@dfns/sdk-keysigner 0.3.3 → 0.4.0-alpha.1

package/index.d.ts

@@ -1,4 +1,4 @@
-import { CredentialSigner, KeyAssertion } from '@dfns/sdk';
+import { CredentialSigner, KeyAssertion, AllowCredential } from '@dfns/sdk';
 export declare class AsymmetricKeySigner implements CredentialSigner<KeyAssertion> {
     private options;
     constructor(options: {
@@ -8,17 +8,8 @@ export declare class AsymmetricKeySigner implements CredentialSigner<KeyAssertio
         crossOrigin?: boolean;
         algorithm?: string;
     });
-    sign(challenge: string): Promise<KeyAssertion>;
-}
-export declare class BrowserKeySigner implements CredentialSigner<KeyAssertion> {
-    private options;
-    constructor(options: {
-        privateKey: CryptoKey;
-        credId: string;
-        appOrigin: string;
-        crossOrigin?: boolean;
-    });
-    minimizeBigInt: (value: Uint8Array) => Uint8Array;
-    rawSignatureToAns1: (rawSignature: Uint8Array) => Uint8Array;
-    sign(challenge: string): Promise<KeyAssertion>;
+    sign(challenge: string, allowCredentials: {
+        key: AllowCredential[];
+        webauthn: AllowCredential[];
+    }): Promise<KeyAssertion>;
 }

package/index.js

@@ -23,14 +23,22 @@ var __importStar = (this && this.__importStar) || function (mod) {
     return result;
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.BrowserKeySigner = exports.AsymmetricKeySigner = void 0;
+exports.AsymmetricKeySigner = void 0;
 const crypto = __importStar(require("crypto"));
 const utils_1 = require("@dfns/sdk/utils");
 class AsymmetricKeySigner {
     constructor(options) {
         this.options = options;
     }
-    async sign(challenge) {
+    async sign(challenge, allowCredentials) {
+        const credId = this.options.credId;
+        if (credId === undefined || credId === '') {
+            throw new Error('credId is needed to sign');
+        }
+        const allowedCredId = allowCredentials.key.map(cred => cred.id);
+        if (!allowedCredId.includes(credId)) {
+            throw new Error(`CredId ${credId} does not exist for this account: ${allowedCredId}`);
+        }
         const clientData = Buffer.from(JSON.stringify({
             type: 'key.get',
             challenge,
@@ -48,63 +56,3 @@ class AsymmetricKeySigner {
     }
 }
 exports.AsymmetricKeySigner = AsymmetricKeySigner;
-class BrowserKeySigner {
-    constructor(options) {
-        this.options = options;
-        this.minimizeBigInt = (value) => {
-            const minValue = [0, ...value];
-            for (let i = 0; i < minValue.length; ++i) {
-                if (minValue[i] === 0) {
-                    continue;
-                }
-                if (minValue[i] > 0x7f) {
-                    return new Uint8Array(minValue.slice(i - 1));
-                }
-                return new Uint8Array(minValue.slice(i));
-            }
-            return new Uint8Array([0]);
-        };
-        this.rawSignatureToAns1 = (rawSignature) => {
-            const r = rawSignature.slice(0, 32);
-            const s = rawSignature.slice(32);
-            const minR = this.minimizeBigInt(r);
-            const minS = this.minimizeBigInt(s);
-            return new Uint8Array([
-                0x30,
-                minR.length + minS.length + 4,
-                0x02,
-                minR.length,
-                ...minR,
-                0x02,
-                minS.length,
-                ...minS
-            ]);
-        };
-    }
-    async sign(challenge) {
-        const clientData = JSON.stringify({
-            type: 'key.get',
-            challenge,
-            origin: this.options.appOrigin,
-            crossOrigin: this.options.crossOrigin ?? false,
-        });
-        let rawSignature;
-        const algorithm = this.options.privateKey.algorithm.name;
-        if (algorithm == 'ECDSA') {
-            rawSignature = await crypto.subtle.sign({ name: 'ECDSA', hash: { name: 'SHA-256' } }, this.options.privateKey, new TextEncoder().encode(clientData));
-        }
-        else {
-            throw new Error(`${algorithm} is not supported`);
-        }
-        const signature = this.rawSignatureToAns1(new Uint8Array(rawSignature));
-        return {
-            kind: 'Key',
-            credentialAssertion: {
-                credId: this.options.credId,
-                clientData: (0, utils_1.toBase64Url)(clientData),
-                signature: (0, utils_1.toBase64Url)(Buffer.from(signature)),
-            },
-        };
-    }
-}
-exports.BrowserKeySigner = BrowserKeySigner;

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@dfns/sdk-keysigner",
-  "version": "0.3.3",
+  "version": "0.4.0-alpha.1",
   "dependencies": {
     "buffer": "6.0.3",
     "cross-fetch": "3.1.6",
     "uuid": "9.0.0"
   },
   "peerDependencies": {
-    "@dfns/sdk": "0.3.3"
+    "@dfns/sdk": "0.4.0-alpha.1"
   },
   "main": "./index.js",
   "type": "commonjs"