Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

feat: Allow anonymous to get webauthn auth challenge

Download Browse

Part of story #33005 login with only my passkey As the user is not connected when login, we need to allow it to get authentication challenge as an anonymous user. *Testing:* If you fetch POST /webauthn/authentication-challenge as anonymous: - 400 if body is empty - 400 if username field is missing - 404 if user not found - 403 if user has no registered passkeys - 200 + authentication challenge if all goes well Change-Id: I70324d24068e2f5a138acd0114baf97dacbb2e36

+242 −22
Kevin Traini (ktraini) 2023-07-26 12:42
Kevin Traini (ktraini) 2023-07-26 14:34
fdee6a28adc2e11f1c66751fc634970803849927
70ec7e52c006f21181538f437910b5b8330f788d
git #tuleap/stable/fdee6a28adc2e11f1c66751fc634970803849927

Modified Files

Side by side diff
Inline diff
Name
M plugins/crosstracker/include/CrossTracker/Report/Query/Advanced/QueryBuilder/Metadata/AlwaysThereField/Users/EqualComparisonFromWhereBuilder.php +1 −1 Go to diff View file
M plugins/crosstracker/include/CrossTracker/Report/Query/Advanced/QueryBuilder/Metadata/AlwaysThereField/Users/NotEqualComparisonFromWhereBuilder.php +1 −1 Go to diff View file
M site-content/fr_FR/LC_MESSAGES/tuleap-core.po +7 −0 Go to diff View file
M site-content/pt_BR/LC_MESSAGES/tuleap-core.po +7 −0 Go to diff View file
A src/common/User/RetrieveUserByUserName.php +31 −0 Go to diff View file
M src/common/User/UserManager.class.php +4 −4 Go to diff View file
M src/common/WebAuthn/Controllers/PostAuthenticationChallengeController.php +32 −4 Go to diff View file
A tests/lib/Stubs/ProvideAndRetrieveUserStub.php +71 −0 Go to diff View file
M tests/unit/common/WebAuthn/Controllers/PostAuthenticationChallengeControllerTest.php +88 −12 Go to diff View file