[cas-user] webauthn device registration, endpoint security

[Michal Voců]

Hi all,






management.endpoint.webAuthnDevices.enabled=true
management.endpoints.web.exposure.include=webAuthnDevices

and securing them by using

cas.monitor.endpoints.endpoint.webAuthnDevices.access=AUTHENTICATED




If that is the case, what data should be sent to the endpoint?

Best regards,

Michal Vocu

--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG

To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/876bd864-7375-8a2c-5976-df8f0cbf3e47%40cuni.cz.

begin:vcard
fn;quoted-printable:Michal Voc=C5=AF
n;quoted-printable:Voc=C5=AF;Michal
org;quoted-printable:Univerzita Karlova v Praze;=C3=9Astav v=C3=BDpo=C4=8Detn=C3=AD techniky
adr;quoted-printable;quoted-printable:;;Ovocn=C3=BD trh 3;Praha;;11636;=C4=8Cesk=C3=A1 republika
email;internet:mic...@cuni.cz
tel;work:224491809
url:http://uvt.cuni.cz
version:2.1
end:vcard

is there a way to expose "webAuthnDevices" actuator endpoint without interfering with standard registration flow in CAS server? We are using CAS server version 6.6.2. When I try to expose webauthn actuator endpoints by setting with basic Spring Security, the standard device registration flow now also requires basic authentication, which is not available to users. I would not mind using the CAS API for adding webauthn device, as mentioned in doc page, but I could not find description of such API. Does it refer to using POST to /cas/actuator/webAuthnDevices/{username}? --- You received this message because you are subscribed to the Google Groups "CAS Community" group.

smime.p7s
Description: S/MIME Cryptographic Signature