webauthn 1.18.0 → 2.0.0.beta1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (40) hide show
  1. checksums.yaml +4 -4
  2. data/.rubocop.yml +8 -0
  3. data/.travis.yml +7 -3
  4. data/Appraisals +8 -0
  5. data/CHANGELOG.md +52 -0
  6. data/README.md +88 -80
  7. data/SECURITY.md +18 -0
  8. data/gemfiles/cose_head.gemfile +7 -0
  9. data/gemfiles/openssl_head.gemfile +7 -0
  10. data/lib/webauthn.rb +9 -1
  11. data/lib/webauthn/attestation_statement/android_safetynet.rb +4 -4
  12. data/lib/webauthn/attestation_statement/base.rb +4 -4
  13. data/lib/webauthn/attestation_statement/fido_u2f.rb +1 -2
  14. data/lib/webauthn/authenticator_assertion_response.rb +33 -35
  15. data/lib/webauthn/authenticator_attestation_response.rb +30 -0
  16. data/lib/webauthn/authenticator_data.rb +3 -1
  17. data/lib/webauthn/authenticator_data/attested_credential_data.rb +1 -0
  18. data/lib/webauthn/authenticator_response.rb +1 -2
  19. data/lib/webauthn/client_data.rb +2 -1
  20. data/lib/webauthn/configuration.rb +9 -0
  21. data/lib/webauthn/credential.rb +26 -0
  22. data/lib/webauthn/credential_creation_options.rb +5 -1
  23. data/lib/webauthn/credential_request_options.rb +5 -0
  24. data/lib/webauthn/encoder.rb +8 -1
  25. data/lib/webauthn/fake_authenticator.rb +1 -0
  26. data/lib/webauthn/fake_client.rb +26 -22
  27. data/lib/webauthn/public_key_credential.rb +10 -50
  28. data/lib/webauthn/public_key_credential/creation_options.rb +92 -0
  29. data/lib/webauthn/public_key_credential/entity.rb +44 -0
  30. data/lib/webauthn/public_key_credential/options.rb +72 -0
  31. data/lib/webauthn/public_key_credential/request_options.rb +36 -0
  32. data/lib/webauthn/public_key_credential/rp_entity.rb +23 -0
  33. data/lib/webauthn/public_key_credential/user_entity.rb +24 -0
  34. data/lib/webauthn/public_key_credential_with_assertion.rb +35 -0
  35. data/lib/webauthn/public_key_credential_with_attestation.rb +30 -0
  36. data/lib/webauthn/u2f_migrator.rb +1 -1
  37. data/lib/webauthn/version.rb +1 -1
  38. data/webauthn.gemspec +3 -2
  39. metadata +33 -8
  40. data/webauthn-ruby.png +0 -0
@@ -23,7 +23,7 @@ module WebAuthn
23
23
  sign_count: @counter,
24
24
  user_present: true,
25
25
  user_verified: false,
26
- aaguid: WebAuthn::AttestationStatement::FidoU2f::VALID_ATTESTED_AAGUID,
26
+ aaguid: WebAuthn::AuthenticatorData::AttestedCredentialData::ZEROED_AAGUID
27
27
  )
28
28
  end
29
29
 
@@ -1,5 +1,5 @@
1
1
  # frozen_string_literal: true
2
2
 
3
3
  module WebAuthn
4
- VERSION = "1.18.0"
4
+ VERSION = "2.0.0.beta1"
5
5
  end
@@ -23,7 +23,7 @@ Gem::Specification.new do |spec|
23
23
  }
24
24
 
25
25
  spec.files = `git ls-files -z`.split("\x0").reject do |f|
26
- f.match(%r{^(test|spec|features)/})
26
+ f.match(%r{^(test|spec|features|assets)/})
27
27
  end
28
28
  spec.bindir = "exe"
29
29
  spec.executables = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
@@ -31,9 +31,10 @@ Gem::Specification.new do |spec|
31
31
 
32
32
  spec.required_ruby_version = ">= 2.3"
33
33
 
34
+ spec.add_dependency "awrence", "~> 1.1"
34
35
  spec.add_dependency "bindata", "~> 2.4"
35
36
  spec.add_dependency "cbor", "~> 0.5.9"
36
- spec.add_dependency "cose", "~> 0.7.0"
37
+ spec.add_dependency "cose", "~> 0.8.0"
37
38
  spec.add_dependency "jwt", [">= 1.5", "< 3.0"]
38
39
  spec.add_dependency "openssl", "~> 2.0"
39
40
  spec.add_dependency "securecompare", "~> 1.0"
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: webauthn
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.18.0
4
+ version: 2.0.0.beta1
5
5
  platform: ruby
6
6
  authors:
7
7
  - Gonzalo Rodriguez
@@ -9,8 +9,22 @@ authors:
9
9
  autorequire:
10
10
  bindir: exe
11
11
  cert_chain: []
12
- date: 2019-07-27 00:00:00.000000000 Z
12
+ date: 2019-09-16 00:00:00.000000000 Z
13
13
  dependencies:
14
+ - !ruby/object:Gem::Dependency
15
+ name: awrence
16
+ requirement: !ruby/object:Gem::Requirement
17
+ requirements:
18
+ - - "~>"
19
+ - !ruby/object:Gem::Version
20
+ version: '1.1'
21
+ type: :runtime
22
+ prerelease: false
23
+ version_requirements: !ruby/object:Gem::Requirement
24
+ requirements:
25
+ - - "~>"
26
+ - !ruby/object:Gem::Version
27
+ version: '1.1'
14
28
  - !ruby/object:Gem::Dependency
15
29
  name: bindata
16
30
  requirement: !ruby/object:Gem::Requirement
@@ -45,14 +59,14 @@ dependencies:
45
59
  requirements:
46
60
  - - "~>"
47
61
  - !ruby/object:Gem::Version
48
- version: 0.7.0
62
+ version: 0.8.0
49
63
  type: :runtime
50
64
  prerelease: false
51
65
  version_requirements: !ruby/object:Gem::Requirement
52
66
  requirements:
53
67
  - - "~>"
54
68
  - !ruby/object:Gem::Version
55
- version: 0.7.0
69
+ version: 0.8.0
56
70
  - !ruby/object:Gem::Dependency
57
71
  name: jwt
58
72
  requirement: !ruby/object:Gem::Requirement
@@ -212,11 +226,14 @@ files:
212
226
  - LICENSE.txt
213
227
  - README.md
214
228
  - Rakefile
229
+ - SECURITY.md
215
230
  - bin/console
216
231
  - bin/setup
217
232
  - docs/u2f_migration.md
233
+ - gemfiles/cose_head.gemfile
218
234
  - gemfiles/openssl_2_0.gemfile
219
235
  - gemfiles/openssl_2_1.gemfile
236
+ - gemfiles/openssl_head.gemfile
220
237
  - lib/android_safetynet/attestation_response.rb
221
238
  - lib/cose/algorithm.rb
222
239
  - lib/tpm/constants.rb
@@ -247,6 +264,7 @@ files:
247
264
  - lib/webauthn/authenticator_response.rb
248
265
  - lib/webauthn/client_data.rb
249
266
  - lib/webauthn/configuration.rb
267
+ - lib/webauthn/credential.rb
250
268
  - lib/webauthn/credential_creation_options.rb
251
269
  - lib/webauthn/credential_entity.rb
252
270
  - lib/webauthn/credential_options.rb
@@ -260,11 +278,18 @@ files:
260
278
  - lib/webauthn/fake_authenticator/authenticator_data.rb
261
279
  - lib/webauthn/fake_client.rb
262
280
  - lib/webauthn/public_key_credential.rb
281
+ - lib/webauthn/public_key_credential/creation_options.rb
282
+ - lib/webauthn/public_key_credential/entity.rb
283
+ - lib/webauthn/public_key_credential/options.rb
284
+ - lib/webauthn/public_key_credential/request_options.rb
285
+ - lib/webauthn/public_key_credential/rp_entity.rb
286
+ - lib/webauthn/public_key_credential/user_entity.rb
287
+ - lib/webauthn/public_key_credential_with_assertion.rb
288
+ - lib/webauthn/public_key_credential_with_attestation.rb
263
289
  - lib/webauthn/security_utils.rb
264
290
  - lib/webauthn/signature_verifier.rb
265
291
  - lib/webauthn/u2f_migrator.rb
266
292
  - lib/webauthn/version.rb
267
- - webauthn-ruby.png
268
293
  - webauthn.gemspec
269
294
  homepage: https://github.com/cedarcode/webauthn-ruby
270
295
  licenses:
@@ -284,11 +309,11 @@ required_ruby_version: !ruby/object:Gem::Requirement
284
309
  version: '2.3'
285
310
  required_rubygems_version: !ruby/object:Gem::Requirement
286
311
  requirements:
287
- - - ">="
312
+ - - ">"
288
313
  - !ruby/object:Gem::Version
289
- version: '0'
314
+ version: 1.3.1
290
315
  requirements: []
291
- rubygems_version: 3.0.4
316
+ rubygems_version: 3.0.6
292
317
  signing_key:
293
318
  specification_version: 4
294
319
  summary: WebAuthn ruby server library
Binary file