Add Spring Security WebAuthn

This dependency is only selectable for Spring Boot 4.0+,
and it automatically adds the Spring Security dependency if
not selected already.

Closes gh-1891

Author: mhalbritter

start-site/src/main/java/io/spring/start/site/extension/dependency/DependencyProjectGenerationConfiguration.java

@@ -33,6 +33,7 @@
 import io.spring.start.site.extension.dependency.springbatch.SpringBatchTestBuildCustomizer;
 import io.spring.start.site.extension.dependency.springsecurity.SpringSecurityRSocketBuildCustomizer;
 import io.spring.start.site.extension.dependency.springsecurity.SpringSecurityTestBuildCustomizer;
+import io.spring.start.site.extension.dependency.springsecurity.SpringSecurityWebAuthnBuildCustomizer;
 import io.spring.start.site.extension.dependency.springshell.SpringShellTestBuildCustomizer;
 import io.spring.start.site.extension.dependency.thymeleaf.ThymeleafBuildCustomizer;
 
@@ -80,6 +81,12 @@ public SpringSecurityRSocketBuildCustomizer securityRSocketBuildCustomizer() {
 		return new SpringSecurityRSocketBuildCustomizer();
 	}
 
+	@Bean
+	@ConditionalOnRequestedDependency("spring-security-webauthn")
+	SpringSecurityWebAuthnBuildCustomizer springSecurityWebAuthnBuildCustomizer() {
+		return new SpringSecurityWebAuthnBuildCustomizer();
+	}
+
 	@Bean
 	@ConditionalOnRequestedDependency("batch")
 	public SpringBatchTestBuildCustomizer batchTestBuildCustomizer() {

start-site/src/main/java/io/spring/start/site/extension/dependency/springsecurity/SpringSecurityWebAuthnBuildCustomizer.java

@@ -0,0 +1,37 @@
+/*
+ * Copyright 2012 - present the original author or authors.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package io.spring.start.site.extension.dependency.springsecurity;
+
+import io.spring.initializr.generator.buildsystem.Build;
+import io.spring.initializr.generator.spring.build.BuildCustomizer;
+
+/**
+ * A {@link BuildCustomizer} that ensures that Spring Security is added if Spring Security
+ * WebAuthn is selected.
+ *
+ * @author Moritz Halbritter
+ */
+public class SpringSecurityWebAuthnBuildCustomizer implements BuildCustomizer<Build> {
+
+	@Override
+	public void customize(Build build) {
+		if (!build.dependencies().has("security")) {
+			build.dependencies().add("security");
+		}
+	}
+
+}

start-site/src/main/resources/application.yml

@@ -529,6 +529,16 @@ initializr:
           links:
             - rel: reference
               href: https://docs.spring.io/spring-boot/{bootVersion}/reference/web/spring-security.html#web.security.oauth2.server
+        - name: WebAuthn for Spring Security
+          id: spring-security-webauthn
+          starter: false
+          compatibility-range: "4.0.0-M1"
+          group-id: org.springframework.security
+          artifact-id: spring-security-webauthn
+          description: Support for WebAuthn in Spring Security.
+          links:
+            - rel: reference
+              href: https://docs.spring.io/spring-security/reference/servlet/authentication/passkeys.html
         - name: Spring LDAP
           id: data-ldap
           description: Makes it easier to build Spring based applications that use the Lightweight Directory Access Protocol.

start-site/src/test/java/io/spring/start/site/extension/dependency/springsecurity/SpringSecurityWebAuthnBuildCustomizerTests.java

@@ -0,0 +1,47 @@
+/*
+ * Copyright 2012 - present the original author or authors.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package io.spring.start.site.extension.dependency.springsecurity;
+
+import io.spring.initializr.metadata.Dependency;
+import io.spring.initializr.web.project.ProjectRequest;
+import io.spring.start.site.SupportedBootVersion;
+import io.spring.start.site.extension.AbstractExtensionTests;
+import org.junit.jupiter.api.Test;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+/**
+ * Tests for {@link SpringSecurityWebAuthnBuildCustomizer}.
+ *
+ * @author Moritz Halbritter
+ */
+class SpringSecurityWebAuthnBuildCustomizerTests extends AbstractExtensionTests {
+
+	@Test
+	void shouldDoNothingIfNotSelected() {
+		ProjectRequest request = createProjectRequest(SupportedBootVersion.V4_0, "web");
+		Dependency security = getDependency("security");
+		assertThat(mavenPom(request)).doesNotHaveDependency(security.getGroupId(), security.getArtifactId());
+	}
+
+	@Test
+	void shouldAddSpringSecurityOnBoot40() {
+		ProjectRequest request = createProjectRequest(SupportedBootVersion.V4_0, "spring-security-webauthn");
+		assertThat(mavenPom(request)).hasDependency(getDependency("security"));
+	}
+
+}