@aws-amplify/auth 6.7.1-unstable.ab33a03.0 → 6.8.0

package/dist/cjs/client/flows/userAuth/handleWebAuthnSignInResult.js

@@ -0,0 +1,88 @@
+'use strict';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleWebAuthnSignInResult = void 0;
+const core_1 = require("@aws-amplify/core");
+const utils_1 = require("@aws-amplify/core/internals/utils");
+const AuthErrorStrings_1 = require("../../../common/AuthErrorStrings");
+const cognitoIdentityProvider_1 = require("../../../foundation/factories/serviceClients/cognitoIdentityProvider");
+const parsers_1 = require("../../../foundation/parsers");
+const factories_1 = require("../../../providers/cognito/factories");
+const cacheTokens_1 = require("../../../providers/cognito/tokenProvider/cacheTokens");
+const dispatchSignedInHubEvent_1 = require("../../../providers/cognito/utils/dispatchSignedInHubEvent");
+const signInHelpers_1 = require("../../../providers/cognito/utils/signInHelpers");
+const store_1 = require("../../../client/utils/store");
+const utils_2 = require("../../../utils");
+const passkey_1 = require("../../utils/passkey");
+const errors_1 = require("../../utils/passkey/errors");
+const AuthError_1 = require("../../../errors/AuthError");
+async function handleWebAuthnSignInResult(challengeParameters) {
+    const authConfig = core_1.Amplify.getConfig().Auth?.Cognito;
+    (0, utils_1.assertTokenProviderConfig)(authConfig);
+    const { username, signInSession, signInDetails, challengeName } = store_1.signInStore.getState();
+    if (challengeName !== 'WEB_AUTHN' || !username) {
+        throw new AuthError_1.AuthError({
+            name: AuthErrorStrings_1.AuthErrorCodes.SignInException,
+            message: 'Unable to proceed due to invalid sign in state.',
+        });
+    }
+    const { CREDENTIAL_REQUEST_OPTIONS: credentialRequestOptions } = challengeParameters;
+    (0, errors_1.assertPasskeyError)(!!credentialRequestOptions, errors_1.PasskeyErrorCode.InvalidPasskeyAuthenticationOptions);
+    const cred = await (0, passkey_1.getPasskey)(JSON.parse(credentialRequestOptions));
+    const respondToAuthChallenge = (0, cognitoIdentityProvider_1.createRespondToAuthChallengeClient)({
+        endpointResolver: (0, factories_1.createCognitoUserPoolEndpointResolver)({
+            endpointOverride: authConfig.userPoolEndpoint,
+        }),
+    });
+    const { ChallengeName: nextChallengeName, ChallengeParameters: nextChallengeParameters, AuthenticationResult: authenticationResult, Session: nextSession, } = await respondToAuthChallenge({
+        region: (0, parsers_1.getRegionFromUserPoolId)(authConfig.userPoolId),
+        userAgentValue: (0, utils_2.getAuthUserAgentValue)(utils_1.AuthAction.ConfirmSignIn),
+    }, {
+        ChallengeName: 'WEB_AUTHN',
+        ChallengeResponses: {
+            USERNAME: username,
+            CREDENTIAL: JSON.stringify(cred),
+        },
+        ClientId: authConfig.userPoolClientId,
+        Session: signInSession,
+    });
+    (0, store_1.setActiveSignInState)({
+        signInSession: nextSession,
+        username,
+        challengeName: nextChallengeName,
+        signInDetails,
+    });
+    if (authenticationResult) {
+        await (0, cacheTokens_1.cacheCognitoTokens)({
+            ...authenticationResult,
+            username,
+            NewDeviceMetadata: await (0, signInHelpers_1.getNewDeviceMetadata)({
+                userPoolId: authConfig.userPoolId,
+                userPoolEndpoint: authConfig.userPoolEndpoint,
+                newDeviceMetadata: authenticationResult.NewDeviceMetadata,
+                accessToken: authenticationResult.AccessToken,
+            }),
+            signInDetails,
+        });
+        (0, store_1.cleanActiveSignInState)();
+        await (0, dispatchSignedInHubEvent_1.dispatchSignedInHubEvent)();
+        return {
+            isSignedIn: true,
+            nextStep: { signInStep: 'DONE' },
+        };
+    }
+    if (nextChallengeName === 'WEB_AUTHN') {
+        throw new AuthError_1.AuthError({
+            name: AuthErrorStrings_1.AuthErrorCodes.SignInException,
+            message: 'Sequential WEB_AUTHN challenges returned from underlying service cannot be handled.',
+        });
+    }
+    return (0, signInHelpers_1.getSignInResult)({
+        challengeName: nextChallengeName,
+        challengeParameters: nextChallengeParameters,
+    });
+}
+exports.handleWebAuthnSignInResult = handleWebAuthnSignInResult;
+//# sourceMappingURL=handleWebAuthnSignInResult.js.map

package/dist/cjs/client/flows/userAuth/handleWebAuthnSignInResult.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handleWebAuthnSignInResult.js","sources":["../../../../../src/client/flows/userAuth/handleWebAuthnSignInResult.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.handleWebAuthnSignInResult = void 0;\nconst core_1 = require(\"@aws-amplify/core\");\nconst utils_1 = require(\"@aws-amplify/core/internals/utils\");\nconst AuthErrorStrings_1 = require(\"../../../common/AuthErrorStrings\");\nconst cognitoIdentityProvider_1 = require(\"../../../foundation/factories/serviceClients/cognitoIdentityProvider\");\nconst parsers_1 = require(\"../../../foundation/parsers\");\nconst factories_1 = require(\"../../../providers/cognito/factories\");\nconst cacheTokens_1 = require(\"../../../providers/cognito/tokenProvider/cacheTokens\");\nconst dispatchSignedInHubEvent_1 = require(\"../../../providers/cognito/utils/dispatchSignedInHubEvent\");\nconst signInHelpers_1 = require(\"../../../providers/cognito/utils/signInHelpers\");\nconst store_1 = require(\"../../../client/utils/store\");\nconst utils_2 = require(\"../../../utils\");\nconst passkey_1 = require(\"../../utils/passkey\");\nconst errors_1 = require(\"../../utils/passkey/errors\");\nconst AuthError_1 = require(\"../../../errors/AuthError\");\nasync function handleWebAuthnSignInResult(challengeParameters) {\n    const authConfig = core_1.Amplify.getConfig().Auth?.Cognito;\n    (0, utils_1.assertTokenProviderConfig)(authConfig);\n    const { username, signInSession, signInDetails, challengeName } = store_1.signInStore.getState();\n    if (challengeName !== 'WEB_AUTHN' || !username) {\n        throw new AuthError_1.AuthError({\n            name: AuthErrorStrings_1.AuthErrorCodes.SignInException,\n            message: 'Unable to proceed due to invalid sign in state.',\n        });\n    }\n    const { CREDENTIAL_REQUEST_OPTIONS: credentialRequestOptions } = challengeParameters;\n    (0, errors_1.assertPasskeyError)(!!credentialRequestOptions, errors_1.PasskeyErrorCode.InvalidPasskeyAuthenticationOptions);\n    const cred = await (0, passkey_1.getPasskey)(JSON.parse(credentialRequestOptions));\n    const respondToAuthChallenge = (0, cognitoIdentityProvider_1.createRespondToAuthChallengeClient)({\n        endpointResolver: (0, factories_1.createCognitoUserPoolEndpointResolver)({\n            endpointOverride: authConfig.userPoolEndpoint,\n        }),\n    });\n    const { ChallengeName: nextChallengeName, ChallengeParameters: nextChallengeParameters, AuthenticationResult: authenticationResult, Session: nextSession, } = await respondToAuthChallenge({\n        region: (0, parsers_1.getRegionFromUserPoolId)(authConfig.userPoolId),\n        userAgentValue: (0, utils_2.getAuthUserAgentValue)(utils_1.AuthAction.ConfirmSignIn),\n    }, {\n        ChallengeName: 'WEB_AUTHN',\n        ChallengeResponses: {\n            USERNAME: username,\n            CREDENTIAL: JSON.stringify(cred),\n        },\n        ClientId: authConfig.userPoolClientId,\n        Session: signInSession,\n    });\n    (0, store_1.setActiveSignInState)({\n        signInSession: nextSession,\n        username,\n        challengeName: nextChallengeName,\n        signInDetails,\n    });\n    if (authenticationResult) {\n        await (0, cacheTokens_1.cacheCognitoTokens)({\n            ...authenticationResult,\n            username,\n            NewDeviceMetadata: await (0, signInHelpers_1.getNewDeviceMetadata)({\n                userPoolId: authConfig.userPoolId,\n                userPoolEndpoint: authConfig.userPoolEndpoint,\n                newDeviceMetadata: authenticationResult.NewDeviceMetadata,\n                accessToken: authenticationResult.AccessToken,\n            }),\n            signInDetails,\n        });\n        (0, store_1.cleanActiveSignInState)();\n        await (0, dispatchSignedInHubEvent_1.dispatchSignedInHubEvent)();\n        return {\n            isSignedIn: true,\n            nextStep: { signInStep: 'DONE' },\n        };\n    }\n    if (nextChallengeName === 'WEB_AUTHN') {\n        throw new AuthError_1.AuthError({\n            name: AuthErrorStrings_1.AuthErrorCodes.SignInException,\n            message: 'Sequential WEB_AUTHN challenges returned from underlying service cannot be handled.',\n        });\n    }\n    return (0, signInHelpers_1.getSignInResult)({\n        challengeName: nextChallengeName,\n        challengeParameters: nextChallengeParameters,\n    });\n}\nexports.handleWebAuthnSignInResult = handleWebAuthnSignInResult;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,0BAA0B,GAAG,KAAK,CAAC,CAAC;AAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,mCAAmC,CAAC,CAAC;AAC7D,MAAM,kBAAkB,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAC;AACvE,MAAM,yBAAyB,GAAG,OAAO,CAAC,sEAAsE,CAAC,CAAC;AAClH,MAAM,SAAS,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;AACzD,MAAM,WAAW,GAAG,OAAO,CAAC,sCAAsC,CAAC,CAAC;AACpE,MAAM,aAAa,GAAG,OAAO,CAAC,sDAAsD,CAAC,CAAC;AACtF,MAAM,0BAA0B,GAAG,OAAO,CAAC,2DAA2D,CAAC,CAAC;AACxG,MAAM,eAAe,GAAG,OAAO,CAAC,gDAAgD,CAAC,CAAC;AAClF,MAAM,OAAO,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAC;AACvD,MAAM,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAC1C,MAAM,SAAS,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;AACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;AACvD,MAAM,WAAW,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;AACzD,eAAe,0BAA0B,CAAC,mBAAmB,EAAE;AAC/D,IAAI,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC;AAChE,IAAI,IAAI,OAAO,CAAC,yBAAyB,EAAE,UAAU,CAAC,CAAC;AACvD,IAAI,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;AACrG,IAAI,IAAI,aAAa,KAAK,WAAW,IAAI,CAAC,QAAQ,EAAE;AACpD,QAAQ,MAAM,IAAI,WAAW,CAAC,SAAS,CAAC;AACxC,YAAY,IAAI,EAAE,kBAAkB,CAAC,cAAc,CAAC,eAAe;AACnE,YAAY,OAAO,EAAE,iDAAiD;AACtE,SAAS,CAAC,CAAC;AACX,KAAK;AACL,IAAI,MAAM,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,GAAG,mBAAmB,CAAC;AACzF,IAAI,IAAI,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC,wBAAwB,EAAE,QAAQ,CAAC,gBAAgB,CAAC,mCAAmC,CAAC,CAAC;AAChI,IAAI,MAAM,IAAI,GAAG,MAAM,IAAI,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;AACvF,IAAI,MAAM,sBAAsB,GAAG,IAAI,yBAAyB,CAAC,kCAAkC,EAAE;AACrG,QAAQ,gBAAgB,EAAE,IAAI,WAAW,CAAC,qCAAqC,EAAE;AACjF,YAAY,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;AACzD,SAAS,CAAC;AACV,KAAK,CAAC,CAAC;AACP,IAAI,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,OAAO,EAAE,WAAW,GAAG,GAAG,MAAM,sBAAsB,CAAC;AAC/L,QAAQ,MAAM,EAAE,IAAI,SAAS,CAAC,uBAAuB,EAAE,UAAU,CAAC,UAAU,CAAC;AAC7E,QAAQ,cAAc,EAAE,IAAI,OAAO,CAAC,qBAAqB,EAAE,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC;AAC5F,KAAK,EAAE;AACP,QAAQ,aAAa,EAAE,WAAW;AAClC,QAAQ,kBAAkB,EAAE;AAC5B,YAAY,QAAQ,EAAE,QAAQ;AAC9B,YAAY,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;AAC5C,SAAS;AACT,QAAQ,QAAQ,EAAE,UAAU,CAAC,gBAAgB;AAC7C,QAAQ,OAAO,EAAE,aAAa;AAC9B,KAAK,CAAC,CAAC;AACP,IAAI,IAAI,OAAO,CAAC,oBAAoB,EAAE;AACtC,QAAQ,aAAa,EAAE,WAAW;AAClC,QAAQ,QAAQ;AAChB,QAAQ,aAAa,EAAE,iBAAiB;AACxC,QAAQ,aAAa;AACrB,KAAK,CAAC,CAAC;AACP,IAAI,IAAI,oBAAoB,EAAE;AAC9B,QAAQ,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE;AACpD,YAAY,GAAG,oBAAoB;AACnC,YAAY,QAAQ;AACpB,YAAY,iBAAiB,EAAE,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE;AAC/E,gBAAgB,UAAU,EAAE,UAAU,CAAC,UAAU;AACjD,gBAAgB,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;AAC7D,gBAAgB,iBAAiB,EAAE,oBAAoB,CAAC,iBAAiB;AACzE,gBAAgB,WAAW,EAAE,oBAAoB,CAAC,WAAW;AAC7D,aAAa,CAAC;AACd,YAAY,aAAa;AACzB,SAAS,CAAC,CAAC;AACX,QAAQ,IAAI,OAAO,CAAC,sBAAsB,GAAG,CAAC;AAC9C,QAAQ,MAAM,IAAI,0BAA0B,CAAC,wBAAwB,GAAG,CAAC;AACzE,QAAQ,OAAO;AACf,YAAY,UAAU,EAAE,IAAI;AAC5B,YAAY,QAAQ,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE;AAC5C,SAAS,CAAC;AACV,KAAK;AACL,IAAI,IAAI,iBAAiB,KAAK,WAAW,EAAE;AAC3C,QAAQ,MAAM,IAAI,WAAW,CAAC,SAAS,CAAC;AACxC,YAAY,IAAI,EAAE,kBAAkB,CAAC,cAAc,CAAC,eAAe;AACnE,YAAY,OAAO,EAAE,qFAAqF;AAC1G,SAAS,CAAC,CAAC;AACX,KAAK;AACL,IAAI,OAAO,IAAI,eAAe,CAAC,eAAe,EAAE;AAChD,QAAQ,aAAa,EAAE,iBAAiB;AACxC,QAAQ,mBAAmB,EAAE,uBAAuB;AACpD,KAAK,CAAC,CAAC;AACP,CAAC;AACD,OAAO,CAAC,0BAA0B,GAAG,0BAA0B;;"}

package/dist/cjs/client/utils/index.js

@@ -0,0 +1,9 @@
+'use strict';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerPasskey = void 0;
+var passkey_1 = require("./passkey");
+Object.defineProperty(exports, "registerPasskey", { enumerable: true, get: function () { return passkey_1.registerPasskey; } });
+//# sourceMappingURL=index.js.map

package/dist/cjs/client/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":["../../../../src/client/utils/index.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.registerPasskey = void 0;\nvar passkey_1 = require(\"./passkey\");\nObject.defineProperty(exports, \"registerPasskey\", { enumerable: true, get: function () { return passkey_1.registerPasskey; } });\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,eAAe,GAAG,KAAK,CAAC,CAAC;AACjC,IAAI,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;AACrC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,iBAAiB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,SAAS,CAAC,eAAe,CAAC,EAAE,EAAE,CAAC;;"}

package/dist/cjs/client/utils/passkey/errors.js

@@ -0,0 +1,180 @@
+'use strict';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handlePasskeyRegistrationError = exports.handlePasskeyAuthenticationError = exports.assertPasskeyError = exports.PasskeyErrorCode = exports.PasskeyError = void 0;
+const utils_1 = require("@aws-amplify/core/internals/utils");
+class PasskeyError extends utils_1.AmplifyError {
+    constructor(params) {
+        super(params);
+        // Hack for making the custom error class work when transpiled to es5
+        // TODO: Delete the following 2 lines after we change the build target to >= es2015
+        this.constructor = PasskeyError;
+        Object.setPrototypeOf(this, PasskeyError.prototype);
+    }
+}
+exports.PasskeyError = PasskeyError;
+var PasskeyErrorCode;
+(function (PasskeyErrorCode) {
+    // not supported
+    PasskeyErrorCode["PasskeyNotSupported"] = "PasskeyNotSupported";
+    // duplicate passkey
+    PasskeyErrorCode["PasskeyAlreadyExists"] = "PasskeyAlreadyExists";
+    // misconfigurations
+    PasskeyErrorCode["InvalidPasskeyRegistrationOptions"] = "InvalidPasskeyRegistrationOptions";
+    PasskeyErrorCode["InvalidPasskeyAuthenticationOptions"] = "InvalidPasskeyAuthenticationOptions";
+    PasskeyErrorCode["RelyingPartyMismatch"] = "RelyingPartyMismatch";
+    // failed credential creation / retrieval
+    PasskeyErrorCode["PasskeyRegistrationFailed"] = "PasskeyRegistrationFailed";
+    PasskeyErrorCode["PasskeyRetrievalFailed"] = "PasskeyRetrievalFailed";
+    // cancel / aborts
+    PasskeyErrorCode["PasskeyRegistrationCanceled"] = "PasskeyRegistrationCanceled";
+    PasskeyErrorCode["PasskeyAuthenticationCanceled"] = "PasskeyAuthenticationCanceled";
+    PasskeyErrorCode["PasskeyOperationAborted"] = "PasskeyOperationAborted";
+})(PasskeyErrorCode = exports.PasskeyErrorCode || (exports.PasskeyErrorCode = {}));
+const notSupportedRecoverySuggestion = 'Passkeys may not be supported on this device. Ensure your application is running in a secure context (HTTPS) and Web Authentication API is supported.';
+const abortOrCancelRecoverySuggestion = 'User may have canceled the ceremony or another interruption has occurred. Check underlying error for details.';
+const misconfigurationRecoverySuggestion = 'Ensure your user pool is configured to support the WEB_AUTHN as an authentication factor.';
+const passkeyErrorMap = {
+    [PasskeyErrorCode.PasskeyNotSupported]: {
+        message: 'Passkeys may not be supported on this device.',
+        recoverySuggestion: notSupportedRecoverySuggestion,
+    },
+    [PasskeyErrorCode.InvalidPasskeyRegistrationOptions]: {
+        message: 'Invalid passkey registration options.',
+        recoverySuggestion: misconfigurationRecoverySuggestion,
+    },
+    [PasskeyErrorCode.InvalidPasskeyAuthenticationOptions]: {
+        message: 'Invalid passkey authentication options.',
+        recoverySuggestion: misconfigurationRecoverySuggestion,
+    },
+    [PasskeyErrorCode.PasskeyRegistrationFailed]: {
+        message: 'Device failed to create passkey.',
+        recoverySuggestion: notSupportedRecoverySuggestion,
+    },
+    [PasskeyErrorCode.PasskeyRetrievalFailed]: {
+        message: 'Device failed to retrieve passkey.',
+        recoverySuggestion: 'Passkeys may not be available on this device. Try an alternative authentication factor like PASSWORD, EMAIL_OTP, or SMS_OTP.',
+    },
+    [PasskeyErrorCode.PasskeyAlreadyExists]: {
+        message: 'Passkey already exists in authenticator.',
+        recoverySuggestion: 'Proceed with existing passkey or try again after deleting the credential.',
+    },
+    [PasskeyErrorCode.PasskeyRegistrationCanceled]: {
+        message: 'Passkey registration ceremony has been canceled.',
+        recoverySuggestion: abortOrCancelRecoverySuggestion,
+    },
+    [PasskeyErrorCode.PasskeyAuthenticationCanceled]: {
+        message: 'Passkey authentication ceremony has been canceled.',
+        recoverySuggestion: abortOrCancelRecoverySuggestion,
+    },
+    [PasskeyErrorCode.PasskeyOperationAborted]: {
+        message: 'Passkey operation has been aborted.',
+        recoverySuggestion: abortOrCancelRecoverySuggestion,
+    },
+    [PasskeyErrorCode.RelyingPartyMismatch]: {
+        message: 'Relying party does not match current domain.',
+        recoverySuggestion: 'Ensure relying party identifier matches current domain.',
+    },
+};
+exports.assertPasskeyError = (0, utils_1.createAssertionFunction)(passkeyErrorMap, PasskeyError);
+/**
+ * Handle Passkey Authentication Errors
+ * https://w3c.github.io/webauthn/#sctn-get-request-exceptions
+ *
+ * @param err unknown
+ * @returns PasskeyError
+ */
+const handlePasskeyAuthenticationError = (err) => {
+    if (err instanceof PasskeyError) {
+        return err;
+    }
+    if (err instanceof Error) {
+        if (err.name === 'NotAllowedError') {
+            const { message, recoverySuggestion } = passkeyErrorMap[PasskeyErrorCode.PasskeyAuthenticationCanceled];
+            return new PasskeyError({
+                name: PasskeyErrorCode.PasskeyAuthenticationCanceled,
+                message,
+                recoverySuggestion,
+                underlyingError: err,
+            });
+        }
+    }
+    return handlePasskeyError(err);
+};
+exports.handlePasskeyAuthenticationError = handlePasskeyAuthenticationError;
+/**
+ * Handle Passkey Registration Errors
+ * https://w3c.github.io/webauthn/#sctn-create-request-exceptions
+ *
+ * @param err unknown
+ * @returns PasskeyError
+ */
+const handlePasskeyRegistrationError = (err) => {
+    if (err instanceof PasskeyError) {
+        return err;
+    }
+    if (err instanceof Error) {
+        // Duplicate Passkey
+        if (err.name === 'InvalidStateError') {
+            const { message, recoverySuggestion } = passkeyErrorMap[PasskeyErrorCode.PasskeyAlreadyExists];
+            return new PasskeyError({
+                name: PasskeyErrorCode.PasskeyAlreadyExists,
+                message,
+                recoverySuggestion,
+                underlyingError: err,
+            });
+        }
+        // User Cancels Ceremony / Generic Catch All
+        if (err.name === 'NotAllowedError') {
+            const { message, recoverySuggestion } = passkeyErrorMap[PasskeyErrorCode.PasskeyRegistrationCanceled];
+            return new PasskeyError({
+                name: PasskeyErrorCode.PasskeyRegistrationCanceled,
+                message,
+                recoverySuggestion,
+                underlyingError: err,
+            });
+        }
+    }
+    return handlePasskeyError(err);
+};
+exports.handlePasskeyRegistrationError = handlePasskeyRegistrationError;
+/**
+ * Handles Overlapping Passkey Errors Between Registration & Authentication
+ * https://w3c.github.io/webauthn/#sctn-create-request-exceptions
+ * https://w3c.github.io/webauthn/#sctn-get-request-exceptions
+ *
+ * @param err unknown
+ * @returns PasskeyError
+ */
+const handlePasskeyError = (err) => {
+    if (err instanceof Error) {
+        // Passkey Operation Aborted
+        if (err.name === 'AbortError') {
+            const { message, recoverySuggestion } = passkeyErrorMap[PasskeyErrorCode.PasskeyOperationAborted];
+            return new PasskeyError({
+                name: PasskeyErrorCode.PasskeyOperationAborted,
+                message,
+                recoverySuggestion,
+                underlyingError: err,
+            });
+        }
+        // Relying Party / Domain Mismatch
+        if (err.name === 'SecurityError') {
+            const { message, recoverySuggestion } = passkeyErrorMap[PasskeyErrorCode.RelyingPartyMismatch];
+            return new PasskeyError({
+                name: PasskeyErrorCode.RelyingPartyMismatch,
+                message,
+                recoverySuggestion,
+                underlyingError: err,
+            });
+        }
+    }
+    return new PasskeyError({
+        name: utils_1.AmplifyErrorCode.Unknown,
+        message: 'An unknown error has occurred.',
+        underlyingError: err,
+    });
+};
+//# sourceMappingURL=errors.js.map

package/dist/cjs/client/utils/passkey/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sources":["../../../../../src/client/utils/passkey/errors.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.handlePasskeyRegistrationError = exports.handlePasskeyAuthenticationError = exports.assertPasskeyError = exports.PasskeyErrorCode = exports.PasskeyError = void 0;\nconst utils_1 = require(\"@aws-amplify/core/internals/utils\");\nclass PasskeyError extends utils_1.AmplifyError {\n    constructor(params) {\n        super(params);\n        // Hack for making the custom error class work when transpiled to es5\n        // TODO: Delete the following 2 lines after we change the build target to >= es2015\n        this.constructor = PasskeyError;\n        Object.setPrototypeOf(this, PasskeyError.prototype);\n    }\n}\nexports.PasskeyError = PasskeyError;\nvar PasskeyErrorCode;\n(function (PasskeyErrorCode) {\n    // not supported\n    PasskeyErrorCode[\"PasskeyNotSupported\"] = \"PasskeyNotSupported\";\n    // duplicate passkey\n    PasskeyErrorCode[\"PasskeyAlreadyExists\"] = \"PasskeyAlreadyExists\";\n    // misconfigurations\n    PasskeyErrorCode[\"InvalidPasskeyRegistrationOptions\"] = \"InvalidPasskeyRegistrationOptions\";\n    PasskeyErrorCode[\"InvalidPasskeyAuthenticationOptions\"] = \"InvalidPasskeyAuthenticationOptions\";\n    PasskeyErrorCode[\"RelyingPartyMismatch\"] = \"RelyingPartyMismatch\";\n    // failed credential creation / retrieval\n    PasskeyErrorCode[\"PasskeyRegistrationFailed\"] = \"PasskeyRegistrationFailed\";\n    PasskeyErrorCode[\"PasskeyRetrievalFailed\"] = \"PasskeyRetrievalFailed\";\n    // cancel / aborts\n    PasskeyErrorCode[\"PasskeyRegistrationCanceled\"] = \"PasskeyRegistrationCanceled\";\n    PasskeyErrorCode[\"PasskeyAuthenticationCanceled\"] = \"PasskeyAuthenticationCanceled\";\n    PasskeyErrorCode[\"PasskeyOperationAborted\"] = \"PasskeyOperationAborted\";\n})(PasskeyErrorCode = exports.PasskeyErrorCode || (exports.PasskeyErrorCode = {}));\nconst notSupportedRecoverySuggestion = 'Passkeys may not be supported on this device. Ensure your application is running in a secure context (HTTPS) and Web Authentication API is supported.';\nconst abortOrCancelRecoverySuggestion = 'User may have canceled the ceremony or another interruption has occurred. Check underlying error for details.';\nconst misconfigurationRecoverySuggestion = 'Ensure your user pool is configured to support the WEB_AUTHN as an authentication factor.';\nconst passkeyErrorMap = {\n    [PasskeyErrorCode.PasskeyNotSupported]: {\n        message: 'Passkeys may not be supported on this device.',\n        recoverySuggestion: notSupportedRecoverySuggestion,\n    },\n    [PasskeyErrorCode.InvalidPasskeyRegistrationOptions]: {\n        message: 'Invalid passkey registration options.',\n        recoverySuggestion: misconfigurationRecoverySuggestion,\n    },\n    [PasskeyErrorCode.InvalidPasskeyAuthenticationOptions]: {\n        message: 'Invalid passkey authentication options.',\n        recoverySuggestion: misconfigurationRecoverySuggestion,\n    },\n    [PasskeyErrorCode.PasskeyRegistrationFailed]: {\n        message: 'Device failed to create passkey.',\n        recoverySuggestion: notSupportedRecoverySuggestion,\n    },\n    [PasskeyErrorCode.PasskeyRetrievalFailed]: {\n        message: 'Device failed to retrieve passkey.',\n        recoverySuggestion: 'Passkeys may not be available on this device. Try an alternative authentication factor like PASSWORD, EMAIL_OTP, or SMS_OTP.',\n    },\n    [PasskeyErrorCode.PasskeyAlreadyExists]: {\n        message: 'Passkey already exists in authenticator.',\n        recoverySuggestion: 'Proceed with existing passkey or try again after deleting the credential.',\n    },\n    [PasskeyErrorCode.PasskeyRegistrationCanceled]: {\n        message: 'Passkey registration ceremony has been canceled.',\n        recoverySuggestion: abortOrCancelRecoverySuggestion,\n    },\n    [PasskeyErrorCode.PasskeyAuthenticationCanceled]: {\n        message: 'Passkey authentication ceremony has been canceled.',\n        recoverySuggestion: abortOrCancelRecoverySuggestion,\n    },\n    [PasskeyErrorCode.PasskeyOperationAborted]: {\n        message: 'Passkey operation has been aborted.',\n        recoverySuggestion: abortOrCancelRecoverySuggestion,\n    },\n    [PasskeyErrorCode.RelyingPartyMismatch]: {\n        message: 'Relying party does not match current domain.',\n        recoverySuggestion: 'Ensure relying party identifier matches current domain.',\n    },\n};\nexports.assertPasskeyError = (0, utils_1.createAssertionFunction)(passkeyErrorMap, PasskeyError);\n/**\n * Handle Passkey Authentication Errors\n * https://w3c.github.io/webauthn/#sctn-get-request-exceptions\n *\n * @param err unknown\n * @returns PasskeyError\n */\nconst handlePasskeyAuthenticationError = (err) => {\n    if (err instanceof PasskeyError) {\n        return err;\n    }\n    if (err instanceof Error) {\n        if (err.name === 'NotAllowedError') {\n            const { message, recoverySuggestion } = passkeyErrorMap[PasskeyErrorCode.PasskeyAuthenticationCanceled];\n            return new PasskeyError({\n                name: PasskeyErrorCode.PasskeyAuthenticationCanceled,\n                message,\n                recoverySuggestion,\n                underlyingError: err,\n            });\n        }\n    }\n    return handlePasskeyError(err);\n};\nexports.handlePasskeyAuthenticationError = handlePasskeyAuthenticationError;\n/**\n * Handle Passkey Registration Errors\n * https://w3c.github.io/webauthn/#sctn-create-request-exceptions\n *\n * @param err unknown\n * @returns PasskeyError\n */\nconst handlePasskeyRegistrationError = (err) => {\n    if (err instanceof PasskeyError) {\n        return err;\n    }\n    if (err instanceof Error) {\n        // Duplicate Passkey\n        if (err.name === 'InvalidStateError') {\n            const { message, recoverySuggestion } = passkeyErrorMap[PasskeyErrorCode.PasskeyAlreadyExists];\n            return new PasskeyError({\n                name: PasskeyErrorCode.PasskeyAlreadyExists,\n                message,\n                recoverySuggestion,\n                underlyingError: err,\n            });\n        }\n        // User Cancels Ceremony / Generic Catch All\n        if (err.name === 'NotAllowedError') {\n            const { message, recoverySuggestion } = passkeyErrorMap[PasskeyErrorCode.PasskeyRegistrationCanceled];\n            return new PasskeyError({\n                name: PasskeyErrorCode.PasskeyRegistrationCanceled,\n                message,\n                recoverySuggestion,\n                underlyingError: err,\n            });\n        }\n    }\n    return handlePasskeyError(err);\n};\nexports.handlePasskeyRegistrationError = handlePasskeyRegistrationError;\n/**\n * Handles Overlapping Passkey Errors Between Registration & Authentication\n * https://w3c.github.io/webauthn/#sctn-create-request-exceptions\n * https://w3c.github.io/webauthn/#sctn-get-request-exceptions\n *\n * @param err unknown\n * @returns PasskeyError\n */\nconst handlePasskeyError = (err) => {\n    if (err instanceof Error) {\n        // Passkey Operation Aborted\n        if (err.name === 'AbortError') {\n            const { message, recoverySuggestion } = passkeyErrorMap[PasskeyErrorCode.PasskeyOperationAborted];\n            return new PasskeyError({\n                name: PasskeyErrorCode.PasskeyOperationAborted,\n                message,\n                recoverySuggestion,\n                underlyingError: err,\n            });\n        }\n        // Relying Party / Domain Mismatch\n        if (err.name === 'SecurityError') {\n            const { message, recoverySuggestion } = passkeyErrorMap[PasskeyErrorCode.RelyingPartyMismatch];\n            return new PasskeyError({\n                name: PasskeyErrorCode.RelyingPartyMismatch,\n                message,\n                recoverySuggestion,\n                underlyingError: err,\n            });\n        }\n    }\n    return new PasskeyError({\n        name: utils_1.AmplifyErrorCode.Unknown,\n        message: 'An unknown error has occurred.',\n        underlyingError: err,\n    });\n};\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,8BAA8B,GAAG,OAAO,CAAC,gCAAgC,GAAG,OAAO,CAAC,kBAAkB,GAAG,OAAO,CAAC,gBAAgB,GAAG,OAAO,CAAC,YAAY,GAAG,KAAK,CAAC,CAAC;AAC1K,MAAM,OAAO,GAAG,OAAO,CAAC,mCAAmC,CAAC,CAAC;AAC7D,MAAM,YAAY,SAAS,OAAO,CAAC,YAAY,CAAC;AAChD,IAAI,WAAW,CAAC,MAAM,EAAE;AACxB,QAAQ,KAAK,CAAC,MAAM,CAAC,CAAC;AACtB;AACA;AACA,QAAQ,IAAI,CAAC,WAAW,GAAG,YAAY,CAAC;AACxC,QAAQ,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;AAC5D,KAAK;AACL,CAAC;AACD,OAAO,CAAC,YAAY,GAAG,YAAY,CAAC;AACpC,IAAI,gBAAgB,CAAC;AACrB,CAAC,UAAU,gBAAgB,EAAE;AAC7B;AACA,IAAI,gBAAgB,CAAC,qBAAqB,CAAC,GAAG,qBAAqB,CAAC;AACpE;AACA,IAAI,gBAAgB,CAAC,sBAAsB,CAAC,GAAG,sBAAsB,CAAC;AACtE;AACA,IAAI,gBAAgB,CAAC,mCAAmC,CAAC,GAAG,mCAAmC,CAAC;AAChG,IAAI,gBAAgB,CAAC,qCAAqC,CAAC,GAAG,qCAAqC,CAAC;AACpG,IAAI,gBAAgB,CAAC,sBAAsB,CAAC,GAAG,sBAAsB,CAAC;AACtE;AACA,IAAI,gBAAgB,CAAC,2BAA2B,CAAC,GAAG,2BAA2B,CAAC;AAChF,IAAI,gBAAgB,CAAC,wBAAwB,CAAC,GAAG,wBAAwB,CAAC;AAC1E;AACA,IAAI,gBAAgB,CAAC,6BAA6B,CAAC,GAAG,6BAA6B,CAAC;AACpF,IAAI,gBAAgB,CAAC,+BAA+B,CAAC,GAAG,+BAA+B,CAAC;AACxF,IAAI,gBAAgB,CAAC,yBAAyB,CAAC,GAAG,yBAAyB,CAAC;AAC5E,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,KAAK,OAAO,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC,CAAC;AACnF,MAAM,8BAA8B,GAAG,uJAAuJ,CAAC;AAC/L,MAAM,+BAA+B,GAAG,+GAA+G,CAAC;AACxJ,MAAM,kCAAkC,GAAG,2FAA2F,CAAC;AACvI,MAAM,eAAe,GAAG;AACxB,IAAI,CAAC,gBAAgB,CAAC,mBAAmB,GAAG;AAC5C,QAAQ,OAAO,EAAE,+CAA+C;AAChE,QAAQ,kBAAkB,EAAE,8BAA8B;AAC1D,KAAK;AACL,IAAI,CAAC,gBAAgB,CAAC,iCAAiC,GAAG;AAC1D,QAAQ,OAAO,EAAE,uCAAuC;AACxD,QAAQ,kBAAkB,EAAE,kCAAkC;AAC9D,KAAK;AACL,IAAI,CAAC,gBAAgB,CAAC,mCAAmC,GAAG;AAC5D,QAAQ,OAAO,EAAE,yCAAyC;AAC1D,QAAQ,kBAAkB,EAAE,kCAAkC;AAC9D,KAAK;AACL,IAAI,CAAC,gBAAgB,CAAC,yBAAyB,GAAG;AAClD,QAAQ,OAAO,EAAE,kCAAkC;AACnD,QAAQ,kBAAkB,EAAE,8BAA8B;AAC1D,KAAK;AACL,IAAI,CAAC,gBAAgB,CAAC,sBAAsB,GAAG;AAC/C,QAAQ,OAAO,EAAE,oCAAoC;AACrD,QAAQ,kBAAkB,EAAE,8HAA8H;AAC1J,KAAK;AACL,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,GAAG;AAC7C,QAAQ,OAAO,EAAE,0CAA0C;AAC3D,QAAQ,kBAAkB,EAAE,2EAA2E;AACvG,KAAK;AACL,IAAI,CAAC,gBAAgB,CAAC,2BAA2B,GAAG;AACpD,QAAQ,OAAO,EAAE,kDAAkD;AACnE,QAAQ,kBAAkB,EAAE,+BAA+B;AAC3D,KAAK;AACL,IAAI,CAAC,gBAAgB,CAAC,6BAA6B,GAAG;AACtD,QAAQ,OAAO,EAAE,oDAAoD;AACrE,QAAQ,kBAAkB,EAAE,+BAA+B;AAC3D,KAAK;AACL,IAAI,CAAC,gBAAgB,CAAC,uBAAuB,GAAG;AAChD,QAAQ,OAAO,EAAE,qCAAqC;AACtD,QAAQ,kBAAkB,EAAE,+BAA+B;AAC3D,KAAK;AACL,IAAI,CAAC,gBAAgB,CAAC,oBAAoB,GAAG;AAC7C,QAAQ,OAAO,EAAE,8CAA8C;AAC/D,QAAQ,kBAAkB,EAAE,yDAAyD;AACrF,KAAK;AACL,CAAC,CAAC;AACF,OAAO,CAAC,kBAAkB,GAAG,IAAI,OAAO,CAAC,uBAAuB,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC;AACjG;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAM,gCAAgC,GAAG,CAAC,GAAG,KAAK;AAClD,IAAI,IAAI,GAAG,YAAY,YAAY,EAAE;AACrC,QAAQ,OAAO,GAAG,CAAC;AACnB,KAAK;AACL,IAAI,IAAI,GAAG,YAAY,KAAK,EAAE;AAC9B,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB,EAAE;AAC5C,YAAY,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,eAAe,CAAC,gBAAgB,CAAC,6BAA6B,CAAC,CAAC;AACpH,YAAY,OAAO,IAAI,YAAY,CAAC;AACpC,gBAAgB,IAAI,EAAE,gBAAgB,CAAC,6BAA6B;AACpE,gBAAgB,OAAO;AACvB,gBAAgB,kBAAkB;AAClC,gBAAgB,eAAe,EAAE,GAAG;AACpC,aAAa,CAAC,CAAC;AACf,SAAS;AACT,KAAK;AACL,IAAI,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC,CAAC;AACF,OAAO,CAAC,gCAAgC,GAAG,gCAAgC,CAAC;AAC5E;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAM,8BAA8B,GAAG,CAAC,GAAG,KAAK;AAChD,IAAI,IAAI,GAAG,YAAY,YAAY,EAAE;AACrC,QAAQ,OAAO,GAAG,CAAC;AACnB,KAAK;AACL,IAAI,IAAI,GAAG,YAAY,KAAK,EAAE;AAC9B;AACA,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,mBAAmB,EAAE;AAC9C,YAAY,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,eAAe,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;AAC3G,YAAY,OAAO,IAAI,YAAY,CAAC;AACpC,gBAAgB,IAAI,EAAE,gBAAgB,CAAC,oBAAoB;AAC3D,gBAAgB,OAAO;AACvB,gBAAgB,kBAAkB;AAClC,gBAAgB,eAAe,EAAE,GAAG;AACpC,aAAa,CAAC,CAAC;AACf,SAAS;AACT;AACA,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB,EAAE;AAC5C,YAAY,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,eAAe,CAAC,gBAAgB,CAAC,2BAA2B,CAAC,CAAC;AAClH,YAAY,OAAO,IAAI,YAAY,CAAC;AACpC,gBAAgB,IAAI,EAAE,gBAAgB,CAAC,2BAA2B;AAClE,gBAAgB,OAAO;AACvB,gBAAgB,kBAAkB;AAClC,gBAAgB,eAAe,EAAE,GAAG;AACpC,aAAa,CAAC,CAAC;AACf,SAAS;AACT,KAAK;AACL,IAAI,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC,CAAC;AACF,OAAO,CAAC,8BAA8B,GAAG,8BAA8B,CAAC;AACxE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAM,kBAAkB,GAAG,CAAC,GAAG,KAAK;AACpC,IAAI,IAAI,GAAG,YAAY,KAAK,EAAE;AAC9B;AACA,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE;AACvC,YAAY,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,eAAe,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;AAC9G,YAAY,OAAO,IAAI,YAAY,CAAC;AACpC,gBAAgB,IAAI,EAAE,gBAAgB,CAAC,uBAAuB;AAC9D,gBAAgB,OAAO;AACvB,gBAAgB,kBAAkB;AAClC,gBAAgB,eAAe,EAAE,GAAG;AACpC,aAAa,CAAC,CAAC;AACf,SAAS;AACT;AACA,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,eAAe,EAAE;AAC1C,YAAY,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,eAAe,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;AAC3G,YAAY,OAAO,IAAI,YAAY,CAAC;AACpC,gBAAgB,IAAI,EAAE,gBAAgB,CAAC,oBAAoB;AAC3D,gBAAgB,OAAO;AACvB,gBAAgB,kBAAkB;AAClC,gBAAgB,eAAe,EAAE,GAAG;AACpC,aAAa,CAAC,CAAC;AACf,SAAS;AACT,KAAK;AACL,IAAI,OAAO,IAAI,YAAY,CAAC;AAC5B,QAAQ,IAAI,EAAE,OAAO,CAAC,gBAAgB,CAAC,OAAO;AAC9C,QAAQ,OAAO,EAAE,gCAAgC;AACjD,QAAQ,eAAe,EAAE,GAAG;AAC5B,KAAK,CAAC,CAAC;AACP,CAAC;;"}

package/dist/cjs/client/utils/passkey/getIsPasskeySupported.js

@@ -0,0 +1,20 @@
+'use strict';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getIsPasskeySupported = void 0;
+const utils_1 = require("@aws-amplify/core/internals/utils");
+/**
+ * Determines if passkey is supported in current context
+ * Will return false if executed in non-secure context
+ * @returns boolean
+ */
+const getIsPasskeySupported = () => {
+    return ((0, utils_1.isBrowser)() &&
+        window.isSecureContext &&
+        'credentials' in navigator &&
+        typeof window.PublicKeyCredential === 'function');
+};
+exports.getIsPasskeySupported = getIsPasskeySupported;
+//# sourceMappingURL=getIsPasskeySupported.js.map

package/dist/cjs/client/utils/passkey/getIsPasskeySupported.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getIsPasskeySupported.js","sources":["../../../../../src/client/utils/passkey/getIsPasskeySupported.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.getIsPasskeySupported = void 0;\nconst utils_1 = require(\"@aws-amplify/core/internals/utils\");\n/**\n * Determines if passkey is supported in current context\n * Will return false if executed in non-secure context\n * @returns boolean\n */\nconst getIsPasskeySupported = () => {\n    return ((0, utils_1.isBrowser)() &&\n        window.isSecureContext &&\n        'credentials' in navigator &&\n        typeof window.PublicKeyCredential === 'function');\n};\nexports.getIsPasskeySupported = getIsPasskeySupported;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,qBAAqB,GAAG,KAAK,CAAC,CAAC;AACvC,MAAM,OAAO,GAAG,OAAO,CAAC,mCAAmC,CAAC,CAAC;AAC7D;AACA;AACA;AACA;AACA;AACA,MAAM,qBAAqB,GAAG,MAAM;AACpC,IAAI,QAAQ,IAAI,OAAO,CAAC,SAAS,GAAG;AACpC,QAAQ,MAAM,CAAC,eAAe;AAC9B,QAAQ,aAAa,IAAI,SAAS;AAClC,QAAQ,OAAO,MAAM,CAAC,mBAAmB,KAAK,UAAU,EAAE;AAC1D,CAAC,CAAC;AACF,OAAO,CAAC,qBAAqB,GAAG,qBAAqB;;"}

package/dist/cjs/client/utils/passkey/getIsPasskeySupported.native.js

@@ -0,0 +1,12 @@
+'use strict';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getIsPasskeySupported = void 0;
+const utils_1 = require("@aws-amplify/core/internals/utils");
+const getIsPasskeySupported = () => {
+    throw new utils_1.PlatformNotSupportedError();
+};
+exports.getIsPasskeySupported = getIsPasskeySupported;
+//# sourceMappingURL=getIsPasskeySupported.native.js.map

package/dist/cjs/client/utils/passkey/getIsPasskeySupported.native.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getIsPasskeySupported.native.js","sources":["../../../../../src/client/utils/passkey/getIsPasskeySupported.native.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.getIsPasskeySupported = void 0;\nconst utils_1 = require(\"@aws-amplify/core/internals/utils\");\nconst getIsPasskeySupported = () => {\n    throw new utils_1.PlatformNotSupportedError();\n};\nexports.getIsPasskeySupported = getIsPasskeySupported;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,qBAAqB,GAAG,KAAK,CAAC,CAAC;AACvC,MAAM,OAAO,GAAG,OAAO,CAAC,mCAAmC,CAAC,CAAC;AAC7D,MAAM,qBAAqB,GAAG,MAAM;AACpC,IAAI,MAAM,IAAI,OAAO,CAAC,yBAAyB,EAAE,CAAC;AAClD,CAAC,CAAC;AACF,OAAO,CAAC,qBAAqB,GAAG,qBAAqB;;"}

package/dist/cjs/client/utils/passkey/getPasskey.js

@@ -0,0 +1,27 @@
+'use strict';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getPasskey = void 0;
+const errors_1 = require("./errors");
+const getIsPasskeySupported_1 = require("./getIsPasskeySupported");
+const serde_1 = require("./serde");
+const types_1 = require("./types");
+const getPasskey = async (input) => {
+    try {
+        const isPasskeySupported = (0, getIsPasskeySupported_1.getIsPasskeySupported)();
+        (0, errors_1.assertPasskeyError)(isPasskeySupported, errors_1.PasskeyErrorCode.PasskeyNotSupported);
+        const passkeyGetOptions = (0, serde_1.deserializeJsonToPkcGetOptions)(input);
+        const credential = await navigator.credentials.get({
+            publicKey: passkeyGetOptions,
+        });
+        (0, types_1.assertCredentialIsPkcWithAuthenticatorAssertionResponse)(credential);
+        return (0, serde_1.serializePkcWithAssertionToJson)(credential);
+    }
+    catch (err) {
+        throw (0, errors_1.handlePasskeyAuthenticationError)(err);
+    }
+};
+exports.getPasskey = getPasskey;
+//# sourceMappingURL=getPasskey.js.map

package/dist/cjs/client/utils/passkey/getPasskey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getPasskey.js","sources":["../../../../../src/client/utils/passkey/getPasskey.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.getPasskey = void 0;\nconst errors_1 = require(\"./errors\");\nconst getIsPasskeySupported_1 = require(\"./getIsPasskeySupported\");\nconst serde_1 = require(\"./serde\");\nconst types_1 = require(\"./types\");\nconst getPasskey = async (input) => {\n    try {\n        const isPasskeySupported = (0, getIsPasskeySupported_1.getIsPasskeySupported)();\n        (0, errors_1.assertPasskeyError)(isPasskeySupported, errors_1.PasskeyErrorCode.PasskeyNotSupported);\n        const passkeyGetOptions = (0, serde_1.deserializeJsonToPkcGetOptions)(input);\n        const credential = await navigator.credentials.get({\n            publicKey: passkeyGetOptions,\n        });\n        (0, types_1.assertCredentialIsPkcWithAuthenticatorAssertionResponse)(credential);\n        return (0, serde_1.serializePkcWithAssertionToJson)(credential);\n    }\n    catch (err) {\n        throw (0, errors_1.handlePasskeyAuthenticationError)(err);\n    }\n};\nexports.getPasskey = getPasskey;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,CAAC;AAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACrC,MAAM,uBAAuB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;AACnE,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;AACnC,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;AACnC,MAAM,UAAU,GAAG,OAAO,KAAK,KAAK;AACpC,IAAI,IAAI;AACR,QAAQ,MAAM,kBAAkB,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC,qBAAqB,GAAG,CAAC;AACxF,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,QAAQ,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;AAC5G,QAAQ,MAAM,iBAAiB,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;AACrF,QAAQ,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC;AAC3D,YAAY,SAAS,EAAE,iBAAiB;AACxC,SAAS,CAAC,CAAC;AACX,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,uDAAuD,EAAE,UAAU,CAAC,CAAC;AACzF,QAAQ,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,+BAA+B,EAAE,UAAU,CAAC,CAAC;AACxE,KAAK;AACL,IAAI,OAAO,GAAG,EAAE;AAChB,QAAQ,MAAM,IAAI,QAAQ,CAAC,gCAAgC,EAAE,GAAG,CAAC,CAAC;AAClE,KAAK;AACL,CAAC,CAAC;AACF,OAAO,CAAC,UAAU,GAAG,UAAU;;"}

package/dist/cjs/client/utils/passkey/getPasskey.native.js

@@ -0,0 +1,12 @@
+'use strict';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getPasskey = void 0;
+const utils_1 = require("@aws-amplify/core/internals/utils");
+const getPasskey = async () => {
+    throw new utils_1.PlatformNotSupportedError();
+};
+exports.getPasskey = getPasskey;
+//# sourceMappingURL=getPasskey.native.js.map

package/dist/cjs/client/utils/passkey/getPasskey.native.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getPasskey.native.js","sources":["../../../../../src/client/utils/passkey/getPasskey.native.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.getPasskey = void 0;\nconst utils_1 = require(\"@aws-amplify/core/internals/utils\");\nconst getPasskey = async () => {\n    throw new utils_1.PlatformNotSupportedError();\n};\nexports.getPasskey = getPasskey;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,CAAC;AAC5B,MAAM,OAAO,GAAG,OAAO,CAAC,mCAAmC,CAAC,CAAC;AAC7D,MAAM,UAAU,GAAG,YAAY;AAC/B,IAAI,MAAM,IAAI,OAAO,CAAC,yBAAyB,EAAE,CAAC;AAClD,CAAC,CAAC;AACF,OAAO,CAAC,UAAU,GAAG,UAAU;;"}

package/dist/cjs/client/utils/passkey/index.js

@@ -0,0 +1,11 @@
+'use strict';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getPasskey = exports.registerPasskey = void 0;
+var registerPasskey_1 = require("./registerPasskey");
+Object.defineProperty(exports, "registerPasskey", { enumerable: true, get: function () { return registerPasskey_1.registerPasskey; } });
+var getPasskey_1 = require("./getPasskey");
+Object.defineProperty(exports, "getPasskey", { enumerable: true, get: function () { return getPasskey_1.getPasskey; } });
+//# sourceMappingURL=index.js.map

package/dist/cjs/client/utils/passkey/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":["../../../../../src/client/utils/passkey/index.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.getPasskey = exports.registerPasskey = void 0;\nvar registerPasskey_1 = require(\"./registerPasskey\");\nObject.defineProperty(exports, \"registerPasskey\", { enumerable: true, get: function () { return registerPasskey_1.registerPasskey; } });\nvar getPasskey_1 = require(\"./getPasskey\");\nObject.defineProperty(exports, \"getPasskey\", { enumerable: true, get: function () { return getPasskey_1.getPasskey; } });\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,eAAe,GAAG,KAAK,CAAC,CAAC;AACtD,IAAI,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;AACrD,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,iBAAiB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,iBAAiB,CAAC,eAAe,CAAC,EAAE,EAAE,CAAC,CAAC;AACxI,IAAI,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;AAC3C,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,YAAY,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;;"}

package/dist/cjs/client/utils/passkey/registerPasskey.js

@@ -0,0 +1,32 @@
+'use strict';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerPasskey = void 0;
+const types_1 = require("./types");
+const serde_1 = require("./serde");
+const errors_1 = require("./errors");
+const getIsPasskeySupported_1 = require("./getIsPasskeySupported");
+/**
+ * Registers a new passkey for user
+ * @param input - PasskeyCreateOptionsJson
+ * @returns serialized PasskeyCreateResult
+ */
+const registerPasskey = async (input) => {
+    try {
+        const isPasskeySupported = (0, getIsPasskeySupported_1.getIsPasskeySupported)();
+        (0, errors_1.assertPasskeyError)(isPasskeySupported, errors_1.PasskeyErrorCode.PasskeyNotSupported);
+        const passkeyCreationOptions = (0, serde_1.deserializeJsonToPkcCreationOptions)(input);
+        const credential = await navigator.credentials.create({
+            publicKey: passkeyCreationOptions,
+        });
+        (0, types_1.assertCredentialIsPkcWithAuthenticatorAttestationResponse)(credential);
+        return (0, serde_1.serializePkcWithAttestationToJson)(credential);
+    }
+    catch (err) {
+        throw (0, errors_1.handlePasskeyRegistrationError)(err);
+    }
+};
+exports.registerPasskey = registerPasskey;
+//# sourceMappingURL=registerPasskey.js.map

package/dist/cjs/client/utils/passkey/registerPasskey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registerPasskey.js","sources":["../../../../../src/client/utils/passkey/registerPasskey.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.registerPasskey = void 0;\nconst types_1 = require(\"./types\");\nconst serde_1 = require(\"./serde\");\nconst errors_1 = require(\"./errors\");\nconst getIsPasskeySupported_1 = require(\"./getIsPasskeySupported\");\n/**\n * Registers a new passkey for user\n * @param input - PasskeyCreateOptionsJson\n * @returns serialized PasskeyCreateResult\n */\nconst registerPasskey = async (input) => {\n    try {\n        const isPasskeySupported = (0, getIsPasskeySupported_1.getIsPasskeySupported)();\n        (0, errors_1.assertPasskeyError)(isPasskeySupported, errors_1.PasskeyErrorCode.PasskeyNotSupported);\n        const passkeyCreationOptions = (0, serde_1.deserializeJsonToPkcCreationOptions)(input);\n        const credential = await navigator.credentials.create({\n            publicKey: passkeyCreationOptions,\n        });\n        (0, types_1.assertCredentialIsPkcWithAuthenticatorAttestationResponse)(credential);\n        return (0, serde_1.serializePkcWithAttestationToJson)(credential);\n    }\n    catch (err) {\n        throw (0, errors_1.handlePasskeyRegistrationError)(err);\n    }\n};\nexports.registerPasskey = registerPasskey;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,eAAe,GAAG,KAAK,CAAC,CAAC;AACjC,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;AACnC,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;AACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AACrC,MAAM,uBAAuB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;AACnE;AACA;AACA;AACA;AACA;AACA,MAAM,eAAe,GAAG,OAAO,KAAK,KAAK;AACzC,IAAI,IAAI;AACR,QAAQ,MAAM,kBAAkB,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC,qBAAqB,GAAG,CAAC;AACxF,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,QAAQ,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;AAC5G,QAAQ,MAAM,sBAAsB,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;AAC/F,QAAQ,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC;AAC9D,YAAY,SAAS,EAAE,sBAAsB;AAC7C,SAAS,CAAC,CAAC;AACX,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,yDAAyD,EAAE,UAAU,CAAC,CAAC;AAC3F,QAAQ,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,iCAAiC,EAAE,UAAU,CAAC,CAAC;AAC1E,KAAK;AACL,IAAI,OAAO,GAAG,EAAE;AAChB,QAAQ,MAAM,IAAI,QAAQ,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;AAChE,KAAK;AACL,CAAC,CAAC;AACF,OAAO,CAAC,eAAe,GAAG,eAAe;;"}

package/dist/cjs/client/utils/passkey/registerPasskey.native.js

@@ -0,0 +1,12 @@
+'use strict';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerPasskey = void 0;
+const utils_1 = require("@aws-amplify/core/internals/utils");
+const registerPasskey = async () => {
+    throw new utils_1.PlatformNotSupportedError();
+};
+exports.registerPasskey = registerPasskey;
+//# sourceMappingURL=registerPasskey.native.js.map

package/dist/cjs/client/utils/passkey/registerPasskey.native.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registerPasskey.native.js","sources":["../../../../../src/client/utils/passkey/registerPasskey.native.ts"],"sourcesContent":["\"use strict\";\n// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n// SPDX-License-Identifier: Apache-2.0\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.registerPasskey = void 0;\nconst utils_1 = require(\"@aws-amplify/core/internals/utils\");\nconst registerPasskey = async () => {\n    throw new utils_1.PlatformNotSupportedError();\n};\nexports.registerPasskey = registerPasskey;\n"],"names":[],"mappings":";;AACA;AACA;AACA,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,OAAO,CAAC,eAAe,GAAG,KAAK,CAAC,CAAC;AACjC,MAAM,OAAO,GAAG,OAAO,CAAC,mCAAmC,CAAC,CAAC;AAC7D,MAAM,eAAe,GAAG,YAAY;AACpC,IAAI,MAAM,IAAI,OAAO,CAAC,yBAAyB,EAAE,CAAC;AAClD,CAAC,CAAC;AACF,OAAO,CAAC,eAAe,GAAG,eAAe;;"}

package/dist/cjs/client/utils/passkey/serde.js

@@ -0,0 +1,106 @@
+'use strict';
+
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.serializePkcWithAssertionToJson = exports.deserializeJsonToPkcGetOptions = exports.serializePkcWithAttestationToJson = exports.deserializeJsonToPkcCreationOptions = void 0;
+const convert_1 = require("../../../foundation/convert");
+/**
+ * Deserializes Public Key Credential Creation Options JSON
+ * @param input PasskeyCreateOptionsJson
+ * @returns PublicKeyCredentialCreationOptions
+ */
+const deserializeJsonToPkcCreationOptions = (input) => {
+    const userIdBuffer = (0, convert_1.convertBase64UrlToArrayBuffer)(input.user.id);
+    const challengeBuffer = (0, convert_1.convertBase64UrlToArrayBuffer)(input.challenge);
+    const excludeCredentialsWithBuffer = (input.excludeCredentials || []).map(excludeCred => ({
+        ...excludeCred,
+        id: (0, convert_1.convertBase64UrlToArrayBuffer)(excludeCred.id),
+    }));
+    return {
+        ...input,
+        excludeCredentials: excludeCredentialsWithBuffer,
+        challenge: challengeBuffer,
+        user: {
+            ...input.user,
+            id: userIdBuffer,
+        },
+    };
+};
+exports.deserializeJsonToPkcCreationOptions = deserializeJsonToPkcCreationOptions;
+/**
+ * Serializes a Public Key Credential With Attestation to JSON
+ * @param input PasskeyCreateResult
+ * @returns PasskeyCreateResultJson
+ */
+const serializePkcWithAttestationToJson = (input) => {
+    const response = {
+        clientDataJSON: (0, convert_1.convertArrayBufferToBase64Url)(input.response.clientDataJSON),
+        attestationObject: (0, convert_1.convertArrayBufferToBase64Url)(input.response.attestationObject),
+        transports: input.response.getTransports(),
+        publicKeyAlgorithm: input.response.getPublicKeyAlgorithm(),
+        authenticatorData: (0, convert_1.convertArrayBufferToBase64Url)(input.response.getAuthenticatorData()),
+    };
+    const publicKey = input.response.getPublicKey();
+    if (publicKey) {
+        response.publicKey = (0, convert_1.convertArrayBufferToBase64Url)(publicKey);
+    }
+    const resultJson = {
+        type: input.type,
+        id: input.id,
+        rawId: (0, convert_1.convertArrayBufferToBase64Url)(input.rawId),
+        clientExtensionResults: input.getClientExtensionResults(),
+        response,
+    };
+    if (input.authenticatorAttachment) {
+        resultJson.authenticatorAttachment = input.authenticatorAttachment;
+    }
+    return resultJson;
+};
+exports.serializePkcWithAttestationToJson = serializePkcWithAttestationToJson;
+/**
+ * Deserializes Public Key Credential Get Options JSON
+ * @param input PasskeyGetOptionsJson
+ * @returns PublicKeyCredentialRequestOptions
+ */
+const deserializeJsonToPkcGetOptions = (input) => {
+    const challengeBuffer = (0, convert_1.convertBase64UrlToArrayBuffer)(input.challenge);
+    const allowedCredentialsWithBuffer = (input.allowCredentials || []).map(allowedCred => ({
+        ...allowedCred,
+        id: (0, convert_1.convertBase64UrlToArrayBuffer)(allowedCred.id),
+    }));
+    return {
+        ...input,
+        challenge: challengeBuffer,
+        allowCredentials: allowedCredentialsWithBuffer,
+    };
+};
+exports.deserializeJsonToPkcGetOptions = deserializeJsonToPkcGetOptions;
+/**
+ * Serializes a Public Key Credential With Attestation to JSON
+ * @param input PasskeyGetResult
+ * @returns PasskeyGetResultJson
+ */
+const serializePkcWithAssertionToJson = (input) => {
+    const response = {
+        clientDataJSON: (0, convert_1.convertArrayBufferToBase64Url)(input.response.clientDataJSON),
+        authenticatorData: (0, convert_1.convertArrayBufferToBase64Url)(input.response.authenticatorData),
+        signature: (0, convert_1.convertArrayBufferToBase64Url)(input.response.signature),
+    };
+    if (input.response.userHandle) {
+        response.userHandle = (0, convert_1.convertArrayBufferToBase64Url)(input.response.userHandle);
+    }
+    const resultJson = {
+        id: input.id,
+        rawId: (0, convert_1.convertArrayBufferToBase64Url)(input.rawId),
+        type: input.type,
+        clientExtensionResults: input.getClientExtensionResults(),
+        response,
+    };
+    if (input.authenticatorAttachment) {
+        resultJson.authenticatorAttachment = input.authenticatorAttachment;
+    }
+    return resultJson;
+};
+exports.serializePkcWithAssertionToJson = serializePkcWithAssertionToJson;
+//# sourceMappingURL=serde.js.map