Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

feat: Begin authentication ceremony

Download Browse

Part of story #31173 register a new passkey This commit introduces route POST /webauthn/authentication-challenge. This route generate options for authentication ceremony. These options are then sent to the passkey. See WebAuthn documentation for more precision. *Testing:* Fetch POST /webauthn/authentication-challenge: - If you are not connected, you will get an error 401 - If you don't have registered passkey, you will get an error 403 with the message "You have to register your passkey before authenticate with it" - Else you will receive a json with this format : { "allowCredentials": { "id": string, "type": string }[], "challenge": string } Change-Id: I3d4c3a6960e50ca501a5dfb7c41ae3fb57ba6bea

+268 −3
Kevin Traini (ktraini) 2023-05-05 09:05
Kevin Traini (ktraini) 2023-05-09 09:31
7c9e722ecedcba411b61a59cf96836d65e6e373d
2e84a804342237563ddc5688655d17c31b3a2eae
git #tuleap/stable/7c9e722ecedcba411b61a59cf96836d65e6e373d

Modified Files

Side by side diff
Inline diff
Name
M site-content/fr_FR/LC_MESSAGES/tuleap-core.po +5 −0 Go to diff View file
M site-content/pt_BR/LC_MESSAGES/tuleap-core.po +3 −0 Go to diff View file
M src/common/Request/RouteCollector.php +17 −0 Go to diff View file
A src/common/WebAuthn/Controllers/PostAuthenticationChallengeController.php +79 −0 Go to diff View file
A src/common/WebAuthn/Source/GetAllCredentialSourceByUserId.php +31 −0 Go to diff View file
M src/common/WebAuthn/Source/WebAuthnCredentialSourceDao.php +1 −1 Go to diff View file
M tests/lib/Stubs/WebAuthn/WebAuthnCredentialSourceDaoStub.php +17 −2 Go to diff View file
A tests/unit/common/WebAuthn/Controllers/PostAuthenticationChallengeControllerTest.php +115 −0 Go to diff View file