webauthn 1.18.0 → 2.0.0.beta1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (40) hide show
  1. checksums.yaml +4 -4
  2. data/.rubocop.yml +8 -0
  3. data/.travis.yml +7 -3
  4. data/Appraisals +8 -0
  5. data/CHANGELOG.md +52 -0
  6. data/README.md +88 -80
  7. data/SECURITY.md +18 -0
  8. data/gemfiles/cose_head.gemfile +7 -0
  9. data/gemfiles/openssl_head.gemfile +7 -0
  10. data/lib/webauthn.rb +9 -1
  11. data/lib/webauthn/attestation_statement/android_safetynet.rb +4 -4
  12. data/lib/webauthn/attestation_statement/base.rb +4 -4
  13. data/lib/webauthn/attestation_statement/fido_u2f.rb +1 -2
  14. data/lib/webauthn/authenticator_assertion_response.rb +33 -35
  15. data/lib/webauthn/authenticator_attestation_response.rb +30 -0
  16. data/lib/webauthn/authenticator_data.rb +3 -1
  17. data/lib/webauthn/authenticator_data/attested_credential_data.rb +1 -0
  18. data/lib/webauthn/authenticator_response.rb +1 -2
  19. data/lib/webauthn/client_data.rb +2 -1
  20. data/lib/webauthn/configuration.rb +9 -0
  21. data/lib/webauthn/credential.rb +26 -0
  22. data/lib/webauthn/credential_creation_options.rb +5 -1
  23. data/lib/webauthn/credential_request_options.rb +5 -0
  24. data/lib/webauthn/encoder.rb +8 -1
  25. data/lib/webauthn/fake_authenticator.rb +1 -0
  26. data/lib/webauthn/fake_client.rb +26 -22
  27. data/lib/webauthn/public_key_credential.rb +10 -50
  28. data/lib/webauthn/public_key_credential/creation_options.rb +92 -0
  29. data/lib/webauthn/public_key_credential/entity.rb +44 -0
  30. data/lib/webauthn/public_key_credential/options.rb +72 -0
  31. data/lib/webauthn/public_key_credential/request_options.rb +36 -0
  32. data/lib/webauthn/public_key_credential/rp_entity.rb +23 -0
  33. data/lib/webauthn/public_key_credential/user_entity.rb +24 -0
  34. data/lib/webauthn/public_key_credential_with_assertion.rb +35 -0
  35. data/lib/webauthn/public_key_credential_with_attestation.rb +30 -0
  36. data/lib/webauthn/u2f_migrator.rb +1 -1
  37. data/lib/webauthn/version.rb +1 -1
  38. data/webauthn.gemspec +3 -2
  39. metadata +33 -8
  40. data/webauthn-ruby.png +0 -0
@@ -23,7 +23,7 @@ module WebAuthn
23
23
  sign_count: @counter,
24
24
  user_present: true,
25
25
  user_verified: false,
26
- aaguid: WebAuthn::AttestationStatement::FidoU2f::VALID_ATTESTED_AAGUID,
26
+ aaguid: WebAuthn::AuthenticatorData::AttestedCredentialData::ZEROED_AAGUID
27
27
  )
28
28
  end
29
29
 
@@ -1,5 +1,5 @@
1
1
  # frozen_string_literal: true
2
2
 
3
3
  module WebAuthn
4
- VERSION = "1.18.0"
4
+ VERSION = "2.0.0.beta1"
5
5
  end
@@ -23,7 +23,7 @@ Gem::Specification.new do |spec|
23
23
  }
24
24
 
25
25
  spec.files = `git ls-files -z`.split("\x0").reject do |f|
26
- f.match(%r{^(test|spec|features)/})
26
+ f.match(%r{^(test|spec|features|assets)/})
27
27
  end
28
28
  spec.bindir = "exe"
29
29
  spec.executables = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
@@ -31,9 +31,10 @@ Gem::Specification.new do |spec|
31
31
 
32
32
  spec.required_ruby_version = ">= 2.3"
33
33
 
34
+ spec.add_dependency "awrence", "~> 1.1"
34
35
  spec.add_dependency "bindata", "~> 2.4"
35
36
  spec.add_dependency "cbor", "~> 0.5.9"
36
- spec.add_dependency "cose", "~> 0.7.0"
37
+ spec.add_dependency "cose", "~> 0.8.0"
37
38
  spec.add_dependency "jwt", [">= 1.5", "< 3.0"]
38
39
  spec.add_dependency "openssl", "~> 2.0"
39
40
  spec.add_dependency "securecompare", "~> 1.0"
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: webauthn
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.18.0
4
+ version: 2.0.0.beta1
5
5
  platform: ruby
6
6
  authors:
7
7
  - Gonzalo Rodriguez
@@ -9,8 +9,22 @@ authors:
9
9
  autorequire:
10
10
  bindir: exe
11
11
  cert_chain: []
12
- date: 2019-07-27 00:00:00.000000000 Z
12
+ date: 2019-09-16 00:00:00.000000000 Z
13
13
  dependencies:
14
+ - !ruby/object:Gem::Dependency
15
+ name: awrence
16
+ requirement: !ruby/object:Gem::Requirement
17
+ requirements:
18
+ - - "~>"
19
+ - !ruby/object:Gem::Version
20
+ version: '1.1'
21
+ type: :runtime
22
+ prerelease: false
23
+ version_requirements: !ruby/object:Gem::Requirement
24
+ requirements:
25
+ - - "~>"
26
+ - !ruby/object:Gem::Version
27
+ version: '1.1'
14
28
  - !ruby/object:Gem::Dependency
15
29
  name: bindata
16
30
  requirement: !ruby/object:Gem::Requirement
@@ -45,14 +59,14 @@ dependencies:
45
59
  requirements:
46
60
  - - "~>"
47
61
  - !ruby/object:Gem::Version
48
- version: 0.7.0
62
+ version: 0.8.0
49
63
  type: :runtime
50
64
  prerelease: false
51
65
  version_requirements: !ruby/object:Gem::Requirement
52
66
  requirements:
53
67
  - - "~>"
54
68
  - !ruby/object:Gem::Version
55
- version: 0.7.0
69
+ version: 0.8.0
56
70
  - !ruby/object:Gem::Dependency
57
71
  name: jwt
58
72
  requirement: !ruby/object:Gem::Requirement
@@ -212,11 +226,14 @@ files:
212
226
  - LICENSE.txt
213
227
  - README.md
214
228
  - Rakefile
229
+ - SECURITY.md
215
230
  - bin/console
216
231
  - bin/setup
217
232
  - docs/u2f_migration.md
233
+ - gemfiles/cose_head.gemfile
218
234
  - gemfiles/openssl_2_0.gemfile
219
235
  - gemfiles/openssl_2_1.gemfile
236
+ - gemfiles/openssl_head.gemfile
220
237
  - lib/android_safetynet/attestation_response.rb
221
238
  - lib/cose/algorithm.rb
222
239
  - lib/tpm/constants.rb
@@ -247,6 +264,7 @@ files:
247
264
  - lib/webauthn/authenticator_response.rb
248
265
  - lib/webauthn/client_data.rb
249
266
  - lib/webauthn/configuration.rb
267
+ - lib/webauthn/credential.rb
250
268
  - lib/webauthn/credential_creation_options.rb
251
269
  - lib/webauthn/credential_entity.rb
252
270
  - lib/webauthn/credential_options.rb
@@ -260,11 +278,18 @@ files:
260
278
  - lib/webauthn/fake_authenticator/authenticator_data.rb
261
279
  - lib/webauthn/fake_client.rb
262
280
  - lib/webauthn/public_key_credential.rb
281
+ - lib/webauthn/public_key_credential/creation_options.rb
282
+ - lib/webauthn/public_key_credential/entity.rb
283
+ - lib/webauthn/public_key_credential/options.rb
284
+ - lib/webauthn/public_key_credential/request_options.rb
285
+ - lib/webauthn/public_key_credential/rp_entity.rb
286
+ - lib/webauthn/public_key_credential/user_entity.rb
287
+ - lib/webauthn/public_key_credential_with_assertion.rb
288
+ - lib/webauthn/public_key_credential_with_attestation.rb
263
289
  - lib/webauthn/security_utils.rb
264
290
  - lib/webauthn/signature_verifier.rb
265
291
  - lib/webauthn/u2f_migrator.rb
266
292
  - lib/webauthn/version.rb
267
- - webauthn-ruby.png
268
293
  - webauthn.gemspec
269
294
  homepage: https://github.com/cedarcode/webauthn-ruby
270
295
  licenses:
@@ -284,11 +309,11 @@ required_ruby_version: !ruby/object:Gem::Requirement
284
309
  version: '2.3'
285
310
  required_rubygems_version: !ruby/object:Gem::Requirement
286
311
  requirements:
287
- - - ">="
312
+ - - ">"
288
313
  - !ruby/object:Gem::Version
289
- version: '0'
314
+ version: 1.3.1
290
315
  requirements: []
291
- rubygems_version: 3.0.4
316
+ rubygems_version: 3.0.6
292
317
  signing_key:
293
318
  specification_version: 4
294
319
  summary: WebAuthn ruby server library
Binary file