java -jar skfsclient.jar A <hostport> <did> <wsprotocol> <authtype> <svcusername> <svcpassword> <username> <origin> <authcounter> <crossorigin> <saml>
Value |
Explanation |
---|---|
hostport |
Host and port to access theĀ FIDO server |
did |
Unique domain identifier that belongs to SKCE |
wsprotocol |
Web service protocol; REST | SOAP |
authtype |
Authentication type; PASSWORD |
svcusername |
Username used for PASSWORD-based authorization |
svcpassword |
Password used for PASSWORD-based authorization |
username |
Username for registration, authentication, or getting keys info |
origin |
Origin to be used by the FIDO Client Simulator |
authcounter |
Auth counter to be used by the FIDO Client Simulator |
crossorigin |
Boolean that will determine if client data allows crossorigin or not - to be used for the simulator |
saml |
Boolean that will determine whether the SKFS will return a SAML assertion as an example when using the skfsclient |
$ example:~/skfsclient> java -jar skfsclient.jar A https://example.strongkey.com:8181 1 REST PASSWORD svcfidouser Abcd1234! johndoe https://example.strongkey.com 2 false false
Copyright (c) 2001-2024 StrongAuth, Inc. All rights reserved.
REST Authentication with PASSWORD
*******************************
preauthjson =
{"svcinfo":{"did":1,"protocol":"FIDO2_0","authtype":"PASSWORD","svcusername":"svcfidouser","svcpassword":"Abcd1234!"},"payload":{"username":"johndoe","options":{}}}
Calling preauthenticate @ https://example.strongkey.com:8181/skfs/rest/preauthenticate
Response : {"Response":{"challenge":"Bc-FDRe2CGuz__GW_84SOQ","allowCredentials":[{"type":"public-key","id":"YGg7XPUNrwSsSQDRGwhojLSptYXpVHmywYEULJXTMJ-ZsEf5U1k3Vm3ZGRoi4rqawv_GmsuLeRKKpYohLRviPEPFr-3gU9E84UW62AdhBWHOs9iFTd_vMC8kXvdwAL9Ife-SwKHCcZyrLyZGHBxcO8Z9v8OEOxZuGs-qPUXJxt9K4-wCJmnHkMrA8gxLLqudNuH2QQKPsvyVumaj0rxXkjEfPUAd0hvNf41yj7DXRWeJvet6xU-xqTg56XN_jePs","alg":-7}],"rpId":"strongkey.com"},"responseCode":"FIDO-MSG-0006","skfsVersion":"4.14.0","registrationVersion":"4.14.0","skfsFQDN":"example.strongkey.com","TXID":"1-1-163-1730935763706"}
Pre-Authentication Complete.
Generating Authentication response...
Simulator Response :
id = YGg7XPUNrwSsSQDRGwhojLSptYXpVHmywYEULJXTMJ-ZsEf5U1k3Vm3ZGRoi4rqawv_GmsuLeRKKpYohLRviPEPFr-3gU9E84UW62AdhBWHOs9iFTd_vMC8kXvdwAL9Ife-SwKHCcZyrLyZGHBxcO8Z9v8OEOxZuGs-qPUXJxt9K4-wCJmnHkMrA8gxLLqudNuH2QQKPsvyVumaj0rxXkjEfPUAd0hvNf41yj7DXRWeJvet6xU-xqTg56XN_jePs
rawId = YGg7XPUNrwSsSQDRGwhojLSptYXpVHmywYEULJXTMJ-ZsEf5U1k3Vm3ZGRoi4rqawv_GmsuLeRKKpYohLRviPEPFr-3gU9E84UW62AdhBWHOs9iFTd_vMC8kXvdwAL9Ife-SwKHCcZyrLyZGHBxcO8Z9v8OEOxZuGs-qPUXJxt9K4-wCJmnHkMrA8gxLLqudNuH2QQKPsvyVumaj0rxXkjEfPUAd0hvNf41yj7DXRWeJvet6xU-xqTg56XN_jePs
response = authenticatorData = WnTBrV2dI2nYtpWAzOrzVHMkwfEC46dxHD4U1RP9KKMEAAAAAg
signature = MEYCIQD8DLpqqF_jmpPBJDzmq_v5-xm6n_fGeugJ6r7HsLtmlwIhAPwUIoFLU-aamNXkr6kU3erlMHXUjhlEcXhDSocluWKe
userHandle =
clientDataJSON = eyJ0eXBlIjoid2ViYXV0aG4uZ2V0IiwiY2hhbGxlbmdlIjoiQmMtRkRSZTJDR3V6X19HV184NFNPUSIsIm9yaWdpbiI6Imh0dHBzOi8vZXhhbXBsZS5zdHJvbmdrZXkuY29tIiwiY3Jvc3NPcmlnaW4iOmZhbHNlfQ
type = public-key
Finished Generating Authentication Response.
Authenticating ...
authjson =
{"svcinfo":{"did":1,"protocol":"FIDO2_0","authtype":"PASSWORD","svcusername":"svcfidouser","svcpassword":"Abcd1234!"},"payload":{"publicKeyCredential":{"id":"YGg7XPUNrwSsSQDRGwhojLSptYXpVHmywYEULJXTMJ-ZsEf5U1k3Vm3ZGRoi4rqawv_GmsuLeRKKpYohLRviPEPFr-3gU9E84UW62AdhBWHOs9iFTd_vMC8kXvdwAL9Ife-SwKHCcZyrLyZGHBxcO8Z9v8OEOxZuGs-qPUXJxt9K4-wCJmnHkMrA8gxLLqudNuH2QQKPsvyVumaj0rxXkjEfPUAd0hvNf41yj7DXRWeJvet6xU-xqTg56XN_jePs","rawId":"YGg7XPUNrwSsSQDRGwhojLSptYXpVHmywYEULJXTMJ-ZsEf5U1k3Vm3ZGRoi4rqawv_GmsuLeRKKpYohLRviPEPFr-3gU9E84UW62AdhBWHOs9iFTd_vMC8kXvdwAL9Ife-SwKHCcZyrLyZGHBxcO8Z9v8OEOxZuGs-qPUXJxt9K4-wCJmnHkMrA8gxLLqudNuH2QQKPsvyVumaj0rxXkjEfPUAd0hvNf41yj7DXRWeJvet6xU-xqTg56XN_jePs","response":{"authenticatorData":"WnTBrV2dI2nYtpWAzOrzVHMkwfEC46dxHD4U1RP9KKMEAAAAAg","signature":"MEYCIQD8DLpqqF_jmpPBJDzmq_v5-xm6n_fGeugJ6r7HsLtmlwIhAPwUIoFLU-aamNXkr6kU3erlMHXUjhlEcXhDSocluWKe","userHandle":"","clientDataJSON":"eyJ0eXBlIjoid2ViYXV0aG4uZ2V0IiwiY2hhbGxlbmdlIjoiQmMtRkRSZTJDR3V6X19HV184NFNPUSIsIm9yaWdpbiI6Imh0dHBzOi8vZXhhbXBsZS5zdHJvbmdrZXkuY29tIiwiY3Jvc3NPcmlnaW4iOmZhbHNlfQ"},"type":"public-key"},"strongkeyMetadata":{"version":"1.0","last_used_location":"Sunnyvale, CA","username":"johndoe","origin":"https://example.strongkey.com"}}}
Calling authenticate @ https://example.strongkey.com:8181/skfs/rest/authenticate
Response : {"Response":"Successfully processed authentication response","responseCode":"FIDO-MSG-0008","username":"johndoe","jwt":"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.eyJycGlkIjoic3Ryb25na2V5LmNvbSIsImlhdCI6MTczMDkzNTc2NzExOSwiZXhwIjoxNzMwOTM3NTY3MTE5LCJjaXAiOiIxMC4wLjMuMTYzIiwic3ViIjoiam9obmRvZSIsImFnZW50IjoiQXBhY2hlLUh0dHBDbGllbnQvNC41LjEzIChKYXZhLzIxLjAuMSkifQ.hgkRw33QCrGbAJ-zd8X2IkJPz5-n22VKBcNH8k38rCgBHUVvZUNBrju0mFP7elEvSz_xKw4xGhdmDOSkl-IV7g","skfsVersion":"4.14.0","registrationVersion":"4.14.0","skfsFQDN":"example.strongkey.com","TXID":"1-1-167-1730935766864"}
Authentication Complete.
*******************************
Done with Authenticate!