Package org.keycloak.authentication.authenticators.browser

Class WebAuthnPasswordlessAuthenticator

java.lang.Object

org.keycloak.authentication.authenticators.browser.WebAuthnAuthenticator

org.keycloak.authentication.authenticators.browser.WebAuthnPasswordlessAuthenticator

All Implemented Interfaces:

Authenticator, CredentialValidator<WebAuthnCredentialProvider>, Provider

Direct Known Subclasses:

PasskeysConditionalUIAuthenticator, WebAuthnConditionalUIAuthenticator

public class WebAuthnPasswordlessAuthenticator
extends WebAuthnAuthenticator

Authenticator for WebAuthn authentication with passwordless credential. This class is temporary and will be likely removed in the future during future improvements in authentication SPI

Field Summary

Fields inherited from class org.keycloak.authentication.authenticators.browser.WebAuthnAuthenticator

session

Constructor Summary

Constructors

Constructor	Description
WebAuthnPasswordlessAuthenticator(KeycloakSession session)

Method Summary

Modifier and Type	Method	Description
void	action(AuthenticationFlowContext context)
WebAuthnPasswordlessCredentialProvider	getCredentialProvider(KeycloakSession session)
protected String	getCredentialType()
List<RequiredActionFactory>	getRequiredActions(KeycloakSession session)
protected WebAuthnPolicy	getWebAuthnPolicy(AuthenticationFlowContext context)
boolean	requiresUser()
void	setRequiredActions(KeycloakSession session, RealmModel realm, UserModel user)
protected boolean	shouldDisplayAuthenticators(AuthenticationFlowContext context)
protected boolean	validateUsername(AuthenticationFlowContext context, jakarta.ws.rs.core.MultivaluedMap<String,String> formData, String username)

Methods inherited from class org.keycloak.authentication.authenticators.browser.WebAuthnAuthenticator

authenticate, close, configuredFor, createErrorResponse, fillContextForm, getRpID, setErrorResponse

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.keycloak.authentication.Authenticator

areRequiredActionsEnabled

Methods inherited from interface org.keycloak.authentication.CredentialValidator

getCredentials, getType

Constructor Details

WebAuthnPasswordlessAuthenticator

public WebAuthnPasswordlessAuthenticator(KeycloakSession session)

Method Details

getWebAuthnPolicy

protected WebAuthnPolicy getWebAuthnPolicy(AuthenticationFlowContext context)

Overrides:

getWebAuthnPolicy in class WebAuthnAuthenticator

getCredentialType

protected String getCredentialType()

Overrides:

getCredentialType in class WebAuthnAuthenticator

shouldDisplayAuthenticators

protected boolean shouldDisplayAuthenticators(AuthenticationFlowContext context)

Overrides:

shouldDisplayAuthenticators in class WebAuthnAuthenticator

setRequiredActions

public void setRequiredActions(KeycloakSession session,
 RealmModel realm,
 UserModel user)

Specified by:

setRequiredActions in interface Authenticator

Overrides:

setRequiredActions in class WebAuthnAuthenticator

getRequiredActions

public List<RequiredActionFactory> getRequiredActions(KeycloakSession session)

Specified by:

getRequiredActions in interface Authenticator

Overrides:

getRequiredActions in class WebAuthnAuthenticator

getCredentialProvider

public WebAuthnPasswordlessCredentialProvider getCredentialProvider(KeycloakSession session)

Specified by:

getCredentialProvider in interface CredentialValidator<WebAuthnCredentialProvider>

Overrides:

getCredentialProvider in class WebAuthnAuthenticator

requiresUser

public boolean requiresUser()

Specified by:

requiresUser in interface Authenticator

Overrides:

requiresUser in class WebAuthnAuthenticator

action

public void action(AuthenticationFlowContext context)

Specified by:

action in interface Authenticator

Overrides:

action in class WebAuthnAuthenticator

validateUsername

protected boolean validateUsername(AuthenticationFlowContext context,
 jakarta.ws.rs.core.MultivaluedMap<String,String> formData,
 String username)