Phil Smart

[MJAVADOC-652] - Dependencies on the patch-module path

4

Add parameter to turn off support for the module path even if supported by the environment. To bypass module-path and patch-module-path arguments from being created for Javadoc even if using...

Building null origins in RelyingParty

6

I think you should be able to build the [RelyingParty](https://github.com/Yubico/java-webauthn-server/blob/main/webauthn-server-core/src/main/java/com/yubico/webauthn/RelyingParty.java) object using a null Origins Set (it just takes the RP ID if it is). However, the builder will not...

Add option to disable revocation checking in the FidoMetadataDownloader

3

Currently, the metadata blob verification process creates a cert path validator with the default 'true' setting for the `PKIXParameters#revocationEnabled` parameter (in `FidoMetadataDownloader#verifyBlob`) enabling the `RevocationChecker`. This will fail unless the...

SupportedCtapOptions does not signal absent (not supported) options

5

From the CTAP [specs](https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#authenticatorGetInfo) you should be able to tell if an authenticator does not support, say, user verification because the `uv` flag is absent. So there are three states,...