All Classes and Interfaces
Class
Description
Fires the sweep for assertion ceremonies that lapsed without ever being completed.
Resolves the timing the abandonment sweep depends on.
Relabels assertion ceremonies that lapsed without ever being completed.
Attestation processor for fmt = "android-key" (Android Keystore attestation).
FIDO2 server initializer
For Apple's anonymous attestation fmt="apple"
serves request for /assertion endpoint exposed by FIDO2 sever
Core offering by the FIDO2 server, assertion is invoked upon authentication
serves request for /attestation endpoint exposed by FIDO2 sever
Exception Class for Attestation related exceptions.
Interface class for AttestationFormatProcessor
The attestationObject contains base64url encoded buffer of CBOR encoded
attestation object.
Core offering by the FIDO2 server, attestation is invoked upon enrollment
A statement returned by the Attestation API.
Recovers the trust diagnostic, if any, from the exception that failed a registration.
Centralizes how attestation-trust failures are handled per attestation mode.
authData structure from https://www.w3.org/TR/webauthn/#authenticator-data
Every authentication is persisted under Person Entry
This enumeration describes the status of an authenticator model as identified by its AAID and potentially some additional information (such as a specific attestation key).
authData � a raw buffer struct containing user info.
Utility methods for base64 encoding / decoding
A holding class for certificate
Utiltiy class for Certificate related operations
Challenge generator class
The endpoint at which the requester can obtain FIDO2 metadata
configuration
Maps bean-validation failures (e.g. a missing/null request body annotated with
@NotNull)
to the FIDO2 conformance failure envelope.Utility classes for COSE key structure.
Operations with custom scripts
Conversions to/from JSON format and to/from CBOR format
Utility class for extracting device information from HTTP requests
for FIDO2 metrics collection
Provides search operations with user U2F devices
Method to calculate digests
Service for FIDO2 analytics and reporting
Cluster node service for FIDO2 metrics aggregation
Extends the centralized ClusterNodeService from jans-core-service
RuntimeException Class for Fido2CompromisedDevice
Extends RuntimeException
Fido2 RP resteasy exception handler
Scheduler service for FIDO2 metrics aggregation
Job for daily aggregation
Uses distributed locking to ensure only one node performs aggregation
Job for data cleanup
Job for hourly aggregation
This job is designed to work in cluster environments where nodes can be added/removed
All statistics are persisted to the database, not kept in memory
Uses distributed locking to ensure only one node performs aggregation
Job for monthly aggregation
Uses distributed locking to ensure only one node performs aggregation
Job for weekly aggregation
Uses distributed locking to ensure only one node performs aggregation
REST API controller for FIDO2/Passkey metrics
Provides endpoints to fetch metrics data for dashboards and analytics tools
SECURITY NOTE: Authentication and authorization for these endpoints should be enforced
at the infrastructure level (API gateway, OAuth interceptor, or reverse proxy).
Service for managing FIDO2 metrics data operations
Missing attestation certificate Exception
Error class for FIDO2 RP Errors
Class for Fido2RpRuntimeException
Parent class of all FIDO2 RuntimeExceptions
REST API controller exposing attestation-mode and MDS health diagnostics.
A
Fido2RuntimeException that also carries why the attestation was not trusted.Service for managing FIDO2 user-level metrics
Health check controller
Maps malformed request bodies (invalid JSON, bad base64url, unknown enum values, etc.) to the
FIDO2 conformance failure envelope instead of a container-generated error page.
The FIDO2 server has a local database of authenticator data in json format.
Logger service
Class that periodically updates the mds3 blob in the FIDO2 server
Raised when the FIDO Metadata Service answers a TOC download with HTTP 429 (Too Many Requests).
Store and retrieve metric
Attestation processor for attestations of fmt = none One of the attestation
formats called 'none'.
Obtain Organization Info
Attestation processor for attestations of fmt = packed
Provides operations with U2F RAW registration response
Provides operations with U2F RAW registration response
Every registration is persisted under Person Entry
Integration with Resteasy
Resolves an assurance decision for one relying party, falling back to the global configuration.
Integration with Resteasy
TOC is parsed and Hashmap containing JSON object of individual Authenticators
is created.
Assembles the read-only attestation and MDS status reported by the trust endpoints.
Attestation processor for attestations of fmt =fido-u2f
Provides operations with users.
Configure user session to confirm Fido2 device authentication
The endpoint at which the requester can obtain FIDO2 WebAuthn Origins metadata
configuration