web_authn 0.6.2 → 0.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e669fea75f5608f49b5b3d72a2aa046a76719a5fec82c994f0daeae109e6ee50
-  data.tar.gz: e64a57b588e52d98d9b933c527baff08a7c6378dcda9621e347751a2521baf59
+  metadata.gz: 2236077520d34560a16ab68335cd6d822dfe2d3353c42f0154f4c50baf5ae10a
+  data.tar.gz: 4312f7f14eb8602d89184440283206786bd7c37221fce59688c5ff19d29071ad
 SHA512:
-  metadata.gz: e0295fb973d12d4bf48759b1a7c64327d4271cc8689b583843057835278b85c128e7b9abfc1ad5e7e3693967647ab1888ef7fcdf963beb03f8fad147a6f9113a
-  data.tar.gz: dd58271072335f33dac4cb4a95f16ac8b1f5d5a016fdbc77bd332a662400a252b956fd1b4f171aea5a9b0114647d3e1c16b88e2327e3697de4c35129c3a8090c
+  metadata.gz: 573dbf915dc1a6f4a8a0716182361d1a51bd6e40a85b4540d9fb67e7984c0ee353e3b8818deb21c809c8cd71eec520a0354a0733fbdf9b15f76585749d8c907d
+  data.tar.gz: e322c40e4146a679573772a8538ca83661346f06f386c3871d234b31161fb304c0faf597b3025e4ee83f1d22aeb6bb56e590e76d200a0a0d08fe4d89cd4b376d

data/.github/FUNDING.yml

@@ -0,0 +1,3 @@
+# These are supported funding model platforms
+
+github: nov

data/.github/workflows/spec.yml

@@ -0,0 +1,30 @@
+name: Spec
+
+on:
+  push:
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  spec:
+    strategy:
+      matrix:
+        os: ['ubuntu-20.04']
+        ruby-version: ['2.6', '2.7', '3.0', '3.1']
+        # ubuntu 22.04 only supports ssl 3 and thus only ruby 3.1
+        include:
+        - os: 'ubuntu-22.04'
+          ruby-version: '3.1'
+    runs-on: ${{ matrix.os }}
+
+    steps:
+    - uses: actions/checkout@v3
+    - name: Set up Ruby
+      uses: ruby/setup-ruby@v1
+      with:
+        ruby-version: ${{ matrix.ruby-version }}
+        bundler-cache: true
+    - name: Run Specs
+      run: bundle exec rake spec

data/README.md

@@ -2,8 +2,6 @@
 
 W3C Web Authentication API (a.k.a. WebAuthN / FIDO 2.0) RP library in Ruby
 
-[![Build Status](https://secure.travis-ci.org/nov/web_authn.png)](http://travis-ci.org/nov/web_authn)
-
 ## Installation
 
 Add this line to your application's Gemfile:

data/VERSION

@@ -1 +1 @@
-0.6.2
+0.7.0

data/lib/web_authn/authenticator_data/flags.rb

@@ -1,15 +1,17 @@
 module WebAuthn
   class AuthenticatorData
     class Flags
-      _flags_ = [:up, :uv, :at, :ex]
+      _flags_ = [:up, :uv, :be, :bs, :at, :ex]
       attr_accessor *_flags_
       _flags_.each do |flag|
         alias_method :"#{flag}?", flag
       end
 
-      def initialize(up:, uv:, at:, ex:)
+      def initialize(up:, uv:, be:, bs:, at:, ex:)
         self.up = up
         self.uv = uv
+        self.be = be
+        self.bs = bs
         self.at = at
         self.ex = ex
       end
@@ -17,6 +19,8 @@ module WebAuthn
       def ==(target)
         up == target.up &&
         uv == target.uv &&
+        be == target.be &&
+        bs == target.bs &&
         at == target.at &&
         ex == target.ex
       end
@@ -27,8 +31,10 @@ module WebAuthn
           new(
             up: bit_array[0] == 1,
             uv: bit_array[2] == 1,
+            be: bit_array[4] == 1,
+            bs: bit_array[5] == 1,
             at: bit_array[6] == 1,
-            ex: bit_array[7] == 1
+            ex: bit_array[7] == 1,
           )
         end
       end

data/lib/web_authn/context/registration.rb

@@ -13,11 +13,11 @@ module WebAuthn
         true
       end
 
-      def verify!(encoded_attestation_object)
+      def verify!(encoded_attestation_object, skip_flag_verification: false)
         self.attestation_object = AttestationObject.decode(
           encoded_attestation_object
         )
-        verify_flags!
+        verify_flags! unless skip_flag_verification
         verify_signature!
         self
       end

data/spec/authenticator_data/flags_spec.rb

@@ -6,6 +6,8 @@ RSpec.describe WebAuthn::AuthenticatorData::Flags do
       let(:bits) { '00000000' }
       its(:up?) { should == false }
       its(:uv?) { should == false }
+      its(:be?) { should == false }
+      its(:bs?) { should == false }
       its(:at?) { should == false }
       its(:ex?) { should == false }
     end
@@ -14,6 +16,8 @@ RSpec.describe WebAuthn::AuthenticatorData::Flags do
       let(:bits) { '10000000' }
       its(:up?) { should == true }
       its(:uv?) { should == false }
+      its(:be?) { should == false }
+      its(:bs?) { should == false }
       its(:at?) { should == false }
       its(:ex?) { should == false }
     end
@@ -22,6 +26,8 @@ RSpec.describe WebAuthn::AuthenticatorData::Flags do
       let(:bits) { '00100000' }
       its(:up?) { should == false }
       its(:uv?) { should == true }
+      its(:be?) { should == false }
+      its(:bs?) { should == false }
       its(:at?) { should == false }
       its(:ex?) { should == false }
     end
@@ -30,6 +36,8 @@ RSpec.describe WebAuthn::AuthenticatorData::Flags do
       let(:bits) { '00000010' }
       its(:up?) { should == false }
       its(:uv?) { should == false }
+      its(:be?) { should == false }
+      its(:bs?) { should == false }
       its(:at?) { should == true }
       its(:ex?) { should == false }
     end
@@ -38,6 +46,8 @@ RSpec.describe WebAuthn::AuthenticatorData::Flags do
       let(:bits) { '00000001' }
       its(:up?) { should == false }
       its(:uv?) { should == false }
+      its(:be?) { should == false }
+      its(:bs?) { should == false }
       its(:at?) { should == false }
       its(:ex?) { should == true }
     end

data/spec/context/authentication_spec.rb

@@ -18,7 +18,7 @@ RSpec.describe WebAuthn::Context::Authentication do
     end
     let(:flags) do
       WebAuthn::AuthenticatorData::Flags.new(
-        up: true, uv: false, at: false, ex: false
+        up: true, uv: false, be: false, bs: false, at: false, ex: false
       )
     end
     let(:public_key) do

data/spec/context/registration_spec.rb

@@ -17,7 +17,7 @@ RSpec.describe WebAuthn::Context::Registration do
     end
     let(:flags) do
       WebAuthn::AuthenticatorData::Flags.new(
-        up: true, uv: false, at: true, ex: false
+        up: true, uv: false, be: false, bs: false, at: true, ex: false
       )
     end
     let(:public_key_pem) do

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: web_authn
 version: !ruby/object:Gem::Version
-  version: 0.6.2
+  version: 0.7.0
 platform: ruby
 authors:
 - nov matake
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2021-09-07 00:00:00.000000000 Z
+date: 2024-06-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: openssl
@@ -144,9 +144,10 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- ".github/FUNDING.yml"
+- ".github/workflows/spec.yml"
 - ".gitignore"
 - ".rspec"
-- ".travis.yml"
 - Gemfile
 - LICENSE.txt
 - README.md
@@ -181,7 +182,7 @@ homepage: https://github.com/nov/web_authn
 licenses:
 - MIT
 metadata: {}
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -196,8 +197,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.3
-signing_key: 
+rubygems_version: 3.3.3
+signing_key:
 specification_version: 4
 summary: WebAuthn RP library
 test_files:

data/.travis.yml

@@ -1,8 +0,0 @@
-before_install:
-  - gem install bundler
-
-rvm:
-  - 2.5.8
-  - 2.6.6
-  - 2.7.2
-  - 3.0.0