Skip to content

Conversation

nilsbehlen
Copy link
Member

  • PIResponse class can return the transaction based on the mode/type, which currently are Push, WebAuthn, Passkey and OTP.
  • HTTP request headers are logged
  • WebAuthn class as derived class of Challenge has been removed to allow simple serialization of PIResponse
  • allowCredentials for WebAuthnSignRequests are merged when the PIResponse object is created and the combined SignRequest is set to PIResponse.webAuthnSignRequest. WebAuthn challenges are not in the multi_challenge list anymore!

* PIResponse class can return the transaction based on the mode/type, which currently are Push, WebAuthn, Passkey and OTP.
* HTTP request headers are logged
* WebAuthn class as derived class of Challenge has been removed to allow simple serialization of PIResponse
* allowCredentials for WebAuthnSignRequests are merged when the PIResponse object is created and the combined SignRequest
  is set to PIResponse.webAuthnSignRequest. WebAuthn challenges are not in the multi_challenge list anymore!
Copy link

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR introduces several changes for version 1.4.0 aimed at improving how PIResponse handles various transaction types, refining HTTP header logging, and simplifying the code by removing the WebAuthn class. Key changes include:

  • Updating PIResponse to return transaction IDs and merging WebAuthn sign requests.
  • Removing the derived WebAuthn class and adjusting related API logic.
  • Logging HTTP request headers in a cleaner format.

Reviewed Changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 2 comments.

Show a summary per file
File Description
src/test/java/org/privacyidea/TestWebAuthn.java Commented-out code removed (was used to check WebAuthn instance behavior).
src/main/java/org/privacyidea/WebAuthn.java Entire file removed to simplify serialization in PIResponse.
src/main/java/org/privacyidea/PIResponse.java Added transaction ID getters and changed the behavior of webAuthnSignRequests method.
src/main/java/org/privacyidea/PIConstants.java Updated constant "USERHANDLE" to follow camelCase.
src/main/java/org/privacyidea/JSONParser.java Adjusted merging of WebAuthn sign requests by updating the method signature.
src/main/java/org/privacyidea/Endpoint.java Modified HTTP header logging to remove newlines.
src/main/java/org/privacyidea/Challenge.java Changed "attributes" from a List to a Map and updated related getters.
Changelog.md Updated changelog to reflect the changes of version 1.4.0.

the tests are bad currently
@nilsbehlen nilsbehlen requested a review from Copilot May 16, 2025 13:35
Copy link

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

@nilsbehlen nilsbehlen merged commit 277217e into master May 20, 2025
1 check passed
@nilsbehlen nilsbehlen deleted the v1-4-0 branch May 20, 2025 09:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants