@breeztech/breez-sdk-spark-react-native 0.21.0 → 0.21.1

package/ios/PasskeyPRFHelper.h

@@ -0,0 +1,52 @@
+#import <Foundation/Foundation.h>
+#import <AuthenticationServices/AuthenticationServices.h>
+
+NS_ASSUME_NONNULL_BEGIN
+
+/// ObjC helper for passkey PRF operations.
+///
+/// The PRF types are marked NS_REFINED_FOR_SWIFT in the iOS/macOS SDK, which makes
+/// their initializers inaccessible from Swift. This helper bridges the gap.
+API_AVAILABLE(ios(18.0), macos(15.0))
+@interface PasskeyPRFHelper : NSObject
+
+/// Set PRF assertion input (with salt) on an assertion request.
++ (void)setAssertionPRFOnRequest:(ASAuthorizationPlatformPublicKeyCredentialAssertionRequest *)request
+                        withSalt:(NSData *)salt;
+
+/// Set PRF assertion input (with up to two salts) on an assertion request.
+/// Pass nil for `salt2` to skip the second derivation.
++ (void)setAssertionPRFOnRequest:(ASAuthorizationPlatformPublicKeyCredentialAssertionRequest *)request
+                       withSalt1:(NSData *)salt1
+                           salt2:(NSData * _Nullable)salt2;
+
+/// Set PRF registration input on a registration request, support-only.
++ (void)setRegistrationPRFOnRequest:(ASAuthorizationPlatformPublicKeyCredentialRegistrationRequest *)request;
+
+/// Set PRF registration input asking the create ceremony to evaluate up
+/// to two salts. Pass nil for `salt1` to only probe support, nil for
+/// `salt2` to evaluate one.
++ (void)setRegistrationPRFOnRequest:(ASAuthorizationPlatformPublicKeyCredentialRegistrationRequest *)request
+                          withSalt1:(NSData * _Nullable)salt1
+                              salt2:(NSData * _Nullable)salt2;
+
+/// Extract the PRF output (first salt result) from a registration
+/// credential. Returns nil when the authenticator evaluated nothing at
+/// create, which is the pre-eval-at-create behavior.
++ (NSData * _Nullable)extractPRFOutputFromRegistration:(ASAuthorizationPlatformPublicKeyCredentialRegistration *)credential;
+
+/// Extract the second PRF output from a registration credential.
++ (NSData * _Nullable)extractSecondPRFOutputFromRegistration:(ASAuthorizationPlatformPublicKeyCredentialRegistration *)credential;
+
+/// Extract the PRF output (first salt result) from an assertion credential.
+/// Returns nil if PRF output is not available.
++ (NSData * _Nullable)extractPRFOutputFromAssertion:(ASAuthorizationPlatformPublicKeyCredentialAssertion *)credential;
+
+/// Extract the second PRF output (second salt result) from an assertion
+/// credential. Returns nil if PRF output is not available, or if no
+/// second salt was provided in the request.
++ (NSData * _Nullable)extractSecondPRFOutputFromAssertion:(ASAuthorizationPlatformPublicKeyCredentialAssertion *)credential;
+
+@end
+
+NS_ASSUME_NONNULL_END

package/ios/PasskeyPRFHelper.m

@@ -0,0 +1,73 @@
+#import "PasskeyPRFHelper.h"
+
+API_AVAILABLE(ios(18.0), macos(15.0))
+@implementation PasskeyPRFHelper
+
++ (void)setAssertionPRFOnRequest:(ASAuthorizationPlatformPublicKeyCredentialAssertionRequest *)request
+                        withSalt:(NSData *)salt {
+    [self setAssertionPRFOnRequest:request withSalt1:salt salt2:nil];
+}
+
++ (void)setAssertionPRFOnRequest:(ASAuthorizationPlatformPublicKeyCredentialAssertionRequest *)request
+                       withSalt1:(NSData *)salt1
+                           salt2:(NSData * _Nullable)salt2 {
+    ASAuthorizationPublicKeyCredentialPRFAssertionInputValues *values =
+        [[ASAuthorizationPublicKeyCredentialPRFAssertionInputValues alloc] initWithSaltInput1:salt1 saltInput2:salt2];
+    ASAuthorizationPublicKeyCredentialPRFAssertionInput *input =
+        [[ASAuthorizationPublicKeyCredentialPRFAssertionInput alloc] initWithInputValues:values perCredentialInputValues:nil];
+    request.prf = input;
+}
+
++ (void)setRegistrationPRFOnRequest:(ASAuthorizationPlatformPublicKeyCredentialRegistrationRequest *)request {
+    [self setRegistrationPRFOnRequest:request withSalt1:nil salt2:nil];
+}
+
++ (void)setRegistrationPRFOnRequest:(ASAuthorizationPlatformPublicKeyCredentialRegistrationRequest *)request
+                          withSalt1:(NSData * _Nullable)salt1
+                              salt2:(NSData * _Nullable)salt2 {
+    // nil salt1 asks only whether PRF is supported. Non-nil asks the
+    // create ceremony to evaluate it too, which removes the assertion
+    // that would otherwise follow.
+    ASAuthorizationPublicKeyCredentialPRFAssertionInputValues *values = nil;
+    if (salt1 != nil) {
+        values = [[ASAuthorizationPublicKeyCredentialPRFAssertionInputValues alloc]
+                     initWithSaltInput1:salt1 saltInput2:salt2];
+    }
+    ASAuthorizationPublicKeyCredentialPRFRegistrationInput *input =
+        [[ASAuthorizationPublicKeyCredentialPRFRegistrationInput alloc] initWithInputValues:values];
+    request.prf = input;
+}
+
++ (NSData * _Nullable)extractPRFOutputFromRegistration:(ASAuthorizationPlatformPublicKeyCredentialRegistration *)credential {
+    ASAuthorizationPublicKeyCredentialPRFRegistrationOutput *output = credential.prf;
+    if (output == nil) {
+        return nil;
+    }
+    return output.first;
+}
+
++ (NSData * _Nullable)extractSecondPRFOutputFromRegistration:(ASAuthorizationPlatformPublicKeyCredentialRegistration *)credential {
+    ASAuthorizationPublicKeyCredentialPRFRegistrationOutput *output = credential.prf;
+    if (output == nil) {
+        return nil;
+    }
+    return output.second;
+}
+
++ (NSData * _Nullable)extractPRFOutputFromAssertion:(ASAuthorizationPlatformPublicKeyCredentialAssertion *)credential {
+    ASAuthorizationPublicKeyCredentialPRFAssertionOutput *output = credential.prf;
+    if (output == nil) {
+        return nil;
+    }
+    return output.first;
+}
+
++ (NSData * _Nullable)extractSecondPRFOutputFromAssertion:(ASAuthorizationPlatformPublicKeyCredentialAssertion *)credential {
+    ASAuthorizationPublicKeyCredentialPRFAssertionOutput *output = credential.prf;
+    if (output == nil) {
+        return nil;
+    }
+    return output.second;
+}
+
+@end

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@breeztech/breez-sdk-spark-react-native",
-  "version": "0.21.0",
+  "version": "0.21.1",
   "description": "React Native bindings for the Breez SDK - Nodeless (Spark Implementation)",
   "source": "./src/index.tsx",
   "main": "./lib/commonjs/index.js",
@@ -37,6 +37,8 @@
     "cpp",
     "*.podspec",
     "app.plugin.js",
+    "passkey-prf-provider.js",
+    "passkey-prf-provider.d.ts",
     "react-native.config.js",
     "swift",
     "scripts",
@@ -209,7 +211,7 @@
     "version": "0.49.0"
   },
   "checksums": {
-    "android": "ae83553d8bec3229c120d13ad13850715d426c80fa6b255bf1d1ecd8c9beb895",
-    "ios": "0f9ff4edda8e2c8147f2f2bbda79e07458f9180774edcf34e59661586951e2f4"
+    "android": "79713a56bab0aa1f9071709780051816438b5d55cca0574b4748f79e9056655d",
+    "ios": "2f84c07585c8be34dcbe324e594bf4d9351cbca3e6c8e666f9b6cfa711646240"
   }
 }

package/passkey-prf-provider.d.ts

@@ -0,0 +1 @@
+export * from './lib/typescript/commonjs/src/passkey-prf-provider';

package/passkey-prf-provider.js

@@ -0,0 +1,5 @@
+// Root shim so `@breeztech/breez-sdk-spark-react-native/passkey-prf-provider`
+// resolves on React Native versions whose Metro ignores package `exports`
+// (RN < 0.79, which the package still supports). Metro versions that honour
+// `exports` map the subpath to lib/ directly and never read this file.
+module.exports = require('./lib/commonjs/passkey-prf-provider.js');