Package io.jans.fido2.service

Class RpPolicyService

java.lang.Object

io.jans.fido2.service.RpPolicyService

@ApplicationScoped
public class RpPolicyService
extends Object

Resolves an assurance decision for one relying party, falling back to the global configuration.

Before per-RP policy existed every decision came from Fido2Configuration, so the fallback is what keeps an unconfigured deployment behaving exactly as it did: an RP with no matching entry, or a matching entry whose policy leaves the field unset, resolves to the global value.

The origin is matched the same way AttestationService.createRpDomain matches it, so the policy that applies and the RP that a ceremony is attributed to can never disagree.

Constructor Summary

Constructors

Constructor	Description
RpPolicyService()

Method Summary

Modifier and Type	Method	Description
String	resolveAttestationMode(String origin)	The attestation mode in force for a ceremony on this origin.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

RpPolicyService

public RpPolicyService()

Method Details

resolveAttestationMode

public String resolveAttestationMode(String origin)

The attestation mode in force for a ceremony on this origin.

Parameters:

origin - the resolved ceremony origin, as stored on the registration entry; may be null

Returns:

the per-RP mode when set, otherwise the global mode