Package com.yubico.fido.metadata

Class FidoMetadataService.Filters

java.lang.Object

com.yubico.fido.metadata.FidoMetadataService.Filters

Enclosing class:

FidoMetadataService

public static class FidoMetadataService.Filters
extends Object

Preconfigured filters and utilities for combining filters. See the prefilter and filter settings.

See Also:

• FidoMetadataService.FidoMetadataServiceBuilder.prefilter(Predicate)
• FidoMetadataService.FidoMetadataServiceBuilder.filter(Predicate)

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static final class	FidoMetadataService.Filters.AuthenticatorToBeFiltered	This class encapsulates parameters for filtering authenticators in the filter setting of FidoMetadataService.

Constructor Summary

Constructors

Constructor	Description
Filters()

Method Summary

Modifier and Type	Method	Description
static <T> Predicate<T>	allOf(Predicate<T>... filters)	Combine a set of filters into a filter that requires inputs to satisfy ALL of those filters.
static Predicate<FidoMetadataService.Filters.AuthenticatorToBeFiltered>	noAttestationKeyCompromise()	Accept any authenticator whose matched metadata entry does NOT indicate a compromised attestation key.
static Predicate<MetadataBLOBPayloadEntry>	notRevoked()	Include any metadata entry whose statusReports array contains no entry with REVOKED status.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

Filters

public Filters()

Method Details

allOf

@SafeVarargs
public static <T> Predicate<T> allOf(Predicate<T>... filters)

Combine a set of filters into a filter that requires inputs to satisfy ALL of those filters.

If filters is empty, then all inputs will satisfy the resulting filter.

Parameters:

filters - A set of filters.

Returns:

A filter which only accepts inputs that satisfy ALL of the given filters.

notRevoked

public static Predicate<MetadataBLOBPayloadEntry> notRevoked()

Include any metadata entry whose statusReports array contains no entry with REVOKED status.

See Also:

• AuthenticatorStatus.REVOKED

noAttestationKeyCompromise

public static Predicate<FidoMetadataService.Filters.AuthenticatorToBeFiltered> noAttestationKeyCompromise()

Accept any authenticator whose matched metadata entry does NOT indicate a compromised attestation key.

A metadata entry indicates a compromised attestation key if any of its statusReports entries has ATTESTATION_KEY_COMPROMISE status and either an empty certificate field or a certificate whose public key appears in the authenticator's attestation certificate chain.

See Also:

• AuthenticatorStatus.ATTESTATION_KEY_COMPROMISE