Package org.gluu.oxauth.service.fido.u2f

Class AuthenticationService

java.lang.Object

org.gluu.oxauth.service.fido.u2f.RequestService

org.gluu.oxauth.service.fido.u2f.AuthenticationService

@ApplicationScoped
@Named("u2fAuthenticationService")
public class AuthenticationService
extends RequestService

Provides operations with U2F authentication request

Version:

August 9, 2017

Author:

Yuriy Movchan

Constructor Summary

Constructors

Constructor	Description
AuthenticationService()

Method Summary

Modifier and Type	Method	Description
AuthenticateRequestMessage	buildAuthenticateRequestMessage(java.lang.String appId, java.lang.String userInum)
DeviceRegistrationResult	finishAuthentication(AuthenticateRequestMessage requestMessage, AuthenticateResponse response, java.lang.String userInum)
DeviceRegistrationResult	finishAuthentication(AuthenticateRequestMessage requestMessage, AuthenticateResponse response, java.lang.String userInum, java.util.Set<java.lang.String> facets)
AuthenticateRequest	getAuthenticateRequest(AuthenticateRequestMessage requestMessage, AuthenticateResponse response)
AuthenticateRequestMessage	getAuthenticationRequestMessage(java.lang.String oxId)
AuthenticateRequestMessageLdap	getAuthenticationRequestMessageByRequestId(java.lang.String requestId)
SHA256withECDSASignatureVerification	getBouncyCastleSignatureVerification()
java.lang.String	getDnForAuthenticateRequestMessage(java.lang.String oxId)	Build DN string for U2F authentication request
java.lang.String	getUserInumByKeyHandle(java.lang.String appId, java.lang.String keyHandle)
void	removeAuthenticationRequestMessage(AuthenticateRequestMessageLdap authenticateRequestMessageLdap)
AuthenticateRequest	startAuthentication(java.lang.String appId, DeviceRegistration device)
AuthenticateRequest	startAuthentication(java.lang.String appId, DeviceRegistration device, byte[] challenge)
void	storeAuthenticationRequestMessage(AuthenticateRequestMessage requestMessage, java.lang.String userInum, java.lang.String sessionId)

Methods inherited from class org.gluu.oxauth.service.fido.u2f.RequestService

getExpiredRequestMessages, removeRequestMessage

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AuthenticationService

public AuthenticationService()

Method Detail

getBouncyCastleSignatureVerification

@Produces
@ApplicationScoped
@Named("sha256withECDSASignatureVerification")
public SHA256withECDSASignatureVerification getBouncyCastleSignatureVerification()

buildAuthenticateRequestMessage

public AuthenticateRequestMessage buildAuthenticateRequestMessage(java.lang.String appId,
                                                                  java.lang.String userInum)
                                                           throws BadInputException,
                                                                  NoEligableDevicesException

Throws:

BadInputException

NoEligableDevicesException

startAuthentication

public AuthenticateRequest startAuthentication(java.lang.String appId,
                                               DeviceRegistration device)
                                        throws DeviceCompromisedException

Throws:

DeviceCompromisedException

startAuthentication

public AuthenticateRequest startAuthentication(java.lang.String appId,
                                               DeviceRegistration device,
                                               byte[] challenge)
                                        throws DeviceCompromisedException

Throws:

DeviceCompromisedException

finishAuthentication

public DeviceRegistrationResult finishAuthentication(AuthenticateRequestMessage requestMessage,
                                                     AuthenticateResponse response,
                                                     java.lang.String userInum)
                                              throws BadInputException,
                                                     DeviceCompromisedException

Throws:

BadInputException

DeviceCompromisedException

finishAuthentication

public DeviceRegistrationResult finishAuthentication(AuthenticateRequestMessage requestMessage,
                                                     AuthenticateResponse response,
                                                     java.lang.String userInum,
                                                     java.util.Set<java.lang.String> facets)
                                              throws BadInputException,
                                                     DeviceCompromisedException

Throws:

BadInputException

DeviceCompromisedException

getAuthenticateRequest

public AuthenticateRequest getAuthenticateRequest(AuthenticateRequestMessage requestMessage,
                                                  AuthenticateResponse response)
                                           throws BadInputException

Throws:

BadInputException

storeAuthenticationRequestMessage

public void storeAuthenticationRequestMessage(AuthenticateRequestMessage requestMessage,
                                              java.lang.String userInum,
                                              java.lang.String sessionId)

getAuthenticationRequestMessage

public AuthenticateRequestMessage getAuthenticationRequestMessage(java.lang.String oxId)

getAuthenticationRequestMessageByRequestId

public AuthenticateRequestMessageLdap getAuthenticationRequestMessageByRequestId(java.lang.String requestId)

removeAuthenticationRequestMessage

public void removeAuthenticationRequestMessage(AuthenticateRequestMessageLdap authenticateRequestMessageLdap)

getUserInumByKeyHandle

public java.lang.String getUserInumByKeyHandle(java.lang.String appId,
                                               java.lang.String keyHandle)
                                        throws InvalidKeyHandleDeviceException

Throws:

InvalidKeyHandleDeviceException

getDnForAuthenticateRequestMessage

public java.lang.String getDnForAuthenticateRequestMessage(java.lang.String oxId)

Build DN string for U2F authentication request