@dfns/sdk-react-native 0.6.4 → 0.6.6

package/index.d.ts

@@ -1,6 +1,6 @@
 import { CredentialSigner, CredentialStore, Fido2Assertion, Fido2Attestation, UserActionChallenge, UserRegistrationChallenge } from '@dfns/sdk';
 export declare const DEFAULT_WAIT_TIMEOUT = 60000;
-interface PasskeysSignerConf {
+export type PasskeysSignerConf = {
     /**
      * The relying party identifies your application to users, when users create/use passkeys. (Read more [here](https://www.w3.org/TR/webauthn-2/#relying-party)).
      * - id: The relying party identifier is a valid domain string identifying the WebAuthn Relying Party.
@@ -18,11 +18,10 @@ interface PasskeysSignerConf {
      * select and use his passkey, an error will be thrown by webauthn client. Read more [here](https://developer.mozilla.org/en-US/docs/Web/API/PublicKeyCredentialCreationOptions#timeout).
      * */
     timeout?: number;
-}
+};
 export declare class PasskeysSigner implements CredentialSigner<Fido2Assertion>, CredentialStore<Fido2Attestation> {
     private platform;
     constructor(conf: PasskeysSignerConf);
     sign(challenge: UserActionChallenge): Promise<Fido2Assertion>;
     create(challenge: UserRegistrationChallenge): Promise<Fido2Attestation>;
 }
-export {};

package/index.js

@@ -6,19 +6,11 @@ const utils_1 = require("@dfns/sdk/utils");
 const react_native_1 = require("react-native");
 const react_native_passkey_1 = require("react-native-passkey");
 exports.DEFAULT_WAIT_TIMEOUT = 60000;
-const b64StandardToUrlSafe = (standard) => {
-    return standard.replace(/\+/g, '-').replace(/\//g, '_').replace(/=/g, '');
-};
-const b64UrlSafeToStandard = (urlSafe) => {
-    return (urlSafe + '==='.slice((urlSafe.length + 3) % 4)).replace(/-/g, '+').replace(/_/g, '/');
-};
-// react-native-passkey is incorrect encoding the credId with standard base64 for
-// some reason. we have to undo that.
 class AndroidPasskeys {
     constructor(conf) {
         this.conf = conf;
         if (!this.conf?.relyingParty?.id || !this.conf?.relyingParty?.name) {
-            throw new sdk_1.DfnsError(-1, `Relying party ID and name must be specified in the WebauthnSigner initializer`);
+            throw new sdk_1.DfnsError(-1, 'Relying party ID and name must be specified in the WebauthnSigner initializer');
         }
     }
     async sign(challenge) {
@@ -29,11 +21,11 @@ class AndroidPasskeys {
             userVerification: challenge.userVerification,
             timeout: this.conf.timeout ?? exports.DEFAULT_WAIT_TIMEOUT,
         };
-        const credential = await react_native_passkey_1.Passkey.authenticate(request);
+        const credential = await react_native_passkey_1.Passkey.get(request);
         return {
             kind: 'Fido2',
             credentialAssertion: {
-                credId: b64StandardToUrlSafe(credential.id),
+                credId: credential.id,
                 clientData: credential.response.clientDataJSON,
                 authenticatorData: credential.response.authenticatorData,
                 signature: credential.response.signature,
@@ -59,53 +51,47 @@ class AndroidPasskeys {
             authenticatorSelection: challenge.authenticatorSelection,
             timeout: this.conf.timeout ?? exports.DEFAULT_WAIT_TIMEOUT,
         };
-        const result = await react_native_passkey_1.Passkey.register(request);
+        const result = await react_native_passkey_1.Passkey.create(request);
         return {
             credentialKind: 'Fido2',
             credentialInfo: {
-                credId: b64StandardToUrlSafe(result.id),
+                credId: result.id,
                 attestationData: result.response.attestationObject,
                 clientData: result.response.clientDataJSON,
             },
         };
     }
 }
-// react-native-passkey's iOS implementation is not WebAuthn spec compliant. all values
-// are standard base64 encoded instead of base64url encoded. we have to convert the
-// encoding in both directions.
 class iOSPasskeys {
     constructor(conf) {
         this.conf = conf;
         if (!this.conf?.relyingParty?.id || !this.conf?.relyingParty?.name) {
-            throw new sdk_1.DfnsError(-1, `Relying party ID and name must be specified in the WebauthnSigner initializer`);
+            throw new sdk_1.DfnsError(-1, 'Relying party ID and name must be specified in the WebauthnSigner initializer');
         }
     }
     async sign(challenge) {
         const request = {
-            challenge: b64UrlSafeToStandard(challenge.challenge),
-            allowCredentials: challenge.allowCredentials.webauthn.map(({ id, type }) => ({
-                id: b64UrlSafeToStandard(id),
-                type,
-            })),
+            challenge: challenge.challenge,
+            allowCredentials: challenge.allowCredentials.webauthn,
             rpId: this.conf.relyingParty.id,
             userVerification: 'preferred',
             timeout: this.conf.timeout ?? exports.DEFAULT_WAIT_TIMEOUT,
         };
-        const credential = await react_native_passkey_1.Passkey.authenticate(request);
+        const credential = await react_native_passkey_1.Passkey.get(request);
         return {
             kind: 'Fido2',
             credentialAssertion: {
-                credId: b64StandardToUrlSafe(credential.id),
-                clientData: b64StandardToUrlSafe(credential.response.clientDataJSON),
-                authenticatorData: b64StandardToUrlSafe(credential.response.authenticatorData),
-                signature: b64StandardToUrlSafe(credential.response.signature),
-                userHandle: b64StandardToUrlSafe(credential.response.userHandle),
+                credId: credential.id,
+                clientData: credential.response.clientDataJSON,
+                authenticatorData: credential.response.authenticatorData,
+                signature: credential.response.signature,
+                userHandle: credential.response.userHandle,
             },
         };
     }
     async create(challenge) {
         const request = {
-            challenge: b64UrlSafeToStandard(challenge.challenge),
+            challenge: challenge.challenge,
             pubKeyCredParams: challenge.pubKeyCredParams,
             rp: this.conf.relyingParty,
             user: {
@@ -114,20 +100,17 @@ class iOSPasskeys {
                 name: challenge.user.name,
             },
             attestation: challenge.attestation,
-            excludeCredentials: challenge.excludeCredentials.map(({ id, type }) => ({
-                id: b64UrlSafeToStandard(id),
-                type,
-            })),
+            excludeCredentials: challenge.excludeCredentials,
             authenticatorSelection: challenge.authenticatorSelection,
             timeout: this.conf.timeout ?? exports.DEFAULT_WAIT_TIMEOUT,
         };
-        const result = await react_native_passkey_1.Passkey.register(request);
+        const result = await react_native_passkey_1.Passkey.create(request);
         return {
             credentialKind: 'Fido2',
             credentialInfo: {
-                credId: b64StandardToUrlSafe(result.id),
-                attestationData: b64StandardToUrlSafe(result.response.attestationObject),
-                clientData: b64StandardToUrlSafe(result.response.clientDataJSON),
+                credId: result.id,
+                attestationData: result.response.attestationObject,
+                clientData: result.response.clientDataJSON,
             },
         };
     }

package/package.json

@@ -1,15 +1,15 @@
 {
   "name": "@dfns/sdk-react-native",
-  "version": "0.6.4",
+  "version": "0.6.6",
   "dependencies": {
     "buffer": "6.0.3",
     "cross-fetch": "3.1.6",
     "react-native": "0.74.1",
-    "react-native-passkey": "^2.1.1",
+    "react-native-passkey": "^3.1.0",
     "uuid": "9.0.0"
   },
   "peerDependencies": {
-    "@dfns/sdk": "0.6.4"
+    "@dfns/sdk": "0.6.6"
   },
   "main": "./index.js",
   "type": "commonjs"