Skip to content

Commit b0f28e2

Browse files
NFC-47 Update readme-s
Signed-off-by: Sander Kondratjev <[email protected]>
1 parent 82f4700 commit b0f28e2

File tree

2 files changed

+7
-6
lines changed

2 files changed

+7
-6
lines changed

README.md

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -136,10 +136,10 @@ import eu.webeid.security.validator.AuthTokenValidatorBuilder;
136136

137137
## 6. Add a filter for issuing challenge nonces
138138

139-
A REST endpoint that issues challenge nonces is required for authentication.
140-
Since this step is part of the authentication flow, it is implemented as a Spring Security filter instead of a regular controller. The filter must support `POST` requests.
139+
Request Filters that issue challenge nonces for regular Web eID and Web eID for Mobile authentication flows are required for authentication.
140+
The filters must support POST requests.
141141

142-
The `WebEidChallengeNonceFilter` handles `/auth/challenge` requests and issues a new nonce.
142+
The `WebEidChallengeNonceFilter` handles `/auth/challenge` requests and issues a new nonce for regualar Web eID authentication flow.
143143
See the full implementation [here](example/src/main/java/eu/webeid/example/security/WebEidChallengeNonceFilter.java).
144144

145145
```java
@@ -174,7 +174,7 @@ public final class WebEidChallengeNonceFilter extends OncePerRequestFilter {
174174
}
175175
```
176176

177-
Similarly, the `WebEidMobileAuthInitFilter` handles `/auth/mobile/init` requests and issues a deep link for mobile authentication.
177+
Similarly, the `WebEidMobileAuthInitFilter` handles `/auth/mobile/init` requests for Web eID for Mobile authentication flow by generating a challenge nonce and returning a deep link URI. This deep link contains both the challenge nonce and a login URI for the mobile authentication flow.
178178
See the full implementation [here](example/src/main/java/eu/webeid/example/security/WebEidMobileAuthInitFilter.java).
179179

180180
```java
@@ -221,7 +221,8 @@ public final class WebEidMobileAuthInitFilter extends OncePerRequestFilter {
221221
}
222222
```
223223

224-
Both filters are registered in the Spring Security filter chain in ApplicationConfiguration:
224+
Both filters are registered in the Spring Security filter chain in ApplicationConfiguration
225+
See the full implementation [here](example/src/main/java/eu/webeid/example/config/ApplicationConfiguration.java):
225226
```java
226227
http
227228
.addFilterBefore(new WebEidMobileAuthInitFilter("/auth/mobile/init", "/auth/mobile/login", challengeNonceGenerator),

example/README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -117,7 +117,7 @@ The `src/main/java/eu/webeid/example` directory contains the Spring Boot applica
117117
- `security`: Web eID authentication token validation library integration with Spring Security
118118
- `AuthenticationProvider` and `AuthenticationProcessingFilter` for handling Web eID authentication tokens,
119119
- `WebEidChallengeNonceFilter` for issuing the challenge nonce required by the authentication flow,
120-
- `WebEidMobileAuthInitFilter` for generating the deep link (`auth_uri`) used in mobile login,
120+
- `WebEidMobileAuthInitFilter` for issuing the challenge nonce and generating the deep link with the authentication request, used to initiate the mobile authentication flow,
121121
- `WebEidAjaxLoginProcessingFilter` and `WebEidLoginPageGeneratingFilter` for handling login requests.
122122
- `service`: Web eID signing service implementation that uses DigiDoc4j, and DigiDoc4j runtime configuration,
123123
- `web`: Spring Web MVC controller for the welcome page and Spring Web REST controller that provides a digital signing endpoint.

0 commit comments

Comments
 (0)