web_authn 0.1.0 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: 90fa59a9c5c84e8af4b97f36556519d95bb90a2d
-  data.tar.gz: 1fa4312c262df939a5206beac7649aa95c2cd3ed
+SHA256:
+  metadata.gz: 89d25f455fdd1323936c0c32072be162f888df15e7ddd86fb65549e9f37736fb
+  data.tar.gz: ecb31a66853aeaca039da91aeb66ca5a24b5ee9f103153ed76ae6593fc1071ea
 SHA512:
-  metadata.gz: 40d5722f816201ed293e16c43761b58583278ab66ffd39b1065bb8ef022730ab55d4ae02ef35851f9e87e26745f9dea9ccc5ce381c2727ce27e370180708211e
-  data.tar.gz: '04638e31e160fa8267975af7c3d152428a6485ea8724049d62a8a1e6b5d2e651732863c0c43fc74ff8a1dfc294c0543efc145e6c80ec08e6a0a820643d8cfba9'
+  metadata.gz: dee33babaf79b1ba80f86321223206c56e59c7c3e5adc113bb8a4f51d8d9c185d5eb1b62219a408e98130265d75e9ee1fa648794d3db8f60ab32551cbd5c83bb
+  data.tar.gz: 70fdbe9c79f25a5044eea4ac2b06815d6f5c128e0db61c03f930577cba78dc2d5e6fcf46324823fefa9dcefab2b76ccd648e3e769a12020f123f7f0d128b7798

data/README.md

@@ -1,6 +1,6 @@
 # WebAuthn
 
-W3C WebAuthn (a.k.a. FIDO2) RP library in Ruby
+W3C Web Authentication API (a.k.a. WebAuthN / FIDO 2.0) RP library in Ruby
 
 [![Build Status](https://secure.travis-ci.org/nov/web_authn.png)](http://travis-ci.org/nov/web_authn)
 
@@ -14,11 +14,15 @@ gem 'web_authn'
 
 And then execute:
 
-    $ bundle
+```sh
+$ bundle
+```
 
 Or install it yourself as:
 
-    $ gem install web_authn
+```sh
+$ gem install web_authn
+```
 
 ## Usage
 
@@ -33,11 +37,11 @@ Currently, there are several restrictions.
 
 After checking out the repo, run `bin/setup` to install dependencies. Then, run `rake spec` to run the tests. You can also run `bin/console` for an interactive prompt that will allow you to experiment.
 
-To install this gem onto your local machine, run `bundle exec rake install`. To release a new version, update the version number in `version.rb`, and then run `bundle exec rake release`, which will create a git tag for the version, push git commits and tags, and push the `.gem` file to [rubygems.org](https://rubygems.org).
+To install this gem onto your local machine, run `bundle exec rake install`. To release a new version, update the version number in `VERSION`, and then run `bundle exec rake release`, which will create a git tag for the version, push git commits and tags, and push the `.gem` file to [rubygems.org](https://rubygems.org).
 
 ## Contributing
 
-Bug reports and pull requests are welcome on GitHub at https://github.com/[USERNAME]/web_authn.
+Bug reports and pull requests are welcome on GitHub at https://github.com/nov/web_authn.
 
 ## License
 

data/VERSION

@@ -1 +1 @@
-0.1.0
+0.1.1

data/bin/console

@@ -0,0 +1,14 @@
+#!/usr/bin/env ruby
+
+require "bundler/setup"
+require "web_authn"
+
+# You can add fixtures and/or initialization code here to make experimenting
+# with your gem easier. You can also use a different console, if you like.
+
+# (If you use this, don't forget to add pry to your Gemfile!)
+# require "pry"
+# Pry.start
+
+require "irb"
+IRB.start(__FILE__)

data/bin/setup

@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+set -euo pipefail
+IFS=$'\n\t'
+set -vx
+
+bundle install
+
+# Do any other automated setup that you need to do here

data/lib/web_authn/attested_credential_data.rb

@@ -16,35 +16,15 @@ module WebAuthn
         )
         aaguid,
         credential_id,
-        _encoded_cose_key_ = [
+        cose_key_cbor = [
           attested_credential_data.byteslice(0...16),
           attested_credential_data.byteslice(18...(18 + length)),
           attested_credential_data.byteslice((18 + length)..-1),
         ]
-        cose_key = COSE::Key::EC2.from_cbor(_encoded_cose_key_)
-        curve_name = case cose_key.curve
-        when 1
-          'prime256v1'
-        when 2
-          'secp384r1'
-        when 3
-          'secp521r1'
-        else
-          raise NotImplementedError, 'Non-supported EC curve'
-        end
-        ec_key = OpenSSL::PKey::EC.new curve_name
-        ec_key.public_key = OpenSSL::PKey::EC::Point.new(
-          OpenSSL::PKey::EC::Group.new(curve_name),
-          OpenSSL::BN.new([
-            '04' +
-            cose_key.x_coordinate.unpack('H*').first +
-            cose_key.y_coordinate.unpack('H*').first
-          ].pack('H*'), 2)
-        )
         new(
           aaguid: Base64.urlsafe_encode64(aaguid, padding: false),
           credential_id: Base64.urlsafe_encode64(credential_id, padding: false),
-          public_key: ec_key
+          public_key: COSE::Key.decode(cose_key_cbor).to_key
         )
       end
     end

data/lib/web_authn/context/authentication.rb

@@ -40,6 +40,9 @@ module WebAuthn
       end
 
       def verify_signature!(public_key, signature)
+        # TODO:
+        #  needs to handle digest size based on COSE key algorithm.
+        #  how to get COSE key alg header at this point?
         signature_base_string = [
           authenticator_data.raw,
           OpenSSL::Digest::SHA256.digest(client_data_json.raw)

data/lib/web_authn.rb

@@ -2,8 +2,7 @@ require 'openssl'
 require 'active_support'
 require 'active_support/core_ext'
 require 'cbor'
-require 'cose'
-require 'cose/key/ec2'
+require 'cose/key'
 
 module WebAuthn
   class Exception < StandardError; end

data/web_authn.gemspec

@@ -14,7 +14,7 @@ Gem::Specification.new do |gem|
   gem.required_ruby_version = '>= 2.3'
   gem.add_runtime_dependency 'activesupport'
   gem.add_runtime_dependency 'cbor'
-  gem.add_runtime_dependency 'cose'
+  gem.add_runtime_dependency 'cose-key'
   gem.add_development_dependency 'rake', '~> 10.0'
   gem.add_development_dependency 'simplecov'
   gem.add_development_dependency 'rspec'

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: web_authn
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: ruby
 authors:
 - nov matake
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-09-07 00:00:00.000000000 Z
+date: 2018-09-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -39,7 +39,7 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '0'
 - !ruby/object:Gem::Dependency
-  name: cose
+  name: cose-key
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
@@ -112,7 +112,9 @@ description: W3C Web Authentication API (a.k.a. WebAuthN / FIDO 2.0) RP library
   Ruby
 email:
 - nov@matake.jp
-executables: []
+executables:
+- console
+- setup
 extensions: []
 extra_rdoc_files: []
 files:
@@ -124,6 +126,8 @@ files:
 - README.md
 - Rakefile
 - VERSION
+- bin/console
+- bin/setup
 - lib/web_authn.rb
 - lib/web_authn/attestation_object.rb
 - lib/web_authn/attested_credential_data.rb
@@ -163,7 +167,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: '0'
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.6.11
+rubygems_version: 2.7.6
 signing_key: 
 specification_version: 4
 summary: WebAuthn RP library