@dfns/sdk-browser 0.8.28 → 0.8.30

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dfns/sdk-browser",
-  "version": "0.8.28",
+  "version": "0.8.30",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/dfns/dfns-sdk-ts.git",
@@ -11,7 +11,7 @@
     "cross-fetch": "^3.1.6"
   },
   "peerDependencies": {
-    "@dfns/sdk": "0.8.28"
+    "@dfns/sdk": "0.8.30"
   },
   "main": "./index.js",
   "type": "commonjs",

package/signers/key.d.ts

@@ -6,5 +6,5 @@ export declare class BrowserKeySigner implements CredentialSigner<KeyAssertion>,
         keyPair: CryptoKeyPair;
     });
     create(challenge: UserRegistrationChallenge): Promise<KeyAttestation>;
-    sign(challenge: UserActionChallenge): Promise<KeyAssertion>;
+    sign(challenge: Pick<UserActionChallenge, 'challenge' | 'allowCredentials'>): Promise<KeyAssertion>;
 }

package/signers/key.js

@@ -52,9 +52,11 @@ class BrowserKeySigner {
         if (credId === undefined || credId === '') {
             throw new sdk_1.DfnsError(-1, 'credId is needed to sign');
         }
-        const allowedCredId = challenge.allowCredentials.key.map((cred) => cred.id);
-        if (!allowedCredId.includes(credId)) {
-            throw new sdk_1.DfnsError(-1, `${credId} does not match allowed credentials: ${allowedCredId}`);
+        if (challenge.allowCredentials) {
+            const allowedCredId = challenge.allowCredentials.key.map((cred) => cred.id);
+            if (!allowedCredId.includes(credId)) {
+                throw new sdk_1.DfnsError(-1, `${credId} does not match allowed credentials: ${allowedCredId}`);
+            }
         }
         const clientData = JSON.stringify({
             type: 'key.get',

package/signers/webauthn.js

@@ -16,7 +16,7 @@ class WebAuthnSigner {
         const response = await navigator.credentials.get({
             publicKey: {
                 challenge: buffer_1.Buffer.from(challenge.challenge),
-                allowCredentials: challenge.allowCredentials.webauthn.map(({ id, type }) => ({
+                allowCredentials: challenge.allowCredentials?.webauthn.map(({ id, type }) => ({
                     id: (0, utils_1.fromBase64Url)(id).buffer,
                     type,
                 })),