@aws-amplify/auth 6.15.1 → 6.15.2-unstable.42b6d67.0

package/package.json

@@ -1,107 +1,113 @@
 {
-	"name": "@aws-amplify/auth",
-	"version": "6.15.1",
-	"description": "Auth category of aws-amplify",
-	"main": "./dist/cjs/index.js",
-	"module": "./dist/esm/index.mjs",
-	"typings": "./dist/esm/index.d.ts",
-	"react-native": "./dist/cjs/index.js",
-	"sideEffects": [
-		"./dist/cjs/providers/cognito/apis/signInWithRedirect.js",
-		"./dist/esm/providers/cognito/apis/signInWithRedirect.mjs",
-		"./dist/cjs/providers/cognito/utils/oauth/enableOAuthListener.js",
-		"./dist/esm/providers/cognito/utils/oauth/enableOAuthListener.mjs"
-	],
-	"publishConfig": {
-		"access": "public"
-	},
-	"scripts": {
-		"test": "yarn lint --fix && jest -w 1 --coverage --logHeapUsage",
-		"build-with-test": "npm test && npm run build",
-		"build:umd": "webpack && webpack --config ./webpack.config.dev.js",
-		"build:esm-cjs": "rollup --forceExit -c rollup.config.mjs",
-		"build:watch": "npm run build:esm-cjs -- --watch",
-		"build": "npm run clean && npm run build:esm-cjs && npm run build:umd",
-		"clean": "npm run clean:size && rimraf lib-esm lib dist",
-		"clean:size": "rimraf dual-publish-tmp tmp*",
-		"format": "echo \"Not implemented\"",
-		"lint": "eslint '**/*.{ts,tsx}' && npm run ts-coverage",
-		"lint:fix": "eslint '**/*.{ts,tsx}' --fix",
-		"ts-coverage": "typescript-coverage-report -p ./tsconfig.build.json -t 91.18"
-	},
-	"typesVersions": {
-		">=4.2": {
-			"cognito": [
-				"./dist/esm/providers/cognito/index.d.ts"
-			],
-			"cognito/server": [
-				"./dist/esm/providers/cognito/apis/server/index.d.ts"
-			],
-			"server": [
-				"./dist/esm/server.d.ts"
-			]
-		}
-	},
-	"exports": {
-		".": {
-			"react-native": "./dist/cjs/index.js",
-			"types": "./dist/esm/index.d.ts",
-			"import": "./dist/esm/index.mjs",
-			"require": "./dist/cjs/index.js"
-		},
-		"./cognito": {
-			"react-native": "./dist/cjs/providers/cognito/index.js",
-			"types": "./dist/esm/providers/cognito/index.d.ts",
-			"import": "./dist/esm/providers/cognito/index.mjs",
-			"require": "./dist/cjs/providers/cognito/index.js"
-		},
-		"./cognito/server": {
-			"types": "./dist/esm/providers/cognito/apis/server/index.d.ts",
-			"import": "./dist/esm/providers/cognito/apis/server/index.mjs",
-			"require": "./dist/cjs/providers/cognito/apis/server/index.js"
-		},
-		"./server": {
-			"types": "./dist/esm/server.d.ts",
-			"import": "./dist/esm/server.mjs",
-			"require": "./dist/cjs/server.js"
-		},
-		"./enable-oauth-listener": {
-			"types": "./dist/esm/providers/cognito/utils/oauth/enableOAuthListener.d.ts",
-			"import": "./dist/esm/providers/cognito/utils/oauth/enableOAuthListener.mjs",
-			"require": "./dist/cjs/providers/cognito/utils/oauth/enableOAuthListener.js"
-		},
-		"./package.json": "./package.json"
-	},
-	"repository": {
-		"type": "git",
-		"url": "https://github.com/aws-amplify/amplify-js.git"
-	},
-	"author": "Amazon Web Services",
-	"license": "Apache-2.0",
-	"bugs": {
-		"url": "https://github.com/aws/aws-amplify/issues"
-	},
-	"homepage": "https://aws-amplify.github.io/",
-	"files": [
-		"dist/cjs",
-		"dist/esm",
-		"src",
-		"cognito",
-		"server",
-		"enable-oauth-listener"
-	],
-	"dependencies": {
-		"@aws-crypto/sha256-js": "5.2.0",
-		"@smithy/types": "^3.3.0",
-		"tslib": "^2.5.0"
-	},
-	"peerDependencies": {
-		"@aws-amplify/core": "^6.1.0"
-	},
-	"devDependencies": {
-		"@aws-amplify/core": "6.13.2",
-		"@aws-amplify/react-native": "1.1.10",
-		"@jest/test-sequencer": "^29.7.0"
-	},
-	"gitHead": "21ebe0a1e6f009a419864ed8550d20a3528d8944"
+  "name": "@aws-amplify/auth",
+  "version": "6.15.2-unstable.42b6d67.0+42b6d67",
+  "description": "Auth category of aws-amplify",
+  "main": "./dist/cjs/index.js",
+  "module": "./dist/esm/index.mjs",
+  "typings": "./dist/esm/index.d.ts",
+  "react-native": "./dist/cjs/index.js",
+  "sideEffects": [
+    "./dist/cjs/providers/cognito/apis/signInWithRedirect.js",
+    "./dist/esm/providers/cognito/apis/signInWithRedirect.mjs",
+    "./dist/cjs/providers/cognito/utils/oauth/enableOAuthListener.js",
+    "./dist/esm/providers/cognito/utils/oauth/enableOAuthListener.mjs"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "test": "yarn lint --fix && jest -w 1 --coverage --logHeapUsage",
+    "build-with-test": "npm test && npm run build",
+    "build:umd": "webpack && webpack --config ./webpack.config.dev.js",
+    "build:esm-cjs": "rollup --forceExit -c rollup.config.mjs",
+    "build:watch": "npm run build:esm-cjs -- --watch",
+    "build": "npm run clean && npm run build:esm-cjs && npm run build:umd",
+    "clean": "npm run clean:size && rimraf lib-esm lib dist",
+    "clean:size": "rimraf dual-publish-tmp tmp*",
+    "format": "echo \"Not implemented\"",
+    "lint": "eslint '**/*.{ts,tsx}' && npm run ts-coverage",
+    "lint:fix": "eslint '**/*.{ts,tsx}' --fix",
+    "ts-coverage": "typescript-coverage-report -p ./tsconfig.build.json -t 91.18"
+  },
+  "typesVersions": {
+    ">=4.2": {
+      "cognito": [
+        "./dist/esm/providers/cognito/index.d.ts"
+      ],
+      "cognito/server": [
+        "./dist/esm/providers/cognito/apis/server/index.d.ts"
+      ],
+      "server": [
+        "./dist/esm/server.d.ts"
+      ]
+    }
+  },
+  "exports": {
+    ".": {
+      "react-native": "./dist/cjs/index.js",
+      "types": "./dist/esm/index.d.ts",
+      "import": "./dist/esm/index.mjs",
+      "require": "./dist/cjs/index.js"
+    },
+    "./cognito": {
+      "react-native": "./dist/cjs/providers/cognito/index.js",
+      "types": "./dist/esm/providers/cognito/index.d.ts",
+      "import": "./dist/esm/providers/cognito/index.mjs",
+      "require": "./dist/cjs/providers/cognito/index.js"
+    },
+    "./cognito/server": {
+      "types": "./dist/esm/providers/cognito/apis/server/index.d.ts",
+      "import": "./dist/esm/providers/cognito/apis/server/index.mjs",
+      "require": "./dist/cjs/providers/cognito/apis/server/index.js"
+    },
+    "./server": {
+      "types": "./dist/esm/server.d.ts",
+      "import": "./dist/esm/server.mjs",
+      "require": "./dist/cjs/server.js"
+    },
+    "./enable-oauth-listener": {
+      "types": "./dist/esm/providers/cognito/utils/oauth/enableOAuthListener.d.ts",
+      "import": "./dist/esm/providers/cognito/utils/oauth/enableOAuthListener.mjs",
+      "require": "./dist/cjs/providers/cognito/utils/oauth/enableOAuthListener.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/aws-amplify/amplify-js.git"
+  },
+  "author": "Amazon Web Services",
+  "license": "Apache-2.0",
+  "bugs": {
+    "url": "https://github.com/aws/aws-amplify/issues"
+  },
+  "homepage": "https://aws-amplify.github.io/",
+  "files": [
+    "dist/cjs",
+    "dist/esm",
+    "src",
+    "cognito",
+    "server",
+    "enable-oauth-listener"
+  ],
+  "dependencies": {
+    "@aws-crypto/sha256-js": "5.2.0",
+    "@smithy/types": "^3.3.0",
+    "tslib": "^2.5.0"
+  },
+  "peerDependencies": {
+    "@aws-amplify/core": "6.13.3-unstable.42b6d67.0+42b6d67",
+    "@aws-amplify/react-native": "^1.1.10"
+  },
+  "peerDependenciesMeta": {
+    "@aws-amplify/react-native": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@aws-amplify/core": "6.13.3-unstable.42b6d67.0+42b6d67",
+    "@aws-amplify/react-native": "1.1.11-unstable.42b6d67.0+42b6d67",
+    "@jest/test-sequencer": "^29.7.0"
+  },
+  "gitHead": "42b6d6709f540c76502c8736e9b2da8fa2934fd4"
 }

package/src/client/utils/index.ts

@@ -1,4 +1,4 @@
 // Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
 // SPDX-License-Identifier: Apache-2.0
 
-export { registerPasskey } from './passkey';
+export { getPasskey, registerPasskey } from './passkey';

package/src/client/utils/passkey/errors/handlePasskeyAuthenticationError.native.ts

@@ -0,0 +1,54 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+import { getIsNativeError } from '@aws-amplify/react-native';
+
+import { handlePasskeyError } from './handlePasskeyError';
+import {
+	PasskeyError,
+	PasskeyErrorCode,
+	passkeyErrorMap,
+} from './passkeyError';
+
+/**
+ * Handle Passkey Authentication Errors
+ *
+ * @param err unknown
+ * @returns PasskeyError
+ */
+export const handlePasskeyAuthenticationError = (
+	err: unknown,
+): PasskeyError => {
+	if (err instanceof PasskeyError) {
+		return err;
+	}
+
+	if (getIsNativeError(err)) {
+		// Passkey Retrieval Failed
+		if (err.code === 'FAILED') {
+			const { message, recoverySuggestion } =
+				passkeyErrorMap[PasskeyErrorCode.PasskeyRetrievalFailed];
+
+			return new PasskeyError({
+				name: PasskeyErrorCode.PasskeyRetrievalFailed,
+				message,
+				recoverySuggestion,
+				underlyingError: err,
+			});
+		}
+
+		if (err.code === 'CANCELED') {
+			const { message, recoverySuggestion } =
+				passkeyErrorMap[PasskeyErrorCode.PasskeyAuthenticationCanceled];
+
+			return new PasskeyError({
+				name: PasskeyErrorCode.PasskeyAuthenticationCanceled,
+				message,
+				recoverySuggestion,
+				underlyingError: err,
+			});
+		}
+	}
+
+	return handlePasskeyError(err);
+};

package/src/client/utils/passkey/errors/handlePasskeyAuthenticationError.ts

@@ -0,0 +1,40 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+import { handlePasskeyError } from './handlePasskeyError';
+import {
+	PasskeyError,
+	PasskeyErrorCode,
+	passkeyErrorMap,
+} from './passkeyError';
+
+/**
+ * Handle Passkey Authentication Errors
+ * https://w3c.github.io/webauthn/#sctn-get-request-exceptions
+ *
+ * @param err unknown
+ * @returns PasskeyError
+ */
+export const handlePasskeyAuthenticationError = (
+	err: unknown,
+): PasskeyError => {
+	if (err instanceof PasskeyError) {
+		return err;
+	}
+
+	if (err instanceof Error) {
+		if (err.name === 'NotAllowedError') {
+			const { message, recoverySuggestion } =
+				passkeyErrorMap[PasskeyErrorCode.PasskeyAuthenticationCanceled];
+
+			return new PasskeyError({
+				name: PasskeyErrorCode.PasskeyAuthenticationCanceled,
+				message,
+				recoverySuggestion,
+				underlyingError: err,
+			});
+		}
+	}
+
+	return handlePasskeyError(err);
+};

package/src/client/utils/passkey/errors/handlePasskeyError.native.ts

@@ -0,0 +1,53 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+import { AmplifyErrorCode } from '@aws-amplify/core/internals/utils';
+import { getIsNativeError } from '@aws-amplify/react-native';
+
+import {
+	PasskeyError,
+	PasskeyErrorCode,
+	passkeyErrorMap,
+} from './passkeyError';
+
+/**
+ * Handles Overlapping Passkey Errors Between Registration & Authentication
+ *
+ * @param err unknown
+ * @returns PasskeyError
+ */
+export const handlePasskeyError = (err: unknown): PasskeyError => {
+	if (getIsNativeError(err)) {
+		// Relying Party / Domain Mismatch
+		if (err.code === 'RELYING_PARTY_MISMATCH') {
+			const { message, recoverySuggestion } =
+				passkeyErrorMap[PasskeyErrorCode.RelyingPartyMismatch];
+
+			return new PasskeyError({
+				name: PasskeyErrorCode.RelyingPartyMismatch,
+				message,
+				recoverySuggestion,
+				underlyingError: err,
+			});
+		}
+
+		// Not Supported
+		if (err.code === 'NOT_SUPPORTED') {
+			const { message, recoverySuggestion } =
+				passkeyErrorMap[PasskeyErrorCode.PasskeyNotSupported];
+
+			return new PasskeyError({
+				name: PasskeyErrorCode.PasskeyNotSupported,
+				message,
+				recoverySuggestion,
+				underlyingError: err,
+			});
+		}
+	}
+
+	return new PasskeyError({
+		name: AmplifyErrorCode.Unknown,
+		message: 'An unknown error has occurred.',
+		underlyingError: err,
+	});
+};

package/src/client/utils/passkey/errors/handlePasskeyError.ts

@@ -0,0 +1,53 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+import { AmplifyErrorCode } from '@aws-amplify/core/internals/utils';
+
+import {
+	PasskeyError,
+	PasskeyErrorCode,
+	passkeyErrorMap,
+} from './passkeyError';
+
+/**
+ * Handles Overlapping Passkey Errors Between Registration & Authentication
+ * https://w3c.github.io/webauthn/#sctn-create-request-exceptions
+ * https://w3c.github.io/webauthn/#sctn-get-request-exceptions
+ *
+ * @param err unknown
+ * @returns PasskeyError
+ */
+export const handlePasskeyError = (err: unknown): PasskeyError => {
+	if (err instanceof Error) {
+		// Passkey Operation Aborted
+		if (err.name === 'AbortError') {
+			const { message, recoverySuggestion } =
+				passkeyErrorMap[PasskeyErrorCode.PasskeyOperationAborted];
+
+			return new PasskeyError({
+				name: PasskeyErrorCode.PasskeyOperationAborted,
+				message,
+				recoverySuggestion,
+				underlyingError: err,
+			});
+		}
+		// Relying Party / Domain Mismatch
+		if (err.name === 'SecurityError') {
+			const { message, recoverySuggestion } =
+				passkeyErrorMap[PasskeyErrorCode.RelyingPartyMismatch];
+
+			return new PasskeyError({
+				name: PasskeyErrorCode.RelyingPartyMismatch,
+				message,
+				recoverySuggestion,
+				underlyingError: err,
+			});
+		}
+	}
+
+	return new PasskeyError({
+		name: AmplifyErrorCode.Unknown,
+		message: 'An unknown error has occurred.',
+		underlyingError: err,
+	});
+};

package/src/client/utils/passkey/errors/handlePasskeyRegistrationError.native.ts

@@ -0,0 +1,66 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+import { getIsNativeError } from '@aws-amplify/react-native';
+
+import { handlePasskeyError } from './handlePasskeyError';
+import {
+	PasskeyError,
+	PasskeyErrorCode,
+	passkeyErrorMap,
+} from './passkeyError';
+
+/**
+ * Handle Passkey Registration Errors
+ *
+ * @param err unknown
+ * @returns PasskeyError
+ */
+export const handlePasskeyRegistrationError = (err: unknown): PasskeyError => {
+	if (err instanceof PasskeyError) {
+		return err;
+	}
+
+	if (getIsNativeError(err)) {
+		// Passkey Registration Failed
+		if (err.code === 'FAILED') {
+			const { message, recoverySuggestion } =
+				passkeyErrorMap[PasskeyErrorCode.PasskeyRegistrationFailed];
+
+			return new PasskeyError({
+				name: PasskeyErrorCode.PasskeyRegistrationFailed,
+				message,
+				recoverySuggestion,
+				underlyingError: err,
+			});
+		}
+
+		// Duplicate Passkey
+		if (err.code === 'DUPLICATE') {
+			const { message, recoverySuggestion } =
+				passkeyErrorMap[PasskeyErrorCode.PasskeyAlreadyExists];
+
+			return new PasskeyError({
+				name: PasskeyErrorCode.PasskeyAlreadyExists,
+				message,
+				recoverySuggestion,
+				underlyingError: err,
+			});
+		}
+
+		// User Cancels Ceremony
+		if (err.code === 'CANCELED') {
+			const { message, recoverySuggestion } =
+				passkeyErrorMap[PasskeyErrorCode.PasskeyRegistrationCanceled];
+
+			return new PasskeyError({
+				name: PasskeyErrorCode.PasskeyRegistrationCanceled,
+				message,
+				recoverySuggestion,
+				underlyingError: err,
+			});
+		}
+	}
+
+	return handlePasskeyError(err);
+};

package/src/client/utils/passkey/errors/handlePasskeyRegistrationError.ts

@@ -0,0 +1,52 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+import { handlePasskeyError } from './handlePasskeyError';
+import {
+	PasskeyError,
+	PasskeyErrorCode,
+	passkeyErrorMap,
+} from './passkeyError';
+
+/**
+ * Handle Passkey Registration Errors
+ * https://w3c.github.io/webauthn/#sctn-create-request-exceptions
+ *
+ * @param err unknown
+ * @returns PasskeyError
+ */
+export const handlePasskeyRegistrationError = (err: unknown): PasskeyError => {
+	if (err instanceof PasskeyError) {
+		return err;
+	}
+
+	if (err instanceof Error) {
+		// Duplicate Passkey
+		if (err.name === 'InvalidStateError') {
+			const { message, recoverySuggestion } =
+				passkeyErrorMap[PasskeyErrorCode.PasskeyAlreadyExists];
+
+			return new PasskeyError({
+				name: PasskeyErrorCode.PasskeyAlreadyExists,
+				message,
+				recoverySuggestion,
+				underlyingError: err,
+			});
+		}
+
+		// User Cancels Ceremony / Generic Catch All
+		if (err.name === 'NotAllowedError') {
+			const { message, recoverySuggestion } =
+				passkeyErrorMap[PasskeyErrorCode.PasskeyRegistrationCanceled];
+
+			return new PasskeyError({
+				name: PasskeyErrorCode.PasskeyRegistrationCanceled,
+				message,
+				recoverySuggestion,
+				underlyingError: err,
+			});
+		}
+	}
+
+	return handlePasskeyError(err);
+};

package/src/client/utils/passkey/errors/index.ts

@@ -0,0 +1,10 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+export { handlePasskeyAuthenticationError } from './handlePasskeyAuthenticationError';
+export { handlePasskeyRegistrationError } from './handlePasskeyRegistrationError';
+export {
+	PasskeyError,
+	PasskeyErrorCode,
+	assertPasskeyError,
+} from './passkeyError';

package/src/client/utils/passkey/errors/passkeyError.ts

@@ -0,0 +1,96 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+import {
+	AmplifyError,
+	AmplifyErrorMap,
+	AmplifyErrorParams,
+	AssertionFunction,
+	createAssertionFunction,
+} from '@aws-amplify/core/internals/utils';
+
+import { NOT_SUPPORTED_RECOVERY_SUGGESTION } from './passkeyErrorPlatformConstants';
+
+export class PasskeyError extends AmplifyError {
+	constructor(params: AmplifyErrorParams) {
+		super(params);
+
+		// Hack for making the custom error class work when transpiled to es5
+		// TODO: Delete the following 2 lines after we change the build target to >= es2015
+		this.constructor = PasskeyError;
+		Object.setPrototypeOf(this, PasskeyError.prototype);
+	}
+}
+
+export enum PasskeyErrorCode {
+	// not supported
+	PasskeyNotSupported = 'PasskeyNotSupported',
+	// duplicate passkey
+	PasskeyAlreadyExists = 'PasskeyAlreadyExists',
+	// misconfigurations
+	InvalidPasskeyRegistrationOptions = 'InvalidPasskeyRegistrationOptions',
+	InvalidPasskeyAuthenticationOptions = 'InvalidPasskeyAuthenticationOptions',
+	RelyingPartyMismatch = 'RelyingPartyMismatch',
+	// failed credential creation / retrieval
+	PasskeyRegistrationFailed = 'PasskeyRegistrationFailed',
+	PasskeyRetrievalFailed = 'PasskeyRetrievalFailed',
+	// cancel / aborts
+	PasskeyRegistrationCanceled = 'PasskeyRegistrationCanceled',
+	PasskeyAuthenticationCanceled = 'PasskeyAuthenticationCanceled',
+	PasskeyOperationAborted = 'PasskeyOperationAborted',
+}
+
+const ABORT_OR_CANCEL_RECOVERY_SUGGESTION =
+	'User may have canceled the ceremony or another interruption has occurred. Check underlying error for details.';
+
+const MISCONFIGURATION_RECOVERY_SUGGESTION =
+	'Ensure your user pool is configured to support the WEB_AUTHN as an authentication factor.';
+
+export const passkeyErrorMap: AmplifyErrorMap<PasskeyErrorCode> = {
+	[PasskeyErrorCode.PasskeyNotSupported]: {
+		message: 'Passkeys may not be supported on this device.',
+		recoverySuggestion: NOT_SUPPORTED_RECOVERY_SUGGESTION,
+	},
+	[PasskeyErrorCode.InvalidPasskeyRegistrationOptions]: {
+		message: 'Invalid passkey registration options.',
+		recoverySuggestion: MISCONFIGURATION_RECOVERY_SUGGESTION,
+	},
+	[PasskeyErrorCode.InvalidPasskeyAuthenticationOptions]: {
+		message: 'Invalid passkey authentication options.',
+		recoverySuggestion: MISCONFIGURATION_RECOVERY_SUGGESTION,
+	},
+	[PasskeyErrorCode.PasskeyRegistrationFailed]: {
+		message: 'Device failed to create passkey.',
+		recoverySuggestion: NOT_SUPPORTED_RECOVERY_SUGGESTION,
+	},
+	[PasskeyErrorCode.PasskeyRetrievalFailed]: {
+		message: 'Device failed to retrieve passkey.',
+		recoverySuggestion:
+			'Passkeys may not be available on this device. Try an alternative authentication factor like PASSWORD, EMAIL_OTP, or SMS_OTP.',
+	},
+	[PasskeyErrorCode.PasskeyAlreadyExists]: {
+		message: 'Passkey already exists in authenticator.',
+		recoverySuggestion:
+			'Proceed with existing passkey or try again after deleting the credential.',
+	},
+	[PasskeyErrorCode.PasskeyRegistrationCanceled]: {
+		message: 'Passkey registration ceremony has been canceled.',
+		recoverySuggestion: ABORT_OR_CANCEL_RECOVERY_SUGGESTION,
+	},
+	[PasskeyErrorCode.PasskeyAuthenticationCanceled]: {
+		message: 'Passkey authentication ceremony has been canceled.',
+		recoverySuggestion: ABORT_OR_CANCEL_RECOVERY_SUGGESTION,
+	},
+	[PasskeyErrorCode.PasskeyOperationAborted]: {
+		message: 'Passkey operation has been aborted.',
+		recoverySuggestion: ABORT_OR_CANCEL_RECOVERY_SUGGESTION,
+	},
+	[PasskeyErrorCode.RelyingPartyMismatch]: {
+		message: 'Relying party does not match current domain.',
+		recoverySuggestion:
+			'Ensure relying party identifier matches current domain.',
+	},
+};
+
+export const assertPasskeyError: AssertionFunction<PasskeyErrorCode> =
+	createAssertionFunction(passkeyErrorMap, PasskeyError);

package/src/client/utils/passkey/errors/passkeyErrorPlatformConstants.native.ts

@@ -0,0 +1,5 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+export const NOT_SUPPORTED_RECOVERY_SUGGESTION =
+	'Passkeys may not be supported on this device. Ensure your application is running on a supported platform.';

package/src/client/utils/passkey/errors/passkeyErrorPlatformConstants.ts

@@ -0,0 +1,5 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+export const NOT_SUPPORTED_RECOVERY_SUGGESTION =
+	'Passkeys may not be supported on this device. Ensure your application is running in a secure context (HTTPS) and Web Authentication API is supported.';