Authorization (AZ)

Syntax

java -jar skfsclient.jar AZ <hostport> <did> <wsprotocol> <authtype> <svcusername> <svcpassword> <username> <txid> <txpayload> <origin> <authcounter> <crossorigin> <verify>

Values

Value	Explanation
hostport	Host and port to access the FIDO server SOAP & REST format : http://<FQDN>:<non-ssl-portnumber> or https://<FQDN>:<ssl-portnumber> example : https://fidodemo.strongauth.com:8181
did	Unique domain identifier that belongs to SKCE
wsprotocol	Web service protocol; REST \| SOAP
authtype	Authentication type; PASSWORD
svcusername	Username used for PASSWORD-based authorization
svcpassword	Password used for PASSWORD-based authorization
username	Username for registration, authentication, or getting keys info
txid	Unique identifier for the transaction (Base64URLSafe Strong)
txpayload	Transaction payload to be used to generate the challenge for transaction authorization (Base64URLSafe Strong)
origin	Origin to be used by the FIDO Client Simulator
authcounter	Auth counter to be used by the FIDO Client Simulator
crossorigin	Boolean that will determine if client data allows crossorigin or not - to be used for the simulator
verify	Verify the authorization once again once we receive the response (Boolean value)

Output

$ example:~/skfsclient> java -jar skfsclient.jar AZ https://example.strongkey.com:8181 1 REST PASSWORD svcfidouser Abcd1234! johndoe ID1234 AAABBBBABAB https://example.strongkey.com 6 false false

Copyright (c) 2001-2024 StrongAuth, Inc. All rights reserved.

REST Authorization with PASSWORD
*******************************
preauthorizejson = 
{"svcinfo":{"did":1,"protocol":"FIDO2_0","authtype":"PASSWORD","svcusername":"svcfidouser","svcpassword":"Abcd1234!"},"payload":{"username":"johndoe","txid":"ID1234","txpayload":"AAABBBBABAB","options":{}}}

Calling preauthorize @ https://example.strongkey.com:8181/skfs/rest/preauthorize
 Response : {"Response":{"challenge":"5QqkiJH8R92KhwjNWSGMFELfkm_7Fyo4LeKnk0abqJM","allowCredentials":[{"type":"public-key","id":"YGg7XPUNrwSsSQDRGwhojLSptYXpVHmywYEULJXTMJ-ZsEf5U1k3Vm3ZGRoi4rqawv_GmsuLeRKKpYohLRviPEPFr-3gU9E84UW62AdhBWHOs9iFTd_vMC8kXvdwAL9Ife-SwKHCcZyrLyZGHBxcO8Z9v8OEOxZuGs-qPUXJxt9K4-wCJmnHkMrA8gxLLqudNuH2QQKPsvyVumaj0rxXkjEfPUAd0hvNf41yj7DXRWeJvet6xU-xqTg56XN_jePs","alg":-7}],"txid":"ID1234","txpayload":"AAABBBBABAB","rpId":"strongkey.com"},"responseCode":"FIDO-MSG-0014","skfsVersion":"4.14.0","registrationVersion":"4.14.0","skfsFQDN":"example.strongkey.com","TXID":"1-1-164-1730935900674"}

Pre-Authorize Complete.

Generating Authorization response...

Simulator Response : 
	id = YGg7XPUNrwSsSQDRGwhojLSptYXpVHmywYEULJXTMJ-ZsEf5U1k3Vm3ZGRoi4rqawv_GmsuLeRKKpYohLRviPEPFr-3gU9E84UW62AdhBWHOs9iFTd_vMC8kXvdwAL9Ife-SwKHCcZyrLyZGHBxcO8Z9v8OEOxZuGs-qPUXJxt9K4-wCJmnHkMrA8gxLLqudNuH2QQKPsvyVumaj0rxXkjEfPUAd0hvNf41yj7DXRWeJvet6xU-xqTg56XN_jePs
	rawId = YGg7XPUNrwSsSQDRGwhojLSptYXpVHmywYEULJXTMJ-ZsEf5U1k3Vm3ZGRoi4rqawv_GmsuLeRKKpYohLRviPEPFr-3gU9E84UW62AdhBWHOs9iFTd_vMC8kXvdwAL9Ife-SwKHCcZyrLyZGHBxcO8Z9v8OEOxZuGs-qPUXJxt9K4-wCJmnHkMrA8gxLLqudNuH2QQKPsvyVumaj0rxXkjEfPUAd0hvNf41yj7DXRWeJvet6xU-xqTg56XN_jePs
	response = 	authenticatorData = WnTBrV2dI2nYtpWAzOrzVHMkwfEC46dxHD4U1RP9KKMEAAAABg
	signature = MEUCIQD-oniV2xTcGRyy0mJ1S6LTsND-JFhNASusABgFSmJxUwIgEcAaPV--_wskt01EVZ2mtKGf7KKU0suyy-ScfDV5b5s
	userHandle = 
	clientDataJSON = eyJ0eXBlIjoid2ViYXV0aG4uZ2V0IiwiY2hhbGxlbmdlIjoiNVFxa2lKSDhSOTJLaHdqTldTR01GRUxma21fN0Z5bzRMZUtuazBhYnFKTSIsIm9yaWdpbiI6Imh0dHBzOi8vZXhhbXBsZS5zdHJvbmdrZXkuY29tIiwiY3Jvc3NPcmlnaW4iOmZhbHNlfQ
	type = public-key

Finished Generating Authorization Response.

Authorizinging ...
authjson = 
{"svcinfo":{"did":1,"protocol":"FIDO2_0","authtype":"PASSWORD","svcusername":"svcfidouser","svcpassword":"Abcd1234!"},"payload":{"txid":"ID1234","txpayload":"AAABBBBABAB","publicKeyCredential":{"id":"YGg7XPUNrwSsSQDRGwhojLSptYXpVHmywYEULJXTMJ-ZsEf5U1k3Vm3ZGRoi4rqawv_GmsuLeRKKpYohLRviPEPFr-3gU9E84UW62AdhBWHOs9iFTd_vMC8kXvdwAL9Ife-SwKHCcZyrLyZGHBxcO8Z9v8OEOxZuGs-qPUXJxt9K4-wCJmnHkMrA8gxLLqudNuH2QQKPsvyVumaj0rxXkjEfPUAd0hvNf41yj7DXRWeJvet6xU-xqTg56XN_jePs","rawId":"YGg7XPUNrwSsSQDRGwhojLSptYXpVHmywYEULJXTMJ-ZsEf5U1k3Vm3ZGRoi4rqawv_GmsuLeRKKpYohLRviPEPFr-3gU9E84UW62AdhBWHOs9iFTd_vMC8kXvdwAL9Ife-SwKHCcZyrLyZGHBxcO8Z9v8OEOxZuGs-qPUXJxt9K4-wCJmnHkMrA8gxLLqudNuH2QQKPsvyVumaj0rxXkjEfPUAd0hvNf41yj7DXRWeJvet6xU-xqTg56XN_jePs","response":{"authenticatorData":"WnTBrV2dI2nYtpWAzOrzVHMkwfEC46dxHD4U1RP9KKMEAAAABg","signature":"MEUCIQD-oniV2xTcGRyy0mJ1S6LTsND-JFhNASusABgFSmJxUwIgEcAaPV--_wskt01EVZ2mtKGf7KKU0suyy-ScfDV5b5s","userHandle":"","clientDataJSON":"eyJ0eXBlIjoid2ViYXV0aG4uZ2V0IiwiY2hhbGxlbmdlIjoiNVFxa2lKSDhSOTJLaHdqTldTR01GRUxma21fN0Z5bzRMZUtuazBhYnFKTSIsIm9yaWdpbiI6Imh0dHBzOi8vZXhhbXBsZS5zdHJvbmdrZXkuY29tIiwiY3Jvc3NPcmlnaW4iOmZhbHNlfQ"},"type":"public-key"},"strongkeyMetadata":{"version":"1.0","last_used_location":"Sunnyvale, CA","username":"johndoe","origin":"https://example.strongkey.com"}}}

Calling authorize @ https://example.strongkey.com:8181/skfs/rest/authorize
 Response   : {"Response":"Successfully processed authorization response","responseCode":"FIDO-MSG-0016","txdetail":{"txid":"ID1234","txpayload":"AAABBBBABAB","nonce":"M2Bsaek7jfY3QKgIVzxwXQ","txtime":1730935900750,"challenge":"5QqkiJH8R92KhwjNWSGMFELfkm_7Fyo4LeKnk0abqJM"},"FIDOAuthenticatorReferences":[{"protocol":"FIDO2_0","id":"YGg7XPUNrwSsSQDRGwhojLSptYXpVHmywYEULJXTMJ-ZsEf5U1k3Vm3ZGRoi4rqawv_GmsuLeRKKpYohLRviPEPFr-3gU9E84UW62AdhBWHOs9iFTd_vMC8kXvdwAL9Ife-SwKHCcZyrLyZGHBxcO8Z9v8OEOxZuGs-qPUXJxt9K4-wCJmnHkMrA8gxLLqudNuH2QQKPsvyVumaj0rxXkjEfPUAd0hvNf41yj7DXRWeJvet6xU-xqTg56XN_jePs","rawId":"YGg7XPUNrwSsSQDRGwhojLSptYXpVHmywYEULJXTMJ-ZsEf5U1k3Vm3ZGRoi4rqawv_GmsuLeRKKpYohLRviPEPFr-3gU9E84UW62AdhBWHOs9iFTd_vMC8kXvdwAL9Ife-SwKHCcZyrLyZGHBxcO8Z9v8OEOxZuGs-qPUXJxt9K4-wCJmnHkMrA8gxLLqudNuH2QQKPsvyVumaj0rxXkjEfPUAd0hvNf41yj7DXRWeJvet6xU-xqTg56XN_jePs","userHandle":"","rpId":"strongkey.com","authenticatorData":"WnTBrV2dI2nYtpWAzOrzVHMkwfEC46dxHD4U1RP9KKMEAAAABg","clientDataJSON":"eyJ0eXBlIjoid2ViYXV0aG4uZ2V0IiwiY2hhbGxlbmdlIjoiNVFxa2lKSDhSOTJLaHdqTldTR01GRUxma21fN0Z5bzRMZUtuazBhYnFKTSIsIm9yaWdpbiI6Imh0dHBzOi8vZXhhbXBsZS5zdHJvbmdrZXkuY29tIiwiY3Jvc3NPcmlnaW4iOmZhbHNlfQ","aaguid":"3b1adb99-0dfe-46fd-90b8-7f7614a4de2a","authorizationTime":1730935903772,"uv":true,"up":false,"signerPublicKey":"MIIBMzCB7AYHKoZIzj0CATCB4AIBATAsBgcqhkjOPQEBAiEA_____wAAAAEAAAAAAAAAAAAAAAD_______________8wRAQg_____wAAAAEAAAAAAAAAAAAAAAD_______________wEIFrGNdiqOpPns-u9VXaYhrxlHQawzFOw9jvOPD4n0mBLBEEEaxfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpZP40Li_hp_m47n60p8D54WK84zV2sxXs7LtkBoN79R9QIhAP____8AAAAA__________-85vqtpxeehPO5ysL8YyVRAgEBA0IABKRgL3NO1kdZo71s0pGpic1YuIcc4zTGH3KwAB5Bu1u9Kii098hOEA19g6PDuTfXYfo7tNEuIzT78FRBaMVatos","signature":"MEUCIQD-oniV2xTcGRyy0mJ1S6LTsND-JFhNASusABgFSmJxUwIgEcAaPV--_wskt01EVZ2mtKGf7KKU0suyy-ScfDV5b5s","usedForThisTransaction":true,"signingKeyType":"ECDSA","signingKeyAlgorithm":"SHA256withECDSA"}],"skfsVersion":"4.14.0","registrationVersion":"4.14.0","skfsFQDN":"example.strongkey.com","TXID":"1-1-164-1730935903611"}

Authorization Complete.
*******************************

Done with Authorize!