Add WebAuthn support to XWiki

Last modified by Mohammad Humayun Khan on 2021/08/20 14:17

Mentor(s)
Student
Details

The idea is to allow browser to automatically authenticate on XWiki using the new WebAuthn standard.

For more details about WebAuthn see the following links:

See https://www.xwiki.org/xwiki/bin/view/Documentation/AdminGuide/Authentication/ for details about XWiki authentication framework.

Active
Yes
Year

2021

Developer profile
  • Mostly Java
  • Understanding HTTP/HTTPS and various authentication systems (user/pass, header, OAuth2, etc.) at least theoretically
Status

Selected

Progress

Description

You can find details about the project here: https://design.xwiki.org/xwiki/bin/view/Proposal/AddWebAuthnsupporttoXWiki
Forum post: https://forum.xwiki.org/t/add-webauthn-support-to-xwiki-gsoc21-project/8812

Milestones

Milestone 1 [07 June - 13 June]: Setup the maven project: WEBAUTHN-1 [100% complete]
Milestone 2 [14 June - 21 June]: Basic Authenticator extending XWikiAuthServiceImpl [100% complete]
Milestone 3 [22 June - 28 June]: Issues: WEBAUTHN-2, WEBAUTHN-3  [75% complete]
Milestone 4 [29 June - 06 July]: Issues: WEBAUTHN-4  [50% complete]
Milestone 5 [17 July - 24 July]: Issues: WEBAUTHN-5  [100% complete]
Milestone 6 [25 July - 3 Aug]: Issues: WEBAUTHN-6, WEBAUTHN-7   [75% complete]
Milestone 7 [4 Aug - 11 Aug]: Issues: WEBAUTHN-8  [100% complete] 

More issues will be added to JIRA to be solved after the GSoC period.

Deliverables

Deliverable 1: Ability to register webauthn credentials for a standard XWiki user.
Deliverable 2: Ability to authenticate users on XWiki easily using these webauthn credentials.
Deliverable 3: A clean-looking minimal UI.
Deliverable 4: Implement testing and create complete documentation on Extensions wiki.

Note: The project is currently in progress. Please see the forum post for more details/updates.

Tags:
   

Get Connected