@moonbase.sh/licensing 3.0.0 → 3.1.0

package/fingerprint-vectors.json

@@ -3,6 +3,11 @@
   "version": 2,
   "materialPrefix": "moonbase:fingerprint:v2",
   "stampPrefix": "mbd2_",
+  "sourceTags": {
+    "identity": "",
+    "deviceName": "n",
+    "scoped": "s"
+  },
   "canonicalizeValue": [
     {
       "description": "trailing newline from a sysfs read",
@@ -59,6 +64,7 @@
     {
       "description": "macOS, the single identity parameter",
       "platform": "mac",
+      "source": "identity",
       "params": [
         [
           "ioPlatformUuid",
@@ -72,6 +78,7 @@
     {
       "description": "Linux, machine-id plus world-readable DMI model fields",
       "platform": "linux",
+      "source": "identity",
       "params": [
         [
           "machineId",
@@ -101,6 +108,7 @@
     {
       "description": "Windows, first System and Baseboard structures",
       "platform": "windows",
+      "source": "identity",
       "params": [
         [
           "systemManufacturer",
@@ -134,6 +142,7 @@
     {
       "description": "empty and whitespace-only values are dropped, order preserved",
       "platform": "linux",
+      "source": "identity",
       "params": [
         [
           "machineId",
@@ -163,6 +172,7 @@
     {
       "description": "parameter order is significant (same pairs, swapped)",
       "platform": "linux",
+      "source": "identity",
       "params": [
         [
           "sysVendor",
@@ -180,6 +190,7 @@
     {
       "description": "control characters are dropped, so a value cannot forge an extra line",
       "platform": "linux",
+      "source": "identity",
       "params": [
         [
           "machineId",
@@ -193,6 +204,7 @@
     {
       "description": "non-ASCII is dropped, making the firmware-string decoding choice immaterial",
       "platform": "windows",
+      "source": "identity",
       "params": [
         [
           "systemManufacturer",
@@ -214,6 +226,7 @@
     {
       "description": "NFC runs before the ASCII filter, so a decomposed e-acute leaves no bare \"e\"",
       "platform": "windows",
+      "source": "identity",
       "params": [
         [
           "systemManufacturer",
@@ -231,6 +244,7 @@
     {
       "description": "values are capped at 128 characters",
       "platform": "linux",
+      "source": "identity",
       "params": [
         [
           "machineId",
@@ -244,6 +258,7 @@
     {
       "description": "an unprogrammed serial is dropped, but a real system UUID still identifies the machine",
       "platform": "windows",
+      "source": "identity",
       "params": [
         [
           "systemManufacturer",
@@ -269,6 +284,7 @@
     {
       "description": "filler detection applies to identifying params only \u2014 a model may genuinely be named \"None\"",
       "platform": "linux",
+      "source": "identity",
       "params": [
         [
           "machineId",
@@ -283,9 +299,38 @@
       "digest": "063d7bf0605a0da040b0046007a4993eaf41b557e414bea99105800560f6efdc",
       "deviceId": "mbd2_063d7bf0605a0da040b0046007a4993eaf41b557e414bea99105800560f6efdc"
     },
+    {
+      "description": "iOS offers only a vendor-scoped identifier, so the id is stamped mbd2s_",
+      "platform": "ios",
+      "source": "scoped",
+      "params": [
+        [
+          "identifierForVendor",
+          "0123456789ABCDEF0123456789ABCDEF"
+        ]
+      ],
+      "material": "moonbase:fingerprint:v2\nplatform=ios\nidentifierForVendor=0123456789ABCDEF0123456789ABCDEF",
+      "digest": "298ced47f8d983939db1d5fce6d4b4f2f8766aa19e3e17536fcd1604a81febf1",
+      "deviceId": "mbd2s_298ced47f8d983939db1d5fce6d4b4f2f8766aa19e3e17536fcd1604a81febf1"
+    },
+    {
+      "description": "Android ANDROID_ID from Settings.Secure.getString, lowercased and scoped to the signing key",
+      "platform": "android",
+      "source": "scoped",
+      "params": [
+        [
+          "androidId",
+          "a1b2c3d4e5f60718\n"
+        ]
+      ],
+      "material": "moonbase:fingerprint:v2\nplatform=android\nandroidId=a1b2c3d4e5f60718",
+      "digest": "ca988ecf5c529964bfaa80734da3dbe070dd41881aa43f8c472f3a5d512b4eff",
+      "deviceId": "mbd2s_ca988ecf5c529964bfaa80734da3dbe070dd41881aa43f8c472f3a5d512b4eff"
+    },
     {
       "description": "the deviceName fallback material (stamped mbd2n_, see stamps)",
       "platform": "unknown",
+      "source": "deviceName",
       "params": [
         [
           "deviceName",
@@ -295,6 +340,24 @@
       "material": "moonbase:fingerprint:v2\nplatform=unknown\ndeviceName=PC-1",
       "digest": "493978eb157552e60a13694bd6861b2a82d0dba2746431a5f7921951ed460045",
       "deviceId": "mbd2n_493978eb157552e60a13694bd6861b2a82d0dba2746431a5f7921951ed460045"
+    },
+    {
+      "description": "a rejected androidId constant is still a valid baseboard serial: per-parameter rejections must not leak across platforms",
+      "platform": "windows",
+      "source": "identity",
+      "params": [
+        [
+          "systemManufacturer",
+          "ACME"
+        ],
+        [
+          "baseboardSerialNumber",
+          "9774d56d682e549c"
+        ]
+      ],
+      "material": "moonbase:fingerprint:v2\nplatform=windows\nsystemManufacturer=ACME\nbaseboardSerialNumber=9774d56d682e549c",
+      "digest": "cdd01d6f586662f25e5aaa542ccaf373eea6cfb1271a2c94efd5ab828611b477",
+      "deviceId": "mbd2_cdd01d6f586662f25e5aaa542ccaf373eea6cfb1271a2c94efd5ab828611b477"
     }
   ],
   "materialErrors": [
@@ -515,6 +578,94 @@
         ]
       ],
       "error": "InsufficientDeviceIdentity"
+    },
+    {
+      "description": "iOS with no identifierForVendor yet has nothing else to offer",
+      "platform": "ios",
+      "params": [
+        [
+          "identifierForVendor",
+          ""
+        ]
+      ],
+      "error": "InsufficientDeviceIdentity"
+    },
+    {
+      "description": "Android with no androidId has nothing else to offer",
+      "platform": "android",
+      "params": [
+        [
+          "androidId",
+          ""
+        ]
+      ],
+      "error": "InsufficientDeviceIdentity"
+    },
+    {
+      "description": "the literal \"android_id\" is the key name, not an id: reading the static field instead of calling getString gives every device on the platform the same value",
+      "platform": "android",
+      "params": [
+        [
+          "androidId",
+          "android_id"
+        ]
+      ],
+      "error": "InsufficientDeviceIdentity"
+    },
+    {
+      "description": "Build.SERIAL returns \"unknown\" without a privileged permission, which is a fleet-wide constant",
+      "platform": "android",
+      "params": [
+        [
+          "androidId",
+          "unknown"
+        ]
+      ],
+      "error": "InsufficientDeviceIdentity"
+    },
+    {
+      "description": "9774d56d682e549c is a real ANDROID_ID shared by a large batch of devices whose ro.serialno was unset",
+      "platform": "android",
+      "params": [
+        [
+          "androidId",
+          "9774d56d682e549c"
+        ]
+      ],
+      "error": "InsufficientDeviceIdentity"
+    },
+    {
+      "description": "an androidId that is not lowercase hex did not come from Settings.Secure",
+      "platform": "android",
+      "params": [
+        [
+          "androidId",
+          "A1B2C3D4E5F60718"
+        ]
+      ],
+      "error": "InsufficientDeviceIdentity"
+    },
+    {
+      "description": "the host-name fallback is forbidden on iOS, where gethostname() returns \"localhost\" on every device",
+      "platform": "ios",
+      "params": [
+        [
+          "deviceName",
+          "iPhone"
+        ]
+      ],
+      "error": "InsufficientDeviceIdentity"
+    },
+    {
+      "description": "the host-name fallback is forbidden on Android, where the host name is a model name or an image-wide constant",
+      "platform": "android",
+      "params": [
+        [
+          "deviceName",
+          "localhost"
+        ]
+      ],
+      "error": "InsufficientDeviceIdentity"
     }
   ],
   "smbios": [
@@ -698,6 +849,7 @@
       "deviceId": "mbd2_b465194056ff7721bf549799b4532bfca0bc72fffc0f6969c77c46d6b8e28e32",
       "parsed": {
         "version": 2,
+        "sourceTag": "",
         "source": "identity",
         "digest": "b465194056ff7721bf549799b4532bfca0bc72fffc0f6969c77c46d6b8e28e32"
       }
@@ -707,6 +859,7 @@
       "deviceId": "mbd2n_b465194056ff7721bf549799b4532bfca0bc72fffc0f6969c77c46d6b8e28e32",
       "parsed": {
         "version": 2,
+        "sourceTag": "n",
         "source": "deviceName",
         "digest": "b465194056ff7721bf549799b4532bfca0bc72fffc0f6969c77c46d6b8e28e32"
       }
@@ -716,6 +869,7 @@
       "deviceId": "mbd7_b465194056ff7721bf549799b4532bfca0bc72fffc0f6969c77c46d6b8e28e32",
       "parsed": {
         "version": 7,
+        "sourceTag": "",
         "source": "identity",
         "digest": "b465194056ff7721bf549799b4532bfca0bc72fffc0f6969c77c46d6b8e28e32"
       }
@@ -739,6 +893,56 @@
       "description": "a truncated digest is not a stamp",
       "deviceId": "mbd2_b465194056ff7721bf549799b4532bfca0bc72fffc0f6969c77c46d6b8e28e3",
       "parsed": null
+    },
+    {
+      "description": "the current version, app-scoped identity",
+      "deviceId": "mbd2s_b465194056ff7721bf549799b4532bfca0bc72fffc0f6969c77c46d6b8e28e32",
+      "parsed": {
+        "version": 2,
+        "sourceTag": "s",
+        "source": "scoped",
+        "digest": "b465194056ff7721bf549799b4532bfca0bc72fffc0f6969c77c46d6b8e28e32"
+      }
+    },
+    {
+      "description": "an unrecognised source tag still parses, so the id is compared literally rather than rejected as \"not a Moonbase id\"",
+      "deviceId": "mbd2x_b465194056ff7721bf549799b4532bfca0bc72fffc0f6969c77c46d6b8e28e32",
+      "parsed": {
+        "version": 2,
+        "sourceTag": "x",
+        "source": null,
+        "digest": "b465194056ff7721bf549799b4532bfca0bc72fffc0f6969c77c46d6b8e28e32"
+      }
+    },
+    {
+      "description": "a multi-character tag parses too, so a future tag needs no version bump",
+      "deviceId": "mbd2zz_b465194056ff7721bf549799b4532bfca0bc72fffc0f6969c77c46d6b8e28e32",
+      "parsed": {
+        "version": 2,
+        "sourceTag": "zz",
+        "source": null,
+        "digest": "b465194056ff7721bf549799b4532bfca0bc72fffc0f6969c77c46d6b8e28e32"
+      }
+    },
+    {
+      "description": "an uppercase source tag is not a stamp",
+      "deviceId": "mbd2S_b465194056ff7721bf549799b4532bfca0bc72fffc0f6969c77c46d6b8e28e32",
+      "parsed": null
+    },
+    {
+      "description": "a tag with a digit in it is not a stamp",
+      "deviceId": "mbd2n2_b465194056ff7721bf549799b4532bfca0bc72fffc0f6969c77c46d6b8e28e32",
+      "parsed": null
+    },
+    {
+      "description": "a tag that names a language built-in is still just an unknown tag: look tags up in a real map, not an object with a prototype",
+      "deviceId": "mbd2constructor_b465194056ff7721bf549799b4532bfca0bc72fffc0f6969c77c46d6b8e28e32",
+      "parsed": {
+        "version": 2,
+        "sourceTag": "constructor",
+        "source": null,
+        "digest": "b465194056ff7721bf549799b4532bfca0bc72fffc0f6969c77c46d6b8e28e32"
+      }
     }
   ]
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@moonbase.sh/licensing",
   "type": "module",
-  "version": "3.0.0",
+  "version": "3.1.0",
   "description": "Package to add sotftware licensing using Moonbase.sh to your node.js apps",
   "author": "Tobias Lønnerød Madsen <m@dsen.tv>",
   "license": "MIT",