CUPERTINO, CA, USA --StrongKey, the leader in open-source authentication and encryption solutions, is proud to announce the latest improvements to their StrongKey FIDO Server (SKFS) 4.16.0 release, which now includes dynamic reloading capabilities for Related Origin Requests (ROR) and Digital Asset Links (DAL) configurations.
The previous release (SKFS 4.15.1) introduced support for the yet-to-be-standardized WebAuthn features, ROR and DAL, enabling unique configurations across FIDO domains. Previously, implementing these features required manual updates to configuration properties and a Payara restart with every change. The current SKFS 4.16.0 release significantly streamlines this process.
ROR and DAL have been integrated into the FIDO Policy module and database, allowing for limitless origin configurations and dynamic updates without the need for a Payara restart. Now, when a FIDO administrator modifies the policy or database with new ROR and/or DAL values, these changes are instantly refreshed and ready for SKFS to utilize.
Three new database tables have been added to the SKFS database schema to support these enhancements:
- RELATED_ORIGINS – containing authorized web URL origins whose hosted applications can make FIDO service requests to the relying party's back-end application.
- DIGITAL_ASSET_LINKS – containing metadata information of Android native apps used as FIDO authenticators, defining the 'namespace' and 'packagename' for the Android app making FIDO service requests.
- DIGITAL_ASSET_LINK_X509_FINGERPRINTS – containing information about X509 digital certificates used to digitally sign the native Android app making FIDO service requests. This is a child table to the parent DIGITAL_ASSET_LINKS table.
To manage the ROR and DAL configurations, new web service endpoints have been added to the FIDOAdminServlet. Only service credentials possessing 'Admin Authorization' within the LDAP Directory store will have the ability to execute ROR and/or DAL operations.
StrongKey continues to enhance its SKFS unique offering by adding dynamic ROR and DAL support to its growing list of features, ensuring a robust and adaptable authentication experience for its users.
To download the latest version and the release notes, please check out our SourceForge page. For more information, please review all SKFS Release notes at our product documentation page.