Skip to content

Allow custom AuthenticationConverter in WebAuthnAuthenticationFilter#19412

Open
therepanic wants to merge 1 commit into
spring-projects:mainfrom
therepanic:gh-19411
Open

Allow custom AuthenticationConverter in WebAuthnAuthenticationFilter#19412
therepanic wants to merge 1 commit into
spring-projects:mainfrom
therepanic:gh-19411

Conversation

@therepanic

@therepanic therepanic commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

This change allows us to delegate the attemptAuthentication logic to the AuthenticationConverter interface and enables the definition of custom instances. Additionally, we have added a default implementation, WebAuthnAuthenticationConverter, whose behavior is fully deterministic with respect to the previous implementation.

Closes: gh-19411

@spring-projects-issues spring-projects-issues added the status: waiting-for-triage An issue we've not yet triaged label Jul 2, 2026
This change allows us to delegate the `attemptAuthentication` logic to the `AuthenticationConverter` interface and enables the definition of custom instances. Additionally, we have added a default implementation, `WebAuthnAuthenticationConverter`, whose behavior is fully deterministic with respect to the previous implementation.

Closes: spring-projectsgh-19411

Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>
@therepanic therepanic marked this pull request as ready for review July 2, 2026 19:46
Comment on lines 120 to +134
@@ -144,6 +131,21 @@ public void setConverter(GenericHttpMessageConverter<Object> converter) {
public void setConverter(SmartHttpMessageConverter<Object> converter) {
Assert.notNull(converter, "converter cannot be null");
this.converter = converter;
this.webAuthnAuthenticationConverter.setConverter(converter);

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Perhaps this behavior should be better documented?

@therepanic

Copy link
Copy Markdown
Contributor Author

Does anyone have any ideas on the best place in the documentation to put information about WebAuthnAuthenticationConverter - assuming such a place exists?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

status: waiting-for-triage An issue we've not yet triaged

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Allow custom request context in WebAuthnAuthenticationFilter via AuthenticationConverter

2 participants