simplicity_client 0.2.0 → 0.2.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 35ccb4c05970e3765687119f1761b0c1ff47965ab6311f5e86e5fb321b8e87fd
-  data.tar.gz: dfc4d51cf8d179a2901c62aaa576828193ddf6ef87a9aba6793da75da6825737
+  metadata.gz: af805426700df49eb866015545dac1afa7c833490be0c0f2a6cb825bd9dc2e3e
+  data.tar.gz: 4dbeed2df67de9a27ff27c5521ad8b581f2e5f9b6642975612429eea7efa4f4f
 SHA512:
-  metadata.gz: 6ef0ea4b00d2ae9ae5deaaf317759fe595e7221fbfe46175c48747355e388ab4faaf4f0b272ccd6c57ec7c11fc7f06037dd35b6f9e76998c8258d36a6c406dfb
-  data.tar.gz: 6c7618d98c48fc47adfa19931cb68a1fe67d612cc17e1e51c0a6cfdd7d708cffedf7dffd3ff96e425a890990c2b56d629541184edb033de49e2634d49f1e5be4
+  metadata.gz: 73e5c8d7f37681956ac2dcddb647522b1cae78d78e9d85c8744c7f0a96ee18c5740e62618365ca6cb7defcdd73de4094eb5870325690f170a42af8643cf4c57e
+  data.tar.gz: d6f3d25bf87442259549191a82c2d590f7d2cdcabe8b2deba838142da0f800a8c330bacc9e4bce9e553fc887310cb4bf8597b37b472e348c7d33ddd6bd6aa26d

data/lib/fido2_client.rb

@@ -0,0 +1,91 @@
+require "json"
+require "digest"
+require "openssl"
+require "base64"
+
+module Fido2Client
+  Passkey = Data.define(:credentialId, :keyAlgorithm, :keyCurve, :keyValue, :userHandle)
+  Assertion = Data.define(:authenticator_data, :client_data_json, :credential_id, :user_handle, :signature)
+
+  class Client
+    def initialize
+      @origin = "https://app.simplicity.kiwi"
+      @rp_id = "simplicity.kiwi"
+    end
+
+    def get_assertion(passkey, challenge)
+      collected_client_data = {
+        type: "webauthn.get",
+        challenge: challenge,
+        origin: @origin,
+        crossOrigin: false,
+      }
+      client_data_json = JSON.dump(collected_client_data)
+      client_data_hash = Digest::SHA256.digest(client_data_json)
+
+      # Assertion
+      auth_data = generate_auth_data
+      private_key = parse_private_key(passkey.keyAlgorithm, passkey.keyCurve, passkey.keyValue)
+      signature = generate_signature(auth_data, client_data_hash, private_key)
+
+      Assertion.new(
+        authenticator_data: Base64.urlsafe_encode64(auth_data.pack("c*"), padding: false),
+        client_data_json: Base64.urlsafe_encode64(client_data_json, padding: false),
+        credential_id: Base64.urlsafe_encode64(guid_to_raw_format(passkey.credentialId), padding: false),
+        user_handle: passkey.userHandle,
+        signature: Base64.urlsafe_encode64(signature, padding: false),
+      )
+    end
+
+    private
+
+    def box(tag, lines)
+      lines.unshift "-----BEGIN #{tag}-----"
+      lines.push "-----END #{tag}-----"
+      lines.join("\n")
+    end
+
+    def der_to_pem(tag, der)
+      box tag, Base64.strict_encode64(der).scan(/.{1,64}/)
+    end
+
+    def parse_private_key(key_algorithm, key_curve, key_value)
+      raise "Unsupported key algorithm: #{key_algorithm}" unless key_algorithm == "ECDSA"
+      raise "Unsupported key curve: #{key_curve}" unless key_curve == "P-256"
+
+      # Decode the Base64 key value
+      key_value_bin = Base64.urlsafe_decode64(key_value)
+
+      pem = der_to_pem("PRIVATE KEY", key_value_bin)
+      OpenSSL::PKey::EC.new(pem)
+    end
+
+    def generate_signature(auth_data, client_data_hash, private_key)
+      sig_base = [*auth_data, *client_data_hash.bytes]
+      digest = OpenSSL::Digest.new("SHA256")
+      private_key.sign(digest, sig_base.pack("c*"))
+    end
+
+    def generate_auth_data
+      auth_data = []
+      rp_id_hash = Digest::SHA256.digest(@rp_id)
+      auth_data += rp_id_hash.bytes
+
+      # Flags asserted: Backup eligibility, Backup State, User Verification, User Presence
+      flags = 0x1D
+      auth_data.push(flags)
+
+      # Counter
+      auth_data += [0, 0, 0, 0]
+
+      auth_data
+    end
+
+    def guid_to_raw_format(guid)
+      raise TypeError, "GUID parameter is invalid" unless guid.match?(/\A[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}\z/)
+
+      # Remove the hyphens and pack the string into raw binary
+      [guid.delete("-")].pack("H*")
+    end
+  end
+end

data/lib/simplicity_client.rb

@@ -155,7 +155,35 @@ module SimplicityClient
       email = @auth_data["email"]
       body = {
         variables: {},
-        query: "{\n  Account(email: \"#{email}\") {\n    InvestmentType\n    InvestmentCode\n    PortfolioCode\n    InvestmentName\n    Portfolio\n    Status\n    RegistryAccountId\n    MarketValue\n    PrimaryBeneficiarySurname\n    EntityType\n    PriceDate\n    IsDefault\n    ExternalReference\n    BankAccounts {\n      AccountName\n      LastThreeDigitsOfAccountNumberPart\n      SuffixPart\n      IsPrimary\n      Id\n      __typename\n    }\n    __typename\n  }\n}\n",
+        query: <<-GRAPHQL
+        {
+          AccountV2(email: \"george@dewar.co.nz\") {
+            Portfolios {
+              Portfolio
+              PortfolioCode
+              MarketValue
+              IsDefault
+              CanWithdraw
+              InvestorDetails {
+                InvestmentName
+                PrimaryBeneficiarySurname
+                EntityType
+                __typename
+              }
+              __typename
+            }
+            Investment {
+              InvestmentCode
+              InvestmentType
+              Status
+              PriceDate
+              ExternalReference
+              __typename
+            }
+            __typename
+          }
+        }
+        GRAPHQL
       }.to_json
 
       signer = Aws::Sigv4::Signer.new(
@@ -182,12 +210,15 @@ module SimplicityClient
       # Handle the response
       if response.success?
         obj = JSON.parse(response.body)
-        obj["data"]["Account"].map do |account|
+        obj["data"]["AccountV2"].map do |account|
+          investment = account["Investment"]
+          portfolio = account["Portfolios"][0]
+          investor_details = portfolio["InvestorDetails"]
           {
-            accountNo: account["InvestmentCode"],
-            accountType: "#{account["InvestmentType"]} - #{account["Portfolio"]}",
-            customerName: account["InvestmentName"],
-            accountBalance: account["MarketValue"],
+            accountNo: investment["InvestmentCode"],
+            accountType: "#{investment["InvestmentType"]} - #{portfolio["Portfolio"]}",
+            customerName: investor_details["InvestmentName"],
+            accountBalance: portfolio["MarketValue"],
             isLiabilityType: false,
             supportsTransactions: false,
             dynamicBalance: true,

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: simplicity_client
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.2.2
 platform: ruby
 authors:
 - George Dewar
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-01-03 00:00:00.000000000 Z
+date: 2025-02-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-cognitoidentity
@@ -101,6 +101,7 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- lib/fido2_client.rb
 - lib/simplicity_client.rb
 homepage: https://github.com/GeorgeDewar/simplicity_client
 licenses: