Hi,
I would like to implement a U2F JAAS LoginModule and I was wondering if anyone has any experience with that.
According to the U2F 1.0 Spec (Overview, section 10.2), the signature generation process, in the context of the authentication flow, has to be done via an intermediate authentication page. From JAAS standpoint, I believe this should be achieved via a redirection to a page, once the user has successfully performed a first factor authentication.
The issue I'm having is that I could not figure out how and where to do this.
Any suggestion, sample code, ideas are welcome.
Thanks and regards.
|