Skip to content

Commit fd5e532

Browse files
committed
Windows Hello PIN implementation
This causes Himmelblau to enroll the authenticating user in Windows Hello for Pin authentication. It uses the msal rust library to associate the user chosen Pin with a rsa key, which is then enrolled in Windows Hello. This eliminates the problem with MFA prompts at the lock screen (which didn't work). The user now treats the Pin code as a local password. Signed-off-by: David Mulder <[email protected]>
1 parent 6d95cc4 commit fd5e532

File tree

3 files changed

+383
-232
lines changed

3 files changed

+383
-232
lines changed

Cargo.toml

+4-3
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,8 @@ tracing-subscriber = "^0.3.17"
3737
tracing = "^0.1.37"
3838
himmelblau_unix_common = { path = "src/common" }
3939
kanidm_unix_common = { path = "src/glue" }
40-
msal = { version = "0.1.15" }
40+
#msal = { version = "0.1.15" }
41+
msal = { path = "../microsoft-authentication-library-for-rust" }
4142
graph = { path = "src/graph" }
4243
clap = { version = "^4.5", features = ["derive", "env"] }
4344
clap_complete = "^4.4.1"
@@ -101,5 +102,5 @@ opentelemetry-stdout = { version = "0.1.0", features = [
101102
] }
102103
tonic = "0.11.0"
103104
tracing-opentelemetry = "0.21.0"
104-
compact_jwt = { version = "0.3.5", features = ["hsm-crypto", "msextensions"] }
105-
kanidm-hsm-crypto = { version = "^0.1.6", features = ["msextensions"] }
105+
compact_jwt = { version = "0.4.0-dev", git = "https://github.com/dmulder/compact-jwt.git", branch = "dmulder/msextensions_build_fix", features = ["hsm-crypto", "msextensions"] }
106+
kanidm-hsm-crypto = { version = "^0.2.0", features = ["msextensions"] }

0 commit comments

Comments
 (0)