Add WebAuthn support to XWiki

• Thomas Mortagne
• Fawad Ali

• Mohammad Humayun Khan

The idea is to allow browser to automatically authenticate on XWiki using the new WebAuthn standard.

For more details about WebAuthn see the following links:

• https://webauthn.org/
• https://www.w3.org/TR/webauthn/
• https://developer.mozilla.org/en-US/docs/Web/API/Web_Authentication_API
• https://webauthn.me/

See https://www.xwiki.org/xwiki/bin/view/Documentation/AdminGuide/Authentication/ for details about XWiki authentication framework.

• Mostly Java
• Understanding HTTP/HTTPS and various authentication systems (user/pass, header, OAuth2, etc.) at least theoretically

2021

Failed

Description

You can find details about the project here: https://design.xwiki.org/xwiki/bin/view/Proposal/AddWebAuthnsupporttoXWiki
Forum post: https://forum.xwiki.org/t/add-webauthn-support-to-xwiki-gsoc21-project/8812

Milestones

Milestone 1 [07 June - 13 June]: Setup the maven project: WEBAUTHN-1 [100% complete]
Milestone 2 [14 June - 21 June]: Basic Authenticator extending XWikiAuthServiceImpl [100% complete]
Milestone 3 [22 June - 28 June]: Issues: WEBAUTHN-2, WEBAUTHN-3  [75% complete]
Milestone 4 [29 June - 06 July]: Issues: WEBAUTHN-4  [50% complete]
Milestone 5 [17 July - 24 July]: Issues: WEBAUTHN-5  [100% complete]
Milestone 6 [25 July - 3 Aug]: Issues: WEBAUTHN-6, WEBAUTHN-7   [75% complete]
Milestone 7 [4 Aug - 11 Aug]: Issues: WEBAUTHN-8  [100% complete] 

Deliverables

Deliverable 1: Ability to register webauthn credentials for a standard XWiki user.
Deliverable 2: Ability to authenticate users on XWiki easily using these webauthn credentials.
Deliverable 3: A clean-looking minimal UI.
Deliverable 4: Implement testing and create complete documentation on Extensions wiki.

Note: Please see the forum post for updates about this project.