Package io.jans.fido2.exception

Class Fido2TrustException

java.lang.Object

java.lang.Throwable

java.lang.Exception

java.lang.RuntimeException

io.jans.fido2.exception.Fido2RuntimeException

io.jans.fido2.exception.Fido2TrustException

All Implemented Interfaces:

Serializable

public class Fido2TrustException
extends Fido2RuntimeException

A Fido2RuntimeException that also carries why the attestation was not trusted.

It is a subclass rather than a new exception type on purpose: every existing catch (Fido2RuntimeException) continues to catch it, and the status and message it is constructed with are the same ones the plain exception carried. Nothing about the rejection changes — the diagnostic code simply travels with the failure so metrics can record it instead of a free-text message.

Trust failures that must surface as a FIDO error envelope throw a WebApplicationException instead; those sites pass an instance of this class as the cause, which is where the diagnostic resolver finds it.

Author:

Janssen Project

See Also:

• Serialized Form

Constructor Summary

Constructors

Constructor	Description
Fido2TrustException(AttestationTrustDiagnostic diagnostic, String errorMessage)
Fido2TrustException(AttestationTrustDiagnostic diagnostic, String aaguid, String errorMessage)
Fido2TrustException(AttestationTrustDiagnostic diagnostic, String aaguid, String errorMessage, Throwable cause)

Method Summary

Modifier and Type	Method	Description
String	getAaguid()	The AAGUID the rejection concerns, or null when the failure is not tied to one (for example an attestation format that the mode does not permit).
AttestationTrustDiagnostic	getDiagnostic()	The reason the authenticator was not trusted.

Methods inherited from class io.jans.fido2.exception.Fido2RuntimeException

getFormattedMessage

Methods inherited from class java.lang.Throwable

addSuppressed, fillInStackTrace, getCause, getLocalizedMessage, getMessage, getStackTrace, getSuppressed, initCause, printStackTrace, printStackTrace, printStackTrace, setStackTrace, toString

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Details

Fido2TrustException

public Fido2TrustException(AttestationTrustDiagnostic diagnostic,
 String errorMessage)

Fido2TrustException

public Fido2TrustException(AttestationTrustDiagnostic diagnostic,
 String aaguid,
 String errorMessage)

Fido2TrustException

public Fido2TrustException(AttestationTrustDiagnostic diagnostic,
 String aaguid,
 String errorMessage,
 Throwable cause)

Method Details

getDiagnostic

public AttestationTrustDiagnostic getDiagnostic()

The reason the authenticator was not trusted.

getAaguid

public String getAaguid()

The AAGUID the rejection concerns, or null when the failure is not tied to one (for example an attestation format that the mode does not permit).