Wiki source code of org.clazzes.login.yubikey
Last modified by wolfgang_glas@iteg_at on 2019-03-06 12.06:00
Hide last authors
| author | version | line-number | content |
|---|---|---|---|
 |
1.1 | 1 | === {{id name="org.clazzes.login.yubikey-YubikeyTokenOTPAdapter"/}}Yubikey Token OTP Adapter === |
| 2 | |||
| 3 | The token authentication provider {{code language="none"}}org.clazzes.login.yubikey{{/code}} implements the org.clazzes.util.sec.TokenOtpChecker interface by forwarding yubikey OTP to the yubico token verification API. | ||
| 4 | |||
| 5 | The maven artifact is: | ||
| 6 | |||
| 7 | (% class="code" %) | ||
| 8 | ((( | ||
| 9 | <groupId>org.clazzes.login</groupId> | ||
| 10 | <artifactId>yubikey-support</artifactId> | ||
| 11 | ))) | ||
| 12 | |||
| 13 | The yubi key token adapter is mostly used in conjunction with an LDAP login service with a configured {{code language="none"}}tokenIdsAttribute{{/code}} value. | ||
| 14 | |||
| 15 | === {{id name="org.clazzes.login.yubikey-Configuration"/}}Configuration === | ||
| 16 | |||
| 17 | The following configuration overview is valid as of version 1.3.0, which will be released around 2013-10-28. | ||
| 18 | |||
| 19 | (% class="wrapped" %) | ||
| 20 | |=((( | ||
| 21 | Name | ||
| 22 | )))|=((( | ||
| 23 | Default Value | ||
| 24 | )))|=((( | ||
| 25 | Description | ||
| 26 | ))) | ||
| 27 | |((( | ||
| 28 | (% class="p1" %) | ||
| 29 | (% class="s1" %)socketTimeoutMillis | ||
| 30 | )))|((( | ||
| 31 | 30000 | ||
| 32 | )))|((( | ||
| 33 | Read timeout for HTTP request to the yubico API. | ||
| 34 | ))) | ||
| 35 | |((( | ||
| 36 | (% class="p1" %) | ||
| 37 | (% class="s1" %)connectTimeoutMillis | ||
| 38 | )))|((( | ||
| 39 | 60000 | ||
| 40 | )))|((( | ||
| 41 | connection timeout for HTTP request to the yubico API. | ||
| 42 | ))) | ||
| 43 | |((( | ||
| 44 | (% class="p1" %) | ||
| 45 | (% class="s1" %)yubikeyVerifyLocation | ||
| 46 | )))|((( | ||
| 47 | (% class="p1" %) | ||
| 48 | (% class="s1" %)https:~/~/api.yubico.com/wsapi/2.0/verify | ||
| 49 | )))|((( | ||
| 50 | API endpoint to send requests to. | ||
| 51 | ))) | ||
| 52 | |((( | ||
| 53 | (% class="p1" %) | ||
| 54 | (% class="s1" %)yubikeyRequestorId | ||
| 55 | )))|((( | ||
| 56 | \\ | ||
| 57 | )))|((( | ||
| 58 | The requestor ID, which is received as part of the yubikey registration process. | ||
| 59 | ))) |