credential ID for from the incoming HTTP request and uses a `BiConsumer` to set it back onto an appropriate context.
ExtractNicknameFromFormRequest
An action that extracts the key nickname from the incoming HTTP request.
ExtractPublicKeyCredentialAttestationFromFormRequest
An action that extracts the PublicKeyCredential containing the authenticator attestation response from the incoming HTTP request.
ExtractUsernameFromRegistrationForm
An action to populate a username into the `BaseWebAuthnContext`.
ExtractUsernameSearchFromFormRequest
An action that extracts the username search value from the incoming HTTP request.
InitializeAdminSubjectCanonicalizationContext
An action that creates a new `SubjectCanonicalizationContext` out of the search username in the admin context, ready for the c14n flows to canonicalize.
InlineEnrolmentRedirectFunction
A function that generates a redirect URL to return the user to a resource relative to the server root.
LabelCredentialRecords
Use the labelling function to add labels to each `EnhancedCredentialRecord` found in the context.
LookupCredentialsForUser
An action that lookups registered credentials for a username contained in the WebAuthn management context and sets them back onto the context.
ManagementContextCredentialRemovalConsumer
A `BiConsumer` that sets the credential ID to remove onto the WebAuthn management context.
MultiPredicateAccessPredicate
Access control implementation based on a `List` of predicates over a `ProfileRequestContext`.
PasskeyCredentialLabeller
A credential labeller function that labels credentials as 'Passkey' if they are discoverable.
PopulateInlineEnrolmentContext
Populate the `InlineEnrolmentContext` from the HTTP referer header in the HTTP request iff the registration query parameter contains 'inline'.
PopulateWebAuthnManagementContext
An action to create (or lookup) the `WebAuthnManagementContext` and set the admin principal name from the lookup strategy.
PopulateWebAuthnRegistrationContext
An action to create (or lookup) the `WebAuthnRegistrationContext` and populate with the username found from the lookup strategy.
RandomUserIdGenerator
A user.id generator that generates a random 64 byte user.id.
RegistrationContextCredentialRemovalConsumer
A `BiConsumer` that sets the credential ID to remove onto the WebAuthn registration context.
RegistrationContextCredentialToModifyConsumer
A `BiConsumer` that sets the credential ID to modify onto the WebAuthn registration context.
RequireStrongFreshAuthnAccessPredicate
Access control predicate, used within a WebAuthn registration flow, to check if a user with existing WebAuthn/FIDO2 credentials has performed a fresh, strong, authentication.
SecondFactorOnlyCredentialLabeller
A credential labeller function that labels credentials as 'SecondFactor' if the authenticator that created the credential should only be used as a second factor, and not sole factor of authentication.
StorePublicKeyCredential
An action that adds the public key credential in the registration context to the credential repository.
TriggerRegistrationOnLoad
Predicate wrapping an injectable predicate, indicating whether the WebAuthn registration ceremony should be automatically triggered when the page loads.
UpdateAdminContextWithC14nPrincipal
A WebAuthn management action that sets the principal name from the SubjectCanonicalizationContext back onto the WebAuthn context as the search username.
UpdateCredentialNickname
An action that updates the nickname of a credential in the credential repository.
ValidateAuthenticatorAttestationResponse
Validate the public key registration attempt by delegating the created public key credential to the WebAuthn client.