@moon-x/core 0.2.0 → 0.3.0

package/dist/web/index.mjs

@@ -5,12 +5,7 @@ import {
 import {
   PostMessageClient,
   PostMessageServer
-} from "../chunk-SOKLPX7V.mjs";
-import {
-  fromB64url,
-  toB64url
-} from "../chunk-CDT4MC7S.mjs";
-import "../chunk-GQKIA37O.mjs";
+} from "../chunk-VVL65GIB.mjs";
 
 // src/web/iframe-transport.ts
 var clientCache = /* @__PURE__ */ new WeakMap();
@@ -49,74 +44,43 @@ var createIframeTransport = ({
 });
 
 // src/web/webauthn-passkey.ts
+import { startAuthentication } from "@simplewebauthn/browser";
 var createWebAuthnPasskey = () => ({
   assert: async ({ rpId, challenge }) => {
-    const challengeBytes = fromB64url(challenge);
-    const credential = await navigator.credentials.get({
-      publicKey: {
-        challenge: challengeBytes,
+    const result = await startAuthentication({
+      optionsJSON: {
+        challenge,
         rpId,
         userVerification: "preferred",
-        // Empty allowCredentials → discoverable login → userHandle is
-        // REQUIRED on the response. See `parent-passkey-assert.ts`
-        // for the full rationale.
         allowCredentials: []
       }
     });
-    if (!credential) throw new Error("passkey_assertion_cancelled");
-    const assertion = credential.response;
-    if (!assertion.userHandle) {
+    if (!result.response.userHandle) {
       throw new Error("user_handle_missing");
     }
     return {
-      rawIdB64url: toB64url(new Uint8Array(credential.rawId)),
-      userHandleB64url: toB64url(new Uint8Array(assertion.userHandle))
+      rawIdB64url: result.rawId,
+      userHandleB64url: result.response.userHandle
     };
   },
-  create: async ({
-    rpId,
-    rpName,
-    userId,
-    userName,
-    userDisplayName,
-    challenge,
-    excludeCredentials
-  }) => {
-    const challengeBytes = fromB64url(challenge);
-    const credential = await navigator.credentials.create({
-      publicKey: {
-        rp: { id: rpId, name: rpName },
-        user: {
-          id: userId,
-          name: userName,
-          displayName: userDisplayName
-        },
-        challenge: challengeBytes,
-        pubKeyCredParams: [
-          { type: "public-key", alg: -7 },
-          // ES256
-          { type: "public-key", alg: -257 }
-          // RS256
-        ],
-        authenticatorSelection: {
-          residentKey: "required",
-          userVerification: "preferred"
-        },
-        excludeCredentials: (excludeCredentials ?? []).map((id) => ({
-          id: fromB64url(id),
-          type: "public-key"
-        }))
-      }
+  assertForServer: async ({ optionsJSON }) => {
+    const result = await startAuthentication({
+      optionsJSON
     });
-    if (!credential) throw new Error("passkey_registration_cancelled");
-    const attestation = credential.response;
-    return {
-      rawIdB64url: toB64url(new Uint8Array(credential.rawId)),
-      clientDataJSONB64url: toB64url(new Uint8Array(attestation.clientDataJSON)),
-      attestationObjectB64url: toB64url(
-        new Uint8Array(attestation.attestationObject)
-      )
+    const sanitized = {
+      id: result.id,
+      rawId: result.rawId,
+      type: result.type,
+      response: {
+        clientDataJSON: result.response.clientDataJSON,
+        authenticatorData: result.response.authenticatorData,
+        signature: result.response.signature,
+        userHandle: void 0
+      },
+      clientExtensionResults: result.clientExtensionResults,
+      authenticatorAttachment: result.authenticatorAttachment
     };
+    return sanitized;
   }
 });
 

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@moon-x/core",
-  "version": "0.2.0",
+  "version": "0.3.0",
+  "license": "UNLICENSED",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "exports": {
@@ -56,12 +57,15 @@
   "publishConfig": {
     "access": "public"
   },
+  "dependencies": {
+    "@simplewebauthn/browser": "^13.2.2"
+  },
   "devDependencies": {
     "@testing-library/react": "16.3.2",
     "@types/react": "19.2.14",
     "@types/react-dom": "19.2.3",
     "@vitest/ui": "1.6.1",
-    "happy-dom": "13.10.1",
+    "happy-dom": "20.8.9",
     "react": "18.3.1",
     "react-dom": "18.3.1",
     "tsup": "8.5.1",