Summary of Changes

This PR is needed to be prepared for updating https://github.com/web-auth/webauthn-lib in future versions of Joomla.
These are adjustments that were missing or overlooked during the last upgrade from v2.1.7 to v4.3.0 (#39123 and #39134).

AuthenticatorSelectionCriteria does not have a constructor 33fca93:

Deprecation:

• web-auth/webauthn-framework#142
• web-auth/webauthn-lib@e28f446#diff-174de8e689e66abff1a5a4abf1bc53e5624c16d43bbbf7399327b7c45a7086fc

Remove:

• web-auth/webauthn-lib@27c957b#diff-174de8e689e66abff1a5a4abf1bc53e5624c16d43bbbf7399327b7c45a7086fc

WebAuthn\Server constructor invoked with 2 parameters e83cac3:

Make third parameter of Server class optional, so no hack with ReflectionClass is necessary.

Deprecated class Webauthn\TokenBinding\IgnoreTokenBindingHandler f998cd5:

Deprecation:

• web-auth/webauthn-framework#304
• web-auth/webauthn-lib@123297c#diff-79927b846b1f6ad8d3949a5dbb23e2bb43cb80dbba27ea4778702c213b577044

Deprecated method forUnsecuredSigner() of class Lcobucci\JWT\Configuration b529689:

As we only use the parser function, we can use it directly:
https://github.com/lcobucci/jwt/blob/4d7de2fe0d51a96418c0d04004986e410e87f6b4/src/Configuration.php#L44

Testing Instructions

• use passkey as login and multifactor authentication
• do a code review based on comments above (and phpstan)

Note: To test the changes of plugins/system/webauthn/src/MetadataRepository.php another pull request #45708 is necessary > merged; you have to enable the system webauth plugin option attestation support

Actual result BEFORE applying this Pull Request

passkey working

Expected result AFTER applying this Pull Request

passkey working

Link to documentations

Please select:

• No documentation changes for docs.joomla.org needed
• No documentation changes for manual.joomla.org needed