Yubico / java-webauthn-server

93%

master: 93%

LAST BUILD ON BRANCH 1.5.0

branch: 1.5.0

CHANGE BRANCH

x

Reset

• 1.5.0
• 053469e35705e8814a6a84c488af4b350d326848
• 056f6efbec307fe0e9e27e83001cd43bd8fa43cd
• 1.0.1
• 1.1.0
• 1.1.0-RC1
• 1.1.1-RC1
• 1.2.0
• 1.2.0-RC1
• 1.3.0
• 1.3.0-RC1
• 1.3.0-RC2
• 1.4.0-RC1
• 1.4.0-RC2
• 1.4.1
• 1.4.1-RC1
• 1.4.9-RC1
• 1.5.0-RC1
• 1.5.0-RC2
• 1.6.0
• 1.6.0-RC1
• 1bdb93d8a95fdc87c9a07d219ccacf91e21c6de6
• 1f62d6cbcf9d1daba8e9817d4af1dd76b9cc3b46
• 2b8ef4a72bcfcbdf9b4ffdd58a0357c0b85c1eb8
• 2ec46104f2cd14e135d2d8d847dc66b6f4857055
• 477f660c17afca7250017c52be074345753520d5
• 4fd10cb60d9c92f605c3572600374c1bf1ef51fc
• 6e6d8ebfc5407cf3992f0dc519851b9febea42cc
• 929d26dfdbd6a8326cda2111a368249688009f45
• 94708c0174f3303a6b24e4ff2eb8fcf48b9015f6
• 9d95afd3a75c37f9f751c9bcdbc26a2cf027260a
• api-deps
• attestation-type-attestation-ca
• b61b99bcf6c991cfc453f337e2fb4db6705b1ea0
• c7c9543cf9558b4560b21a716d4322db2c04a7cc
• cb4060e8ab1e5ba354b79fb0cee15580573247f8
• cbef827f2c0e5bd98f491e0287c6d8b5c0906ad4
• ea4db1f9f7b4da38c7a58742ba58240c4f34fc7a
• experimental/recovery-extension
• github-actions
• github-actions-verify-release-sigs
• gradle-6
• issue-16-alternative-solution
• issue-16-untrusted-attestation-crash
• master
• origin-matching
• release-doc
• release-verify-sigs
• rs1
• scan
• scanner-fixes
• scanner-test
• tmmp-bisect-travis
• travis-timeout
• travis-tmp
• unknown-transports
• update-attestation-metadata
• verify-credkey-alg
• versions
• workaround-chrome-bug-847878

Build # 373

Build Type

push

travis-ci

Committed by emlun

Commit Message

Release 1.5.0

Changes:

- `RelyingParty` now makes an immutable copy of the `origins` argument,
  instead of storing a reference to a possibly mutable value.
- The enum `AuthenticatorTransport` has been replaced by a value class
  containing methods and value constants equivalent to the previous
  enum.
- The return type of `PublicKeyCredentialDescriptor.getTransports()` is
  now a `SortedSet` instead of `Set`. The builder still accepts a plain
  `Set`.
- Registration ceremony now verifies that the returned credential public
  key matches one of the algorithms specified in
  `RelyingParty.preferredPubkeyParams` and can be successfully parsed.

New features:

- Origin matching can now be relaxed via two new `RelyingParty` options:
  - `allowOriginPort` (default `false`): Allow any port number in the
    origin
  - `allowOriginSubdomain` (default `false`): Allow any subdomain of any
    origin listed in `RelyingParty.origins`
  - See JavaDoc for details and examples.
- The new `AuthenticatorTransport` can now contain any string value as
  the transport identifier, as required in the editor's draft of the L2
  spec. See: https://github.com/w3c/webauthn/pull/1275
- Added support for RS1 credentials. Registration of RS1 credentials is
  not enabled by default, but can be enabled by setting
  `RelyingParty.preferredPubKeyCredParams` to a list containing
  `PublicKeyCredentialParameters.RS1`.
  - New constant `PublicKeyCredentialParameters.RS1`
  - New constant `COSEAlgorithmIdentifier.RS1`

Run Details

646 of 692 relevant lines covered (93.35%)

1.02 hits per line