Product Documentation

Syntax

java -jar skfsclient.jar A <hostport> <did> <wsprotocol> <authtype> [ <accesskey> <secretkey> | <svcusername> <svcpassword> ] <username> <origin> <authcounter> <crossorigin> <saml>

Values

Value

Explanation

hostport

Host and port to access theĀ FIDO server
SOAP & REST format : http://<FQDN>:<non-ssl-portnumber> or https://<FQDN>:<ssl-portnumber>
example : https://fidodemo.strongauth.com:8181

did

Unique domain identifier that belongs to SKCE

wsprotocol

Web service protocol; REST | SOAP

authtype

Authentication type; HMAC | PASSWORD

accesskey

Access key for use in identifying a secret key

secretkey

Secret key for HMACing a request

svcusername

Username used for PASSWORD-based authorization

svcpassword

Password used for PASSWORD-based authorization

username

Username for registration, authentication, or getting keys info

origin

Origin to be used by the FIDO Client Simulator

authcounter

Auth counter to be used by the FIDO Client Simulator

crossorigin

Boolean that will determine if client data allows crossorigin or not - to be used for the simulator

saml

Boolean that will determine whether the SKFS will return a SAML assertion as an example when using the skfsclient

Output

$example:~/skfsclient> java -jar skfsclient.jar A https://example.strongkey.com:8181 1 REST PASSWORD svcfidouser Abcd1234! johndoe https://example.strongkey.com 2 false false

Copyright (c) 2001-2024 StrongAuth, Inc. All rights reserved.

REST Authentication with PASSWORD
*******************************
preauthjson =
{"svcinfo":{"did":1,"protocol":"FIDO2_0","authtype":"PASSWORD","svcusername":"svcfidouser","svcpassword":"Abcd1234!"},"payload":{"username":"johndoe","options":{}}}

Calling preauthenticate @ https://example.strongkey.com:8181/skfs/rest/preauthenticate
Response : {"Response":{"challenge":"BCt9MnhV82ehGG9oxcOE1w","allowCredentials":[{"type":"public-key","id":"pqBOcDW7uYfRqEMY660IyuS6VzyQI2nX2oKUjwv9uy9W3y6FwzG2M9GGK9eUOa9dq2zbEoLGunjWrRjieM5_r4rM0hZaUtBtJWk6gfUYCWn-9Mp3buA_EVyZIMfjrANG6xgWPITT4MMG4sUl7m080mCISSAyKi4WaUZ_CcSPLvJl8q7swnw3MZX51jjS6LRSb5AlZQou5-nlT6Tmy6l45cNagb7IDJwdbW16j-XblEZY0lSzHss5vVF0W_cpIBsf","alg":-7}],"rpId":"strongkey.com"},"responseCode":"FIDO-MSG-0006"}

Pre-Authentication Complete.

Generating Authentication response...

Simulator Response :
id = pqBOcDW7uYfRqEMY660IyuS6VzyQI2nX2oKUjwv9uy9W3y6FwzG2M9GGK9eUOa9dq2zbEoLGunjWrRjieM5_r4rM0hZaUtBtJWk6gfUYCWn-9Mp3buA_EVyZIMfjrANG6xgWPITT4MMG4sUl7m080mCISSAyKi4WaUZ_CcSPLvJl8q7swnw3MZX51jjS6LRSb5AlZQou5-nlT6Tmy6l45cNagb7IDJwdbW16j-XblEZY0lSzHss5vVF0W_cpIBsf
rawId = pqBOcDW7uYfRqEMY660IyuS6VzyQI2nX2oKUjwv9uy9W3y6FwzG2M9GGK9eUOa9dq2zbEoLGunjWrRjieM5_r4rM0hZaUtBtJWk6gfUYCWn-9Mp3buA_EVyZIMfjrANG6xgWPITT4MMG4sUl7m080mCISSAyKi4WaUZ_CcSPLvJl8q7swnw3MZX51jjS6LRSb5AlZQou5-nlT6Tmy6l45cNagb7IDJwdbW16j-XblEZY0lSzHss5vVF0W_cpIBsf
response = authenticatorData = WnTBrV2dI2nYtpWAzOrzVHMkwfEC46dxHD4U1RP9KKMEAAAAAg
signature = MEUCIBAZwc5E1cx_Tug4ZSG_stpob5SRNfwOP1J7CkHLF_i3AiEAzEX7s7oOhXwaxRExK41ZS9Km2Amw-vLP_08NIEFOuaA
userHandle =
clientDataJSON = eyJ0eXBlIjoid2ViYXV0aG4uZ2V0IiwiY2hhbGxlbmdlIjoiQkN0OU1uaFY4MmVoR0c5b3hjT0UxdyIsIm9yaWdpbiI6Imh0dHBzOi8vZXhhbXBsZS5zdHJvbmdrZXkuY29tIiwiY3Jvc3NPcmlnaW4iOmZhbHNlfQ
type = public-key

Finished Generating Authentication Response.

Authenticating ...
authjson =
{"svcinfo":{"did":1,"protocol":"FIDO2_0","authtype":"PASSWORD","svcusername":"svcfidouser","svcpassword":"Abcd1234!"},"payload":{"publicKeyCredential":{"id":"pqBOcDW7uYfRqEMY660IyuS6VzyQI2nX2oKUjwv9uy9W3y6FwzG2M9GGK9eUOa9dq2zbEoLGunjWrRjieM5_r4rM0hZaUtBtJWk6gfUYCWn-9Mp3buA_EVyZIMfjrANG6xgWPITT4MMG4sUl7m080mCISSAyKi4WaUZ_CcSPLvJl8q7swnw3MZX51jjS6LRSb5AlZQou5-nlT6Tmy6l45cNagb7IDJwdbW16j-XblEZY0lSzHss5vVF0W_cpIBsf","rawId":"pqBOcDW7uYfRqEMY660IyuS6VzyQI2nX2oKUjwv9uy9W3y6FwzG2M9GGK9eUOa9dq2zbEoLGunjWrRjieM5_r4rM0hZaUtBtJWk6gfUYCWn-9Mp3buA_EVyZIMfjrANG6xgWPITT4MMG4sUl7m080mCISSAyKi4WaUZ_CcSPLvJl8q7swnw3MZX51jjS6LRSb5AlZQou5-nlT6Tmy6l45cNagb7IDJwdbW16j-XblEZY0lSzHss5vVF0W_cpIBsf","response":{"authenticatorData":"WnTBrV2dI2nYtpWAzOrzVHMkwfEC46dxHD4U1RP9KKMEAAAAAg","signature":"MEUCIBAZwc5E1cx_Tug4ZSG_stpob5SRNfwOP1J7CkHLF_i3AiEAzEX7s7oOhXwaxRExK41ZS9Km2Amw-vLP_08NIEFOuaA","userHandle":"","clientDataJSON":"eyJ0eXBlIjoid2ViYXV0aG4uZ2V0IiwiY2hhbGxlbmdlIjoiQkN0OU1uaFY4MmVoR0c5b3hjT0UxdyIsIm9yaWdpbiI6Imh0dHBzOi8vZXhhbXBsZS5zdHJvbmdrZXkuY29tIiwiY3Jvc3NPcmlnaW4iOmZhbHNlfQ"},"type":"public-key"},"strongkeyMetadata":{"version":"1.0","last_used_location":"Sunnyvale, CA","username":"johndoe","origin":"https://example.strongkey.com"}}}

Calling authenticate @ https://example.strongkey.com:8181/skfs/rest/authenticate
Response : {"Response":"Successfully processed authentication response","responseCode":"FIDO-MSG-0008","username":"johndoe","jwt":"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.eyJycGlkIjoic3Ryb25na2V5LmNvbSIsImlhdCI6MTcxNzYyNzcwMDcxNSwiZXhwIjoxNzE3NjI5NTAwNzE1LCJjaXAiOiIxMC4wLjIuMjAiLCJzdWIiOiJqb2huZG9lIiwiYWdlbnQiOiJBcGFjaGUtSHR0cENsaWVudC80LjUuMTMgKEphdmEvMjEuMC4zKSJ9.MEUCIQDsKiN6R4M8xvgP9b6ooD003Gt31QPwLqAt_5b4rVbGBAIgPM6zVt7QjscNCLDd1GifmJXzTtjqDaZ7SoyceCp57VQ"}

Authentication Complete.
*******************************

Done with Authenticate!