Andreas Coroiu
35500b197d
fix: broken webauthn controller tests ( #3421 )
2023-11-08 14:38:54 +01:00
Andreas Coroiu
e401fc0983
[PM-4167] Add PRF attestation flow during passkey registration ( #3339 )
...
* [PM-4167] feat: add support for `SupportsPrf`
* [PM-4167] feat: add `prfStatus` property
* [PM-4167] feat: add support for storing PRF keys
* [PM-4167] fix: allow credentials to be created without encryption support
* [PM-4167] fix: broken test
* [PM-4167] chore: remove whitespace
* [PM-4167] fix: controller test
* [PM-4167] chore: improve readability of `GetPrfStatus`
* [PM-4167] fix: make prf optional
* [PM-4167] fix: commit missing controller change
* [PM-4167] fix: tests
2023-11-07 16:59:51 +01:00
Jared Snider
f5f64059c5
Auth/PM-3659 - Disable Passkey registration if Require SSO Policy Enabled ( #3399 )
...
* PM-3659 - WebAuthnController.cs - Passkey Creation - Add RequireSSO login policy validation to prevent users from creating passkeys if require SSO applies to them.
* PM-3659 - per PR feedback, apply new require SSO validation to options call
* PM-3659 - Remove unneeded comment
* PM-3659 - Per PR feedback, add unit tests for new require SSO scenarios on both Post and Options endpoints on the WebAuthnController
* Remove duplicated line
* Remove extra whitespace
2023-11-01 13:39:00 -04:00
Kyle Spearrin
44c559c723
Support for passkey registration ( #2885 )
...
* support for fido2 auth
* stub out registration implementations
* stub out assertion steps and token issuance
* verify token
* webauthn tokenable
* remove duplicate expiration set
* revert sqlproj changes
* update sqlproj target framework
* update new validator signature
* [PM-2014] Passkey registration (#2915 )
* [PM-2014] chore: rename `IWebAuthnRespository` to `IWebAuthnCredentialRepository`
* [PM-2014] fix: add missing service registration
* [PM-2014] feat: add user verification when fetching options
* [PM-2014] feat: create migration script for mssql
* [PM-2014] chore: append to todo comment
* [PM-2014] feat: add support for creation token
* [PM-2014] feat: implement credential saving
* [PM-2014] chore: add resident key TODO comment
* [PM-2014] feat: implement passkey listing
* [PM-2014] feat: implement deletion without user verification
* [PM-2014] feat: add user verification to delete
* [PM-2014] feat: implement passkey limit
* [PM-2014] chore: clean up todo comments
* [PM-2014] fix: add missing sql scripts
Missed staging them when commiting
* [PM-2014] feat: include options response model in swagger docs
* [PM-2014] chore: move properties after ctor
* [PM-2014] feat: use `Guid` directly as input paramter
* [PM-2014] feat: use nullable guid in token
* [PM-2014] chore: add new-line
* [PM-2014] feat: add support for feature flag
* [PM-2014] feat: start adding controller tests
* [PM-2014] feat: add user verification test
* [PM-2014] feat: add controller tests for token interaction
* [PM-2014] feat: add tokenable tests
* [PM-2014] chore: clean up commented premium check
* [PM-2014] feat: add user service test for credential limit
* [PM-2014] fix: run `dotnet format`
* [PM-2014] chore: remove trailing comma
* [PM-2014] chore: add `Async` suffix
* [PM-2014] chore: move delay to constant
* [PM-2014] chore: change `default` to `null`
* [PM-2014] chore: remove autogenerated weirdness
* [PM-2014] fix: lint
* Added check for PasswordlessLogin feature flag on new controller and methods. (#3284 )
* Added check for PasswordlessLogin feature flag on new controller and methods.
* fix: build error from missing constructor argument
---------
Co-authored-by: Andreas Coroiu <andreas.coroiu@gmail.com>
* [PM-4171] Update DB to support PRF (#3321 )
* [PM-4171] feat: update database to support PRF
* [PM-4171] feat: rename `DescriptorId` to `CredentialId`
* [PM-4171] feat: add PRF felds to domain object
* [PM-4171] feat: add `SupportsPrf` column
* [PM-4171] fix: add missing comma
* [PM-4171] fix: add comma
* [PM-3263] fix identity server tests for passkey registration (#3331 )
* Added WebAuthnRepo to EF DI
* updated config to match current grant types
* Remove ExtensionGrantValidator (#3363 )
* Linting
---------
Co-authored-by: Andreas Coroiu <acoroiu@bitwarden.com>
Co-authored-by: Andreas Coroiu <andreas.coroiu@gmail.com>
Co-authored-by: Todd Martin <106564991+trmartin4@users.noreply.github.com>
Co-authored-by: Ike <137194738+ike-kottlowski@users.noreply.github.com>
Co-authored-by: Todd Martin <tmartin@bitwarden.com>
2023-10-30 09:40:06 -04:00
