Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

  •  
     
    story #31173 register a new passkey
Actions
Summary
user
register a new passkey
Empty
  • There is a WebAuthn pane in user preferences
  • By clicking on the add button, I can fill an input with the key name and then register my passkey
  • Then a button 'check my key' appear
  • On clicking on this button, I can use my passkey to check that it works
Empty
Empty
Status
Authentication & LDAP
Done
Development
  • [ ] Does it involves User Interface? 
  • [ ] Are there any mockups?
  • [ ] Are permissions checked?
  • [ ] Does it need Javascript development?
  • [ ] Does it need a forge upgrade bucket?
  • [ ] Does it need to execute things in system events?
  • [ ] Does it impact project creation (templates)?
  • [ ] Is it exploratory?
  • Implement WebAuthnUser (get, create)
    • WebAuthnUserManager
    • WebAuthnUserDao
    • table in database
  • Implement WebAuthnCredentialSource (getAll, create)
    • composer require web-auth/webauthn-lib
    • WebAuthnCredentialSourceManager implements PublicKeyCredentialSourceRepository
    • WebAuthnCredentialSourceDao
    • table in database
  • Implement WebAuthnOptions (create, get)
    • WebAuthnOptionsManager
    • WebAuthnOptionsDao
    • table (registration) in database
  • Add REST route GET /api/webauthn/generate_registration_options
  • Add REST route POST /api/webauthn/check_registration
  • Implement interface
    • WebAuthn plugin
    • route GET /plugins/webauthn/account
    • template with just a button
    • js asset reacting on button click
  • Add REST route GET /api/webauthn/generate_authentication_options
  • Add REST route POST /api/webauthn/check_authentication
  • Add a check button in user preferences
    • js asset
Details
#31173
Kevin Traini (ktraini)
2023-05-19 14:17
2023-03-20 12:05
32760

References
Artifact links
Empty
Referencing story #31173

Artifact Tracker v5

epic #31170 Passkeys / WebAuthn
rel #31538 14.9

Git commit

tuleap/tuleap/stable

feat: Implement WebAuthnCredentialSource 72eb0972b0
User avatar Kevin Traini (ktraini) , 2023-03-28 08:48
feat: Begin registration ceremony a114e231d0
User avatar Kevin Traini (ktraini) , 2023-04-03 15:56
chore: Explain Option::unwrapOr() df5c3c1ea1
User avatar Joris MASSON (jmasson) , 2023-04-03 18:34
chore: Move stubs to tests/lib/Stubs folder 74cb9fc612
User avatar Joris MASSON (jmasson) , 2023-04-05 10:10
feat: Store challenge of registration ceremony 8b7bab6381
User avatar Kevin Traini (ktraini) , 2023-04-05 15:32
refactor: Reduce list of allowed algorithms to minimum 1f65d68b44
User avatar Kevin Traini (ktraini) , 2023-04-06 08:49
Remove unused e932a0644f
User avatar Marie Ange Garnier (marieange) , 2023-04-11 10:18
feat: Begin check of registration ceremony a3e71b2e89
User avatar Kevin Traini (ktraini) , 2023-04-12 13:45
fix: POST /webauthn/registration-challenge returns 200 7c8b807570
User avatar Kevin Traini (ktraini) , 2023-04-12 16:20
feat: Create PasskeyStub 33516965af
User avatar Kevin Traini (ktraini) , 2023-04-13 16:11
feat: Retrieve challenge for registration ceremony 3ee9c6e69b
User avatar Kevin Traini (ktraini) , 2023-04-14 15:34
feat: Check attestation response f7130be348
User avatar Kevin Traini (ktraini) , 2023-04-18 11:20
feat: Save credential source d044ab5a81
User avatar Kevin Traini (ktraini) , 2023-04-19 15:54
feat: Restler error response f7380d62a7
User avatar Kevin Traini (ktraini) , 2023-04-20 13:49
feat: Empty WebAuthn plugin 8ec0afb782
User avatar Kevin Traini (ktraini) , 2023-04-24 10:10
feat: Add route for WebAuthn account settings a8200acddb
User avatar Kevin Traini (ktraini) , 2023-04-25 14:06
feat: Add template with just a button c9aaabb76a
User avatar Kevin Traini (ktraini) , 2023-04-28 12:07
feat: add ts asset to register a new passkey 2460d33ff9
User avatar Kevin Traini (ktraini) , 2023-05-04 13:49
feat: Begin authentication ceremony 7c9e722ece
User avatar Kevin Traini (ktraini) , 2023-05-09 09:31
feat: Begin last step of authentication ceremony 7b38918d9a
User avatar Kevin Traini (ktraini) , 2023-05-09 11:06
feat: finish authentication ceremony 9c7a9b3fd6
User avatar Kevin Traini (ktraini) , 2023-05-11 13:44
fix: Storage of credenial public key in database 6b0dc44978
User avatar Kevin Traini (ktraini) , 2023-05-15 13:26
refactor: Move register script into a subscript 721f308a18
User avatar Kevin Traini (ktraini) , 2023-05-16 12:29
feat: Button to check your passkey 218ea0d4e3
User avatar Kevin Traini (ktraini) , 2023-05-19 10:21
refactor: Split user preferences tabs in sections 7eab429712
User avatar Kevin Traini (ktraini) , 2023-06-02 08:57
Display settings

Follow-ups

User avatar
Joris MASSON (jmasson)2023-03-28 09:56

gerrit #28175 (Implement WebAuthnCredentialSource) integrated in Tuleap 14.6.99.211

  • Status changed from Idea / Sandbox to On going
  • Permissions set to
User avatar
Kevin Traini (ktraini)2023-03-20 15:45
  • Acceptance criteria
    Something went wrong, the follow up content couldn't be loaded
    Only formatting have been changed, you should switch to markup to see the changes
  • Technical informations
    Something went wrong, the follow up content couldn't be loaded
    Only formatting have been changed, you should switch to markup to see the changes
User avatar
Kevin Traini (ktraini)2023-03-20 14:53
  • Acceptance criteria
    Something went wrong, the follow up content couldn't be loaded
    Only formatting have been changed, you should switch to markup to see the changes
  • Technical informations
    Something went wrong, the follow up content couldn't be loaded
    Only formatting have been changed, you should switch to markup to see the changes
User avatar
Kevin Traini (ktraini)2023-03-20 12:06
  • Technical informations
    Something went wrong, the follow up content couldn't be loaded
    Only formatting have been changed, you should switch to markup to see the changes
User avatar
Kevin Traini (ktraini)2023-03-20 12:06
  • Acceptance criteria
    Something went wrong, the follow up content couldn't be loaded
    Only formatting have been changed, you should switch to markup to see the changes