@modernman00/shared-js-lib 1.2.89 → 1.2.90

package/WebAuthnClient.js

@@ -0,0 +1,125 @@
+/**
+ * WebAuthnClient.js
+ * 
+ * Handles client-side WebAuthn interactions (FaceID, TouchID, Passcodes).
+ * Implements David's Gatewatcher mandate: Defensive Degradation.
+ */
+
+export class WebAuthnClient {
+    /**
+     * Checks if the device supports WebAuthn (Biometrics/Passkeys)
+     * @returns {boolean}
+     */
+    static isSupported() {
+        return window.PublicKeyCredential !== undefined 
+            && typeof window.PublicKeyCredential === 'function';
+    }
+
+    /**
+     * Base64URL to ArrayBuffer converter
+     */
+    static base64URLStringToBuffer(base64URLString) {
+        const base64 = base64URLString.replace(/-/g, '+').replace(/_/g, '/');
+        const padLength = (4 - (base64.length % 4)) % 4;
+        const padded = base64.padEnd(base64.length + padLength, '=');
+        const binary = atob(padded);
+        const buffer = new ArrayBuffer(binary.length);
+        const bytes = new Uint8Array(buffer);
+        for (let i = 0; i < binary.length; i++) {
+            bytes[i] = binary.charCodeAt(i);
+        }
+        return buffer;
+    }
+
+    /**
+     * ArrayBuffer to Base64URL converter
+     */
+    static bufferToBase64URLString(buffer) {
+        const bytes = new Uint8Array(buffer);
+        let str = '';
+        for (let i = 0; i < bytes.byteLength; i++) {
+            str += String.fromCharCode(bytes[i]);
+        }
+        return btoa(str).replace(/\+/g, '-').replace(/\//g, '_').replace(/=/g, '');
+    }
+
+    /**
+     * Initiates the registration of a new Passkey
+     * @param {Object} optionsFromServer JSON options from /webauthn/register/options
+     */
+    static async registerDevice(optionsFromServer) {
+        if (!this.isSupported()) {
+            throw new Error("Device does not support biometrics/passkeys.");
+        }
+
+        try {
+            const publicKey = {
+                ...optionsFromServer,
+                challenge: this.base64URLStringToBuffer(optionsFromServer.challenge),
+                user: {
+                    ...optionsFromServer.user,
+                    id: this.base64URLStringToBuffer(optionsFromServer.user.id)
+                }
+            };
+
+            const credential = await navigator.credentials.create({ publicKey });
+            
+            return {
+                id: credential.id,
+                rawId: this.bufferToBase64URLString(credential.rawId),
+                type: credential.type,
+                response: {
+                    attestationObject: this.bufferToBase64URLString(credential.response.attestationObject),
+                    clientDataJSON: this.bufferToBase64URLString(credential.response.clientDataJSON),
+                }
+            };
+        } catch (error) {
+            // David's Rule: Defensive Degradation. If it fails or is canceled, log and swallow politely.
+            console.warn("WebAuthn Registration failed or was canceled:", error);
+            throw new Error("Passkey registration was canceled or failed.");
+        }
+    }
+
+    /**
+     * Initiates login using an existing Passkey
+     * @param {Object} optionsFromServer JSON options from /webauthn/login/options
+     */
+    static async loginWithDevice(optionsFromServer) {
+        if (!this.isSupported()) {
+            throw new Error("Device does not support biometrics/passkeys.");
+        }
+
+        try {
+            const publicKey = {
+                ...optionsFromServer,
+                challenge: this.base64URLStringToBuffer(optionsFromServer.challenge)
+            };
+
+            // Convert allowed credentials to buffers if they exist
+            if (publicKey.allowCredentials) {
+                publicKey.allowCredentials = publicKey.allowCredentials.map(cred => ({
+                    ...cred,
+                    id: this.base64URLStringToBuffer(cred.id)
+                }));
+            }
+
+            const assertion = await navigator.credentials.get({ publicKey });
+            
+            return {
+                id: assertion.id,
+                rawId: this.bufferToBase64URLString(assertion.rawId),
+                type: assertion.type,
+                response: {
+                    authenticatorData: this.bufferToBase64URLString(assertion.response.authenticatorData),
+                    clientDataJSON: this.bufferToBase64URLString(assertion.response.clientDataJSON),
+                    signature: this.bufferToBase64URLString(assertion.response.signature),
+                    userHandle: assertion.response.userHandle ? this.bufferToBase64URLString(assertion.response.userHandle) : null,
+                }
+            };
+        } catch (error) {
+            // David's Rule: Defensive Degradation.
+            console.warn("WebAuthn Login failed or was canceled:", error);
+            throw new Error("Passkey login was canceled or failed. Please use your password.");
+        }
+    }
+}

package/config/version.php

@@ -1,3 +1,3 @@
 <?php
-define('APP_VERSION', 'v1.2.89');
+define('APP_VERSION', 'v1.2.90');
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modernman00/shared-js-lib",
-  "version": "1.2.89",
+  "version": "1.2.90",
   "description": "Reusable JS utilities for numerous js problems",
   "homepage": "https://github.com/modernman00/shared-js-lib#readme",
   "keywords": [
@@ -48,6 +48,7 @@
     "InlineValidation.js",
     "Clipboard.js",
     "AuthInterceptor.js",
+    "WebAuthnClient.js",
     "ShowResponse.js",
     "Utility.js",
     "UtilityHtml.js",

package/release-history.md

@@ -172,3 +172,9 @@
 - 🧹 Auto-commit before release _(by modernman00)_
 - 🔖 Release v1.2.88 _(by modernman00)_
 - 🧹 Auto-commit before release _(by modernman00)_
+
+## v1.2.90 — 2026-10-23 17:34
+### Changelog for v1.2.90
+
+- fix(package): ship WebAuthnClient.js in the published files list _(by modernman00)_
+- ci: drop npm publish step from release workflow _(by modernman00)_