shiro icon indicating copy to clipboard operation
shiro copied to clipboard

passkey/webauthn support

Open goodale opened this issue 1 year ago • 3 comments

Search before asking

  • [X] I had searched in the issues and found no similar issues.

Enhancement Request

Is it possible to add webauthn (passkey) support to a shiro-based application

Describe the solution you'd like

Support webauthn

Are you willing to submit PR?

  • [ ] Yes I am willing to submit a PR!

goodale avatar Mar 22 '24 13:03 goodale

Maybe something similar to this? https://blog.bmarwell.de/2022/04/26/apache-shiro-jwt-authentication-jjwt.html

lprimak avatar Mar 23 '24 16:03 lprimak

Thank you for the link. We're on Tomcat 9, If I understand the jjwt project correctly it looks like we'd have to migrate to a fully Java/Jakarta-EE container, which unfortunately isn't feasible for us currently.

On Sat, Mar 23, 2024 at 12:42 PM Lenny Primak @.***> wrote:

Maybe something similar to this?

https://blog.bmarwell.de/2022/04/26/apache-shiro-jwt-authentication-jjwt.html

— Reply to this email directly, view it on GitHub https://github.com/apache/shiro/issues/1382#issuecomment-2016543397, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAJDHB7HFJNCIJE2TK453R3YZWWHVAVCNFSM6AAAAABFDKZQMGVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDAMJWGU2DGMZZG4 . You are receiving this because you authored the thread.Message ID: @.***>

goodale avatar Apr 01 '24 15:04 goodale

Thank you for the link. We're on Tomcat 9, If I understand the jjwt project correctly it looks like we'd have to migrate to a fully Java/Jakarta-EE container, which unfortunately isn't feasible for us currently.

I think you don't need to migrate to jakarta to use JJWT, the jdk based version is 7 => https://github.com/jwtk/jjwt/blob/2ad964a3f1d77ffa1a915640d94e9238216a52d6/pom.xml#L109C9-L109C37

fpapon avatar Mar 09 '25 12:03 fpapon