Class WebAuthnAuthenticationFilter

java.lang.Object

com.codename1.backend.security.WebAuthnAuthenticationFilter

All Implemented Interfaces:

SecurityFilter

public final class WebAuthnAuthenticationFilter
extends Object
implements SecurityFilter

Signs a user in with a passkey: hands out the options of a sign-in at POST /webauthn/authenticate/options, and takes the authenticator's answer at POST /login/webauthn.

The options are kept in the session they were asked from, for five minutes unless set otherwise, and are taken out of it before the answer is looked at: a challenge is answered once, in the session it was given to, in time, or not at all.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	PENDING	The session attribute a sign-in's options wait under.

Method Summary

Modifier and Type	Method	Description
HttpServer.Response	doFilter(HttpServer.Request request, FilterChain chain)	The answer to request; null when nothing under the chain routes it, which the server answers 404.

Methods inherited from class Object

clone, equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

PENDING

public static final String PENDING

The session attribute a sign-in's options wait under.

See Also:

• Constant Field Values

Method Details

doFilter

public HttpServer.Response doFilter(HttpServer.Request request,
 FilterChain chain)
                             throws Exception

Description copied from interface: SecurityFilter

The answer to request; null when nothing under the chain routes it, which the server answers 404.

Specified by:

doFilter in interface SecurityFilter

Throws:

Exception