proxmox-mirrors/proxmox
1
0
Fork 1
mirror of https://git.proxmox.com/git/proxmox synced 2025-08-09 23:07:51 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

tfa: expose 'allow_subdomains' property

Browse Source 
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
This commit is contained in:
Wolfgang Bumiller 2022-07-25 13:16:22 +02:00
parent b84446a030
commit ea34292850
1 changed files with 16 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
proxmox-tfa/src/api/webauthn.rs
View File

@ -57,7 +57,7 @@ impl From<OriginUrl> for String {
#[cfg_attr(feature = "api-types", derive(Updater))] #[cfg_attr(feature = "api-types", derive(Updater))]
/// Server side webauthn server configuration. /// Server side webauthn server configuration.
#[derive(Clone, Deserialize, Serialize)] #[derive(Clone, Deserialize, Serialize)]
#[serde(deny_unknown_fields)] #[serde(deny_unknown_fields, rename_all = "kebab-case")]
pub struct WebauthnConfig { pub struct WebauthnConfig {
/// Relying party name. Any text identifier. /// Relying party name. Any text identifier.
/// ///
@ -75,6 +75,15 @@ pub struct WebauthnConfig {
/// ///
/// Changing this *will* break existing credentials. /// Changing this *will* break existing credentials.
pub id: String, pub id: String,
/// If an `origin` is specified, this specifies whether subdomains should be considered valid
/// as well.
///
/// May be changed at any time.
///
/// Defaults to `true`.
#[serde(skip_serializing_if = "Option::is_none")]
pub allow_subdomains: Option<bool>,
} }
impl WebauthnConfig { impl WebauthnConfig {
@ -97,6 +106,7 @@ impl WebauthnConfig {
.ok_or_else(|| format_err!("missing webauthn origin"))?, .ok_or_else(|| format_err!("missing webauthn origin"))?,
rp: &self.rp, rp: &self.rp,
id: &self.id, id: &self.id,
allow_subdomains: self.allow_subdomains.unwrap_or(true),
}) })
} }
} }
@ -105,6 +115,7 @@ pub(super) struct WebauthnConfigInstance<'a> {
rp: &'a str, rp: &'a str,
origin: &'a Url, origin: &'a Url,
id: &'a str, id: &'a str,
allow_subdomains: bool,
} }
/// For now we just implement this on the configuration this way. /// For now we just implement this on the configuration this way.
@ -123,6 +134,10 @@ impl<'a> webauthn_rs::WebauthnConfig for WebauthnConfigInstance<'a> {
fn get_relying_party_id(&self) -> &str { fn get_relying_party_id(&self) -> &str {
self.id self.id
} }
fn allow_subdomains_origin(&self) -> bool {
self.allow_subdomains
}
} }
/// A webauthn registration challenge. /// A webauthn registration challenge.