@dfns/sdk-react-native 0.3.2 → 0.3.3

package/index.d.ts

@@ -1,14 +1,16 @@
 import { AllowCredential, CredentialSigner, CredentialStore, Fido2Assertion, Fido2Attestation, UserRegistrationChallenge } from '@dfns/sdk';
 export declare const DEFAULT_WAIT_TIMEOUT = 60000;
-export declare class PasskeySigner implements CredentialSigner<Fido2Assertion>, CredentialStore<Fido2Attestation> {
-    private options;
-    constructor(options: {
-        rpId: string;
-        timeout?: number;
-    });
+type PasskeysOptions = {
+    rpId: string;
+    timeout?: number;
+};
+export declare class PasskeysSigner implements CredentialSigner<Fido2Assertion>, CredentialStore<Fido2Attestation> {
+    private inner;
+    constructor(options: PasskeysOptions);
     sign(challenge: string, allowCredentials: {
         key: AllowCredential[];
         webauthn: AllowCredential[];
     }): Promise<Fido2Assertion>;
     create(challenge: UserRegistrationChallenge): Promise<Fido2Attestation>;
 }
+export {};

package/index.js

@@ -1,11 +1,19 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PasskeySigner = exports.DEFAULT_WAIT_TIMEOUT = void 0;
+exports.PasskeysSigner = exports.DEFAULT_WAIT_TIMEOUT = void 0;
 const utils_1 = require("@dfns/sdk/utils");
-const buffer_1 = require("buffer");
+const react_native_1 = require("react-native");
 const react_native_passkey_1 = require("react-native-passkey");
 exports.DEFAULT_WAIT_TIMEOUT = 60000;
-class PasskeySigner {
+const b64StandardToUrlSafe = (standard) => {
+    return standard.replace(/\+/g, '-').replace(/\//g, '_').replace(/=/g, '');
+};
+const b64UrlSafeToStandard = (urlSafe) => {
+    return (urlSafe + '==='.slice((urlSafe.length + 3) % 4)).replace(/-/g, '+').replace(/_/g, '/');
+};
+// react-native-passkey is incorrect encoding the credId with standard base64 for
+// some reason. we have to undo that.
+class AndroidPasskeys {
     constructor(options) {
         this.options = options;
     }
@@ -25,11 +33,11 @@ class PasskeySigner {
         return {
             kind: 'Fido2',
             credentialAssertion: {
-                credId: credential.id,
-                clientData: (0, utils_1.toBase64Url)(buffer_1.Buffer.from(credential.response.clientDataJSON)),
-                authenticatorData: (0, utils_1.toBase64Url)(buffer_1.Buffer.from(credential.response.authenticatorData)),
-                signature: (0, utils_1.toBase64Url)(buffer_1.Buffer.from(credential.response.signature)),
-                userHandle: credential.response.userHandle ? (0, utils_1.toBase64Url)(buffer_1.Buffer.from(credential.response.userHandle)) : '',
+                credId: b64StandardToUrlSafe(credential.id),
+                clientData: credential.response.clientDataJSON,
+                authenticatorData: credential.response.authenticatorData,
+                signature: credential.response.signature,
+                userHandle: credential.response.userHandle,
             },
         };
     }
@@ -52,17 +60,94 @@ class PasskeySigner {
             timeout: this.options.timeout ?? exports.DEFAULT_WAIT_TIMEOUT,
         };
         const result = await react_native_passkey_1.Passkey.register(options);
-        if (result === null) {
-            throw Error(`Failed to create and sign with Passkey credential`);
-        }
         return {
             credentialKind: 'Fido2',
             credentialInfo: {
-                credId: result.id,
-                attestationData: (0, utils_1.toBase64Url)(buffer_1.Buffer.from(result.response.attestationObject)),
-                clientData: (0, utils_1.toBase64Url)(buffer_1.Buffer.from(result.response.clientDataJSON)),
+                credId: b64StandardToUrlSafe(result.id),
+                attestationData: result.response.attestationObject,
+                clientData: result.response.clientDataJSON,
+            },
+        };
+    }
+}
+// react-native-passkey's iOS implementation is not WebAuthn spec compliant. all values
+// are standard base64 encoded instead of base64url encoded. we have to convert the
+// encoding in both directions.
+class iOsPasskeys {
+    constructor(options) {
+        this.options = options;
+    }
+    async sign(challenge, allowCredentials) {
+        const request = {
+            challenge: b64UrlSafeToStandard(challenge),
+            allowCredentials: allowCredentials.webauthn.map(({ id, type, transports }) => ({
+                id: b64UrlSafeToStandard(id),
+                type,
+                transports: transports ?? [],
+            })),
+            rpId: this.options.rpId,
+            userVerification: 'required',
+            timeout: this.options.timeout ?? exports.DEFAULT_WAIT_TIMEOUT,
+        };
+        const credential = await react_native_passkey_1.Passkey.authenticate(request);
+        return {
+            kind: 'Fido2',
+            credentialAssertion: {
+                credId: b64StandardToUrlSafe(credential.id),
+                clientData: b64StandardToUrlSafe(credential.response.clientDataJSON),
+                authenticatorData: b64StandardToUrlSafe(credential.response.authenticatorData),
+                signature: b64StandardToUrlSafe(credential.response.signature),
+                userHandle: b64StandardToUrlSafe(credential.response.userHandle),
+            },
+        };
+    }
+    async create(challenge) {
+        const options = {
+            challenge: b64UrlSafeToStandard(challenge.challenge),
+            pubKeyCredParams: challenge.pubKeyCredParams,
+            rp: challenge.rp,
+            user: {
+                displayName: challenge.user.displayName,
+                id: (0, utils_1.toBase64Url)(challenge.user.id),
+                name: challenge.user.name,
+            },
+            attestation: challenge.attestation,
+            excludeCredentials: challenge.excludeCredentials.map((cred) => ({
+                id: cred.id,
+                type: cred.type,
+            })),
+            authenticatorSelection: challenge.authenticatorSelection,
+            timeout: this.options.timeout ?? exports.DEFAULT_WAIT_TIMEOUT,
+        };
+        const result = await react_native_passkey_1.Passkey.register(options);
+        return {
+            credentialKind: 'Fido2',
+            credentialInfo: {
+                credId: b64StandardToUrlSafe(result.id),
+                attestationData: b64StandardToUrlSafe(result.response.attestationObject),
+                clientData: b64StandardToUrlSafe(result.response.clientDataJSON),
             },
         };
     }
 }
-exports.PasskeySigner = PasskeySigner;
+class PasskeysSigner {
+    constructor(options) {
+        switch (react_native_1.Platform.OS) {
+            case 'android':
+                this.inner = new AndroidPasskeys(options);
+                break;
+            case 'ios':
+                this.inner = new iOsPasskeys(options);
+                break;
+            default:
+                throw Error(`${react_native_1.Platform.OS} not supported`);
+        }
+    }
+    async sign(challenge, allowCredentials) {
+        return this.inner.sign(challenge, allowCredentials);
+    }
+    async create(challenge) {
+        return this.inner.create(challenge);
+    }
+}
+exports.PasskeysSigner = PasskeysSigner;

package/package.json

@@ -1,14 +1,15 @@
 {
   "name": "@dfns/sdk-react-native",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "dependencies": {
     "buffer": "6.0.3",
     "cross-fetch": "3.1.6",
+    "react-native": "0.73.2",
     "react-native-passkey": "^2.1.1",
     "uuid": "9.0.0"
   },
   "peerDependencies": {
-    "@dfns/sdk": "0.3.2"
+    "@dfns/sdk": "0.3.3"
   },
   "main": "./index.js",
   "type": "commonjs"