@algorandfoundation/react-native-passkey-autofill 1.0.0-canary.1 → 1.0.0-canary.3

package/README.md

@@ -16,6 +16,29 @@ npm install react-native-passkey-autofill
 
 To use this module on Android, you need to configure the AutoFill service in your `AndroidManifest.xml` or via the Expo plugin.
 
+#### Expo Plugin Configuration
+
+If you are using Expo, you can configure the plugin in your `app.json` or `app.config.js`:
+
+```json
+{
+  "expo": {
+    "plugins": [
+      [
+        "react-native-passkey-autofill",
+        {
+          "site": "https://your-fido-server.com",
+          "label": "My Custom Credential Provider"
+        }
+      ]
+    ]
+  }
+}
+```
+
+- `site`: The URL of your FIDO server (default: `https://fido.shore-tech.net`).
+- `label`: The name of the credential provider as it appears in Android settings (default: `My Credential Provider`).
+
 ## Usage
 
 ```typescript

package/android/src/main/AndroidManifest.xml

@@ -5,7 +5,7 @@
             android:name=".service.PasskeyAutofillCredentialProviderService"
             android:enabled="true"
             android:exported="true"
-            android:label="My Credential Provider"
+            android:label="@string/passkey_autofill_label"
             android:icon="@mipmap/ic_launcher"
             android:permission="android.permission.BIND_CREDENTIAL_PROVIDER_SERVICE"
             tools:targetApi="upside_down_cake">

package/android/src/main/java/co/algorand/passkeyautofill/GetPasskeyActivity.kt

@@ -21,6 +21,7 @@ import androidx.credentials.webauthn.PublicKeyCredentialRequestOptions
 import co.algorand.passkeyautofill.credentials.CredentialRepository
 import co.algorand.passkeyautofill.credentials.Credential
 import java.security.KeyPair
+import java.security.MessageDigest
 import android.util.Base64 as AndroidBase64
 import org.json.JSONObject
 
@@ -39,10 +40,10 @@ class GetPasskeyActivity : AppCompatActivity() {
 
     override fun onCreate(savedInstanceState: Bundle?) {
         super.onCreate(savedInstanceState)
-        
+
         request = PendingIntentHandler.retrieveProviderGetCredentialRequest(intent)
         val credentialData = intent.getBundleExtra("CREDENTIAL_DATA")
-        
+
         if (request != null && credentialData != null) {
             origin = credentialRepository.getOrigin(request!!.callingAppInfo)
             credentialIdEnc = credentialData.getString("credentialId")
@@ -54,7 +55,7 @@ class GetPasskeyActivity : AppCompatActivity() {
             orientation = android.widget.LinearLayout.VERTICAL
             setPadding(50, 50, 50, 50)
         }
-        
+
         val title = TextView(this).apply {
             text = "Use Passkey"
             textSize = 24f
@@ -67,7 +68,7 @@ class GetPasskeyActivity : AppCompatActivity() {
             setPadding(0, 0, 0, 50)
         }
         layout.addView(info)
-        
+
         val confirmButton = Button(this).apply {
             text = "Sign In"
             setOnClickListener {
@@ -85,11 +86,18 @@ class GetPasskeyActivity : AppCompatActivity() {
             val req = request ?: throw IllegalStateException("No request found")
             val option = req.credentialOptions[0] as GetPublicKeyCredentialOption
             val requestOptions = PublicKeyCredentialRequestOptions(option.requestJson)
-            
+
             val credId = AndroidBase64.decode(credentialIdEnc!!, AndroidBase64.DEFAULT)
+
+            val requestJson = JSONObject(option.requestJson)
+            val challenge = requestJson.getString("challenge")
+            val sanitizedOrigin = origin.replace(Regex("/$"), "")
+
             val clientDataHash = option.requestData.getByteArray("androidx.credentials.BUNDLE_KEY_CLIENT_DATA_HASH")
-                ?: throw IllegalStateException("Missing clientDataHash")
-            
+                ?: MessageDigest.getInstance("SHA-256").digest(
+                    "{\"type\":\"webauthn.get\",\"challenge\":\"$challenge\",\"origin\":\"$sanitizedOrigin\",\"crossOrigin\":false}".toByteArray(Charsets.UTF_8)
+                )
+
             val dbCred = credentialRepository.getCredential(this, credId)
                 ?: throw IllegalStateException("Credential not found")
 
@@ -118,10 +126,8 @@ class GetPasskeyActivity : AppCompatActivity() {
             )
 
             // Manual addition of clientDataJSON if needed by some RPs, following reference
-            val requestJson = JSONObject(option.requestJson)
-            val challenge = requestJson.getString("challenge")
             val clientDataJSONb64 = getClientDataJSONb64(origin, challenge)
-            
+
             val delimiter = "response\":{"
             val credentialJson = fidoCredential.json().substringBeforeLast(delimiter) + delimiter +
                     "\"clientDataJSON\":\"$clientDataJSONb64\"," +
@@ -129,12 +135,12 @@ class GetPasskeyActivity : AppCompatActivity() {
 
             val resultIntent = Intent()
             val passkeyCredential = PublicKeyCredential(credentialJson)
-            
+
             PendingIntentHandler.setGetCredentialResponse(
                 resultIntent,
                 GetCredentialResponse(passkeyCredential)
             )
-            
+
             setResult(Activity.RESULT_OK, resultIntent)
         } catch (e: Exception) {
             Log.e(TAG, "Error during passkey assertion", e)

package/android/src/main/res/values/strings.xml

@@ -0,0 +1,3 @@
+<resources>
+    <string name="passkey_autofill_label">My Credential Provider</string>
+</resources>

package/app.plugin.js

@@ -166,6 +166,7 @@ const withUserAgent = (config) => {
 
 const withPasskeyAutofill = (config, props = {}) => {
   const site = props.site || "https://fido.shore-tech.net";
+  const label = props.label || "My Credential Provider";
 
   config = withAndroidCookieModule(config);
   config = withUserAgent(config);
@@ -215,6 +216,10 @@ const withPasskeyAutofill = (config, props = {}) => {
             },
           ]),
         },
+        {
+          $: { name: "passkey_autofill_label", translatable: "true" },
+          _: label,
+        },
       ],
       config.modResults
     );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@algorandfoundation/react-native-passkey-autofill",
-  "version": "1.0.0-canary.1",
+  "version": "1.0.0-canary.3",
   "description": "Passkey AutoFill React Native",
   "main": "build/index.js",
   "types": "build/index.d.ts",