Bernd Schoolmann
3ad4bc1cab
[PM-4371] Implement PRF key rotation ( #4157 )
...
* Send rotateable keyset on list webauthn keys
* Implement basic prf key rotation
* Add validator for webauthn rotation
* Fix accounts controller tests
* Add webauthn rotation validator tests
* Introduce separate request model
* Fix tests
* Remove extra empty line
* Remove filtering in validator
* Don't send encrypted private key
* Fix tests
* Implement delegated webauthn db transactions
* Add backward compatibility
* Fix query not working
* Update migration sql
* Update dapper query
* Remove unused helper
* Rename webauthn to WebAuthnLogin
* Fix linter errors
* Fix tests
* Fix tests
2024-06-17 20:46:57 +02:00
Ike
767c58466c
[PM-4168] update keys for WebAuthnLoginCredential ( #3506 )
...
* allow update of webauthnlogincredential
* Added Tests
* fixed tests to use commands
* addressing various feedback items
2023-12-15 13:38:34 -08:00
Andreas Coroiu
d63c917c95
[PM-4619] Rewrite UserService methods as commands ( #3432 )
...
* [PM-4619] feat: scaffold new create options command
* [PM-4169] feat: implement credential create options command
* [PM-4619] feat: create command for credential creation
* [PM-4619] feat: create assertion options command
* [PM-4619] chore: clean-up unused argument
* [PM-4619] feat: implement assertion command
* [PM-4619] feat: migrate to commands
* [PM-4619] fix: lint
* [PM-4169] fix: use constant
* [PM-4619] fix: lint
I have no idea what this commit acutally changes, but the file seems to have some character encoding issues. This fix was generated by `dotnet format`
2023-12-14 09:35:52 +01:00
Thomas Rittson
42cec31d07
[AC-1287] AC Team code ownership moves: Policies (1/2) ( #3383 )
...
* note: IPolicyData and EntityFramework Policy.cs are moved without any
changes to namespace or content in order to preserve git history.
2023-11-22 16:07:37 -05:00
Andreas Coroiu
35500b197d
fix: broken webauthn controller tests ( #3421 )
2023-11-08 14:38:54 +01:00
Andreas Coroiu
e401fc0983
[PM-4167] Add PRF attestation flow during passkey registration ( #3339 )
...
* [PM-4167] feat: add support for `SupportsPrf`
* [PM-4167] feat: add `prfStatus` property
* [PM-4167] feat: add support for storing PRF keys
* [PM-4167] fix: allow credentials to be created without encryption support
* [PM-4167] fix: broken test
* [PM-4167] chore: remove whitespace
* [PM-4167] fix: controller test
* [PM-4167] chore: improve readability of `GetPrfStatus`
* [PM-4167] fix: make prf optional
* [PM-4167] fix: commit missing controller change
* [PM-4167] fix: tests
2023-11-07 16:59:51 +01:00
Jared Snider
f5f64059c5
Auth/PM-3659 - Disable Passkey registration if Require SSO Policy Enabled ( #3399 )
...
* PM-3659 - WebAuthnController.cs - Passkey Creation - Add RequireSSO login policy validation to prevent users from creating passkeys if require SSO applies to them.
* PM-3659 - per PR feedback, apply new require SSO validation to options call
* PM-3659 - Remove unneeded comment
* PM-3659 - Per PR feedback, add unit tests for new require SSO scenarios on both Post and Options endpoints on the WebAuthnController
* Remove duplicated line
* Remove extra whitespace
2023-11-01 13:39:00 -04:00
Kyle Spearrin
44c559c723
Support for passkey registration ( #2885 )
...
* support for fido2 auth
* stub out registration implementations
* stub out assertion steps and token issuance
* verify token
* webauthn tokenable
* remove duplicate expiration set
* revert sqlproj changes
* update sqlproj target framework
* update new validator signature
* [PM-2014] Passkey registration (#2915 )
* [PM-2014] chore: rename `IWebAuthnRespository` to `IWebAuthnCredentialRepository`
* [PM-2014] fix: add missing service registration
* [PM-2014] feat: add user verification when fetching options
* [PM-2014] feat: create migration script for mssql
* [PM-2014] chore: append to todo comment
* [PM-2014] feat: add support for creation token
* [PM-2014] feat: implement credential saving
* [PM-2014] chore: add resident key TODO comment
* [PM-2014] feat: implement passkey listing
* [PM-2014] feat: implement deletion without user verification
* [PM-2014] feat: add user verification to delete
* [PM-2014] feat: implement passkey limit
* [PM-2014] chore: clean up todo comments
* [PM-2014] fix: add missing sql scripts
Missed staging them when commiting
* [PM-2014] feat: include options response model in swagger docs
* [PM-2014] chore: move properties after ctor
* [PM-2014] feat: use `Guid` directly as input paramter
* [PM-2014] feat: use nullable guid in token
* [PM-2014] chore: add new-line
* [PM-2014] feat: add support for feature flag
* [PM-2014] feat: start adding controller tests
* [PM-2014] feat: add user verification test
* [PM-2014] feat: add controller tests for token interaction
* [PM-2014] feat: add tokenable tests
* [PM-2014] chore: clean up commented premium check
* [PM-2014] feat: add user service test for credential limit
* [PM-2014] fix: run `dotnet format`
* [PM-2014] chore: remove trailing comma
* [PM-2014] chore: add `Async` suffix
* [PM-2014] chore: move delay to constant
* [PM-2014] chore: change `default` to `null`
* [PM-2014] chore: remove autogenerated weirdness
* [PM-2014] fix: lint
* Added check for PasswordlessLogin feature flag on new controller and methods. (#3284 )
* Added check for PasswordlessLogin feature flag on new controller and methods.
* fix: build error from missing constructor argument
---------
Co-authored-by: Andreas Coroiu <andreas.coroiu@gmail.com>
* [PM-4171] Update DB to support PRF (#3321 )
* [PM-4171] feat: update database to support PRF
* [PM-4171] feat: rename `DescriptorId` to `CredentialId`
* [PM-4171] feat: add PRF felds to domain object
* [PM-4171] feat: add `SupportsPrf` column
* [PM-4171] fix: add missing comma
* [PM-4171] fix: add comma
* [PM-3263] fix identity server tests for passkey registration (#3331 )
* Added WebAuthnRepo to EF DI
* updated config to match current grant types
* Remove ExtensionGrantValidator (#3363 )
* Linting
---------
Co-authored-by: Andreas Coroiu <acoroiu@bitwarden.com>
Co-authored-by: Andreas Coroiu <andreas.coroiu@gmail.com>
Co-authored-by: Todd Martin <106564991+trmartin4@users.noreply.github.com>
Co-authored-by: Ike <137194738+ike-kottlowski@users.noreply.github.com>
Co-authored-by: Todd Martin <tmartin@bitwarden.com>
2023-10-30 09:40:06 -04:00
