Package sk.iway.iwcm.system.spring.passkey

Class PasskeyConfig

java.lang.Object
sk.iway.iwcm.system.spring.passkey.PasskeyConfig
@Configuration public class PasskeyConfig extends Object
Spring configuration for PassKey/WebAuthn support. The main beans are provided by @Component annotated classes: - JpaPublicKeyCredentialUserEntityAdapter - implements PublicKeyCredentialUserEntityRepository - JpaUserCredentialRepositoryAdapter - implements UserCredentialRepository - WebjetWebAuthnUserDetailsService - UserDetailsService for WebAuthn authentication These adapters use JPA/Spring DATA repositories (PasskeyUserEntityRepository, PasskeyCredentialRepository) to persist WebAuthn data, consistent with the rest of the project's data access patterns. Enabled when Constants.getBoolean("password_passKeyEnabled") is true. Database tables: - users (extended with webauthn_user_id column to store the WebAuthn user identifier) - passkey_credentials (passkey_credential_id, credential_id, user_id, webauthn_user_id, ..., rp_id)

  • Constructor Summary

    Constructors
    Constructor
    Description
    PasskeyConfig()
     

  • Method Summary

    Modifier and Type
    Method
    Description
    org.springframework.security.web.webauthn.management.WebAuthnRelyingPartyOperations
    dynamicWebAuthnRelyingPartyOperations(org.springframework.security.web.webauthn.management.PublicKeyCredentialUserEntityRepository userEntityRepository, org.springframework.security.web.webauthn.management.UserCredentialRepository userCredentialRepository)
    Provides a dynamic WebAuthnRelyingPartyOperations that determines rpId from the current HTTP request.

    Methods inherited from class java.lang.Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

  • Constructor Details

    • PasskeyConfig

      public PasskeyConfig()

  • Method Details

    • dynamicWebAuthnRelyingPartyOperations

      @Bean public org.springframework.security.web.webauthn.management.WebAuthnRelyingPartyOperations dynamicWebAuthnRelyingPartyOperations(org.springframework.security.web.webauthn.management.PublicKeyCredentialUserEntityRepository userEntityRepository, org.springframework.security.web.webauthn.management.UserCredentialRepository userCredentialRepository)
      Provides a dynamic WebAuthnRelyingPartyOperations that determines rpId from the current HTTP request. This allows passkeys to work across multiple domains automatically.