web_authn 0.0.2 → 0.0.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 648a6cc93f91835ee94c9c5d7efafd7ba788863d61a2e44efba388c4a45f066c
-  data.tar.gz: a0fa7c5a9848ec784ed62297131022223b6c6c43467532cb2ebb3fa71df706ae
+  metadata.gz: ae734c58dcaf2aec7da75436de6611077577ddedf5b5321377892c1d5c50e928
+  data.tar.gz: 2a4084397e852119fcc22f3d3c8491f2fa520d8ceed71de56bf7e07af162c77c
 SHA512:
-  metadata.gz: 44f73a5564326062ce9614d3df2e3238fad34c0ce5ea8e4381a0ca81e541fb0a893670527f013c12f9698da077d946b140746972ad8718601fd1562bf7a99399
-  data.tar.gz: 1858d4cb4e878ba8ae0595689f307cb13a4b17e2b21e6baf1569f496d94b01cf0f486bf8758224c114a9c3052e1ac3e46210321718ea4ef9ed5c02db9b923e12
+  metadata.gz: 15e45bc2f3da9bc91409cb9db0bb9151144f223ec1d880802588a0cf6a7cb882f4aae9830db6465882ebeb2469a7ef88fa2e532208448f629b2c47b32734ee81
+  data.tar.gz: 05d6c10d89ba105db10dc83dec3b61465fd26d1328a01039c682bfd42c536d5206cb95b06afac40a4ddebb3e68c485dbebc29db2bce4369c8d924ec116437206

data/VERSION

@@ -1 +1 @@
-0.0.2
+0.0.3

data/lib/web_authn/client_data_json.rb

@@ -12,11 +12,13 @@ module WebAuthn
     class << self
       def decode(encoded_client_data_json)
         raw_client_data_json = Base64.urlsafe_decode64 encoded_client_data_json
-        new JSON.parse(
+        attrs = JSON.parse(
           raw_client_data_json
         ).merge(
           raw: raw_client_data_json
         ).with_indifferent_access
+        attrs[:challenge] = Base64.urlsafe_decode64 attrs[:challenge]
+        new attrs
       end
     end
   end

data/samples/authentication_response.rb

@@ -8,7 +8,7 @@ sign_count = 73
 client_data_json = 'eyJjaGFsbGVuZ2UiOiJjbUZ1Wkc5dExYTjBjbWx1WnkxblpXNWxjbUYwWldRdFlua3RjbkF0YzJWeWRtVnkiLCJvcmlnaW4iOiJodHRwczovL3dlYi1hdXRobi5zZWxmLWlzc3VlZC5hcHAiLCJ0eXBlIjoid2ViYXV0aG4uZ2V0In0'
 
 origin = 'https://web-authn.self-issued.app'
-challenge = 'cmFuZG9tLXN0cmluZy1nZW5lcmF0ZWQtYnktcnAtc2VydmVy'
+challenge = 'random-string-generated-by-rp-server'
 
 public_key = OpenSSL::PKey::EC.new <<-PEM
 -----BEGIN PUBLIC KEY-----

data/samples/registration_response.rb

@@ -5,7 +5,7 @@ attestation_object = 'o2NmbXRkbm9uZWdhdHRTdG10oGhhdXRoRGF0YVjEMsuA3KzDw1JGLLAfO_
 client_data_json = 'eyJjaGFsbGVuZ2UiOiJjbUZ1Wkc5dExYTjBjbWx1WnkxblpXNWxjbUYwWldRdFlua3RjbkF0YzJWeWRtVnkiLCJvcmlnaW4iOiJodHRwczovL3dlYi1hdXRobi5zZWxmLWlzc3VlZC5hcHAiLCJ0eXBlIjoid2ViYXV0aG4uY3JlYXRlIn0'
 
 origin = 'https://web-authn.self-issued.app'
-challenge = 'cmFuZG9tLXN0cmluZy1nZW5lcmF0ZWQtYnktcnAtc2VydmVy'
+challenge = 'random-string-generated-by-rp-server'
 
 context = WebAuthn.context_for(
   client_data_json,

data/spec/context/authentication_spec.rb

@@ -12,7 +12,7 @@ RSpec.describe WebAuthn::Context::Authentication do
       'eyJjaGFsbGVuZ2UiOiJjbUZ1Wkc5dExYTjBjbWx1WnkxblpXNWxjbUYwWldRdFlua3RjbkF0YzJWeWRtVnkiLCJvcmlnaW4iOiJodHRwczovL3dlYi1hdXRobi5zZWxmLWlzc3VlZC5hcHAiLCJ0eXBlIjoid2ViYXV0aG4uZ2V0In0'
     end
     let(:origin) { 'https://web-authn.self-issued.app' }
-    let(:challenge) { 'cmFuZG9tLXN0cmluZy1nZW5lcmF0ZWQtYnktcnAtc2VydmVy' }
+    let(:challenge) { 'random-string-generated-by-rp-server' }
     let(:rp_id_hash) do
       'MsuA3KzDw1JGLLAfO_4wLebzcS8w_SDs0Zw7pbhYlJU'
     end

data/spec/support/context_factory.rb

@@ -17,7 +17,9 @@ module ContextFactory
     base_context
   end
   let(:client_data_json) do
-    Base64.urlsafe_encode64(context.to_json, padding: false)
+    _context_ = context.dup
+    _context_[:challenge] = Base64.urlsafe_encode64(_context_[:challenge], padding: false)
+    Base64.urlsafe_encode64(_context_.to_json, padding: false)
   end
 end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: web_authn
 version: !ruby/object:Gem::Version
-  version: 0.0.2
+  version: 0.0.3
 platform: ruby
 authors:
 - nov matake