@simplewebauthn/server 3.0.0 → 4.3.0

package/dist/{metadata → services}/metadataService.js

@@ -3,93 +3,105 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.BaseMetadataService = void 0;
 const node_fetch_1 = __importDefault(require("node-fetch"));
 const jsrsasign_1 = require("jsrsasign");
-const base64url_1 = __importDefault(require("base64url"));
-const toHash_1 = __importDefault(require("../helpers/toHash"));
 const validateCertificatePath_1 = __importDefault(require("../helpers/validateCertificatePath"));
-const convertX509CertToPEM_1 = __importDefault(require("../helpers/convertX509CertToPEM"));
+const convertCertBufferToPEM_1 = __importDefault(require("../helpers/convertCertBufferToPEM"));
 const convertAAGUIDToString_1 = __importDefault(require("../helpers/convertAAGUIDToString"));
-// TODO: Re-enable this once we figure out logging
-// import { log } from '../helpers/logging';
-const parseJWT_1 = __importDefault(require("./parseJWT"));
+const settingsService_1 = __importDefault(require("../services/settingsService"));
+const logging_1 = require("../helpers/logging");
+const parseJWT_1 = __importDefault(require("../metadata/parseJWT"));
+const defaultURLMDS = 'https://mds.fidoalliance.org/'; // v3
 var SERVICE_STATE;
 (function (SERVICE_STATE) {
     SERVICE_STATE[SERVICE_STATE["DISABLED"] = 0] = "DISABLED";
     SERVICE_STATE[SERVICE_STATE["REFRESHING"] = 1] = "REFRESHING";
     SERVICE_STATE[SERVICE_STATE["READY"] = 2] = "READY";
 })(SERVICE_STATE || (SERVICE_STATE = {}));
+const log = logging_1.getLogger('MetadataService');
 /**
- * A basic service for coordinating interactions with the FIDO Metadata Service. This includes TOC
+ * A basic service for coordinating interactions with the FIDO Metadata Service. This includes BLOB
  * download and parsing, and on-demand requesting and caching of individual metadata statements.
  *
  * https://fidoalliance.org/metadata/
  */
-class MetadataService {
+class BaseMetadataService {
     constructor() {
         this.mdsCache = {};
         this.statementCache = {};
         this.state = SERVICE_STATE.DISABLED;
+        this.verificationMode = 'strict';
     }
     /**
      * Prepare the service to handle remote MDS servers and/or cache local metadata statements.
+     *
+     * **Options:**
+     *
+     * @param opts.mdsServers An array of URLs to FIDO Alliance Metadata Service
+     * (version 3.0)-compatible servers. Defaults to the official FIDO MDS server
+     * @param opts.statements An array of local metadata statements
+     * @param opts.verificationMode How MetadataService will handle unregistered AAGUIDs. Defaults to
+     * `"strict"` which throws errors during registration response verification when an
+     * unregistered AAGUID is encountered. Set to `"permissive"` to allow registration by
+     * authenticators with unregistered AAGUIDs
      */
-    async initialize(opts) {
-        if (!opts) {
-            throw new Error('MetadataService initialization options are missing');
-        }
-        const { mdsServers, statements } = opts;
+    async initialize(opts = {}) {
+        const { mdsServers = [defaultURLMDS], statements, verificationMode, } = opts;
         this.setState(SERVICE_STATE.REFRESHING);
         // If metadata statements are provided, load them into the cache first
         if (statements === null || statements === void 0 ? void 0 : statements.length) {
+            let statementsAdded = 0;
             statements.forEach(statement => {
                 // Only cache statements that are for FIDO2-compatible authenticators
                 if (statement.aaguid) {
                     this.statementCache[statement.aaguid] = {
+                        entry: {
+                            metadataStatement: statement,
+                            statusReports: [],
+                            timeOfLastStatusChange: '1970-01-01',
+                        },
                         url: '',
-                        hash: '',
-                        statement,
-                        statusReports: [],
                     };
+                    statementsAdded += 1;
                 }
             });
-        }
-        if (!mdsServers.length) {
-            throw new Error('MetadataService must be initialized with at least one MDS server');
+            log(`Cached ${statementsAdded} local statements`);
         }
         // If MDS servers are provided, then process them and add their statements to the cache
         if (mdsServers === null || mdsServers === void 0 ? void 0 : mdsServers.length) {
-            // TODO: Re-enable this once we figure out logging
-            // const currentCacheCount = Object.keys(this.statementCache).length;
-            for (const server of mdsServers) {
+            // Get a current count so we know how many new statements we've added from MDS servers
+            const currentCacheCount = Object.keys(this.statementCache).length;
+            let numServers = mdsServers.length;
+            for (const url of mdsServers) {
                 try {
-                    await this.downloadTOC({
-                        url: server.url,
-                        rootCertURL: server.rootCertURL,
-                        metadataURLSuffix: server.metadataURLSuffix,
-                        alg: '',
+                    await this.downloadBlob({
+                        url,
                         no: 0,
                         nextUpdate: new Date(0),
                     });
                 }
                 catch (err) {
                     // Notify of the error and move on
-                    // TODO: Re-enable this once we figure out logging
-                    // log('warning', `Could not download TOC from ${server.url}:`, err);
+                    log(`Could not download BLOB from ${url}:`, err);
+                    numServers -= 1;
                 }
             }
-            // TODO: Re-enable this once we figure out logging
-            // const newCacheCount = Object.keys(this.statementCache).length;
-            // const cacheDiff = newCacheCount - currentCacheCount;
-            // log('info', `Downloaded ${cacheDiff} statements from ${mdsServers.length} metadata servers`);
+            // Calculate the difference to get the total number of new statements we successfully added
+            const newCacheCount = Object.keys(this.statementCache).length;
+            const cacheDiff = newCacheCount - currentCacheCount;
+            log(`Cached ${cacheDiff} statements from ${numServers} metadata server(s)`);
+        }
+        if (verificationMode) {
+            this.verificationMode = verificationMode;
         }
         this.setState(SERVICE_STATE.READY);
     }
     /**
-     * Get a metadata statement for a given aaguid. Defaults to returning a cached statement.
+     * Get a metadata statement for a given AAGUID.
      *
-     * This method will coordinate updating the TOC as per the `nextUpdate` property in the initial
-     * TOC download.
+     * This method will coordinate updating the cache as per the `nextUpdate` property in the initial
+     * BLOB download.
      */
     async getStatement(aaguid) {
         if (this.state === SERVICE_STATE.DISABLED) {
@@ -101,31 +113,35 @@ class MetadataService {
         if (aaguid instanceof Buffer) {
             aaguid = convertAAGUIDToString_1.default(aaguid);
         }
-        // If a TOC refresh is in progress then pause this until the service is ready
+        // If a cache refresh is in progress then pause this until the service is ready
         await this.pauseUntilReady();
         // Try to grab a cached statement
         const cachedStatement = this.statementCache[aaguid];
         if (!cachedStatement) {
-            // TODO: FIDO conformance requires this, but it seems excessive for WebAuthn. Investigate
-            // later
-            throw new Error(`Unlisted aaguid "${aaguid}" in TOC`);
+            if (this.verificationMode === 'strict') {
+                // FIDO conformance requires RP's to only support registered AAGUID's
+                throw new Error(`No metadata statement found for aaguid "${aaguid}"`);
+            }
+            // Allow registration verification to continue without using metadata
+            return;
         }
         // If the statement points to an MDS API, check the MDS' nextUpdate to see if we need to refresh
-        if (cachedStatement.tocURL) {
-            const mds = this.mdsCache[cachedStatement.tocURL];
+        if (cachedStatement.url) {
+            const mds = this.mdsCache[cachedStatement.url];
             const now = new Date();
             if (now > mds.nextUpdate) {
                 try {
                     this.setState(SERVICE_STATE.REFRESHING);
-                    await this.downloadTOC(mds);
+                    await this.downloadBlob(mds);
                 }
                 finally {
                     this.setState(SERVICE_STATE.READY);
                 }
             }
         }
+        const { entry } = cachedStatement;
         // Check to see if the this aaguid has a status report with a "compromised" status
-        for (const report of cachedStatement.statusReports) {
+        for (const report of entry.statusReports) {
             const { status } = report;
             if (status === 'USER_VERIFICATION_BYPASS' ||
                 status === 'ATTESTATION_KEY_COMPROMISE' ||
@@ -134,63 +150,39 @@ class MetadataService {
                 throw new Error(`Detected compromised aaguid "${aaguid}"`);
             }
         }
-        // If the statement hasn't been cached but came from an MDS TOC, then download it
-        if (!cachedStatement.statement && cachedStatement.tocURL) {
-            // Download the metadata statement if it's not been cached
-            const resp = await node_fetch_1.default(cachedStatement.url);
-            const data = await resp.text();
-            const statement = JSON.parse(Buffer.from(data, 'base64').toString('utf-8'));
-            const mds = this.mdsCache[cachedStatement.tocURL];
-            const hashAlg = (mds === null || mds === void 0 ? void 0 : mds.alg) === 'ES256' ? 'SHA256' : undefined;
-            const calculatedHash = base64url_1.default.encode(toHash_1.default(data, hashAlg));
-            if (calculatedHash === cachedStatement.hash) {
-                // Update the cached entry with the latest statement
-                cachedStatement.statement = statement;
-            }
-            else {
-                // From FIDO MDS docs: "Ignore the downloaded metadata statement if the hash value doesn't
-                // match."
-                cachedStatement.statement = undefined;
-                throw new Error(`Downloaded metadata for aaguid "${aaguid}" but hash did not match`);
-            }
-        }
-        return cachedStatement.statement;
+        return entry.metadataStatement;
     }
     /**
-     * Download and process the latest TOC from MDS
+     * Download and process the latest BLOB from MDS
      */
-    async downloadTOC(mds) {
-        const { url, no, rootCertURL, metadataURLSuffix } = mds;
-        // Query MDS for the latest TOC
-        const respTOC = await node_fetch_1.default(url);
-        const data = await respTOC.text();
-        // Break apart the JWT we get back
+    async downloadBlob(mds) {
+        const { url, no } = mds;
+        // Get latest "BLOB" (FIDO's terminology, not mine)
+        const resp = await node_fetch_1.default(url);
+        const data = await resp.text();
+        // Parse the JWT
         const parsedJWT = parseJWT_1.default(data);
         const header = parsedJWT[0];
         const payload = parsedJWT[1];
         if (payload.no <= no) {
             // From FIDO MDS docs: "also ignore the file if its number (no) is less or equal to the
-            // number of the last Metadata TOC object cached locally."
-            throw new Error(`Latest TOC no. "${payload.no}" is not greater than previous ${no}`);
-        }
-        let fullCertPath = header.x5c.map(convertX509CertToPEM_1.default);
-        if (rootCertURL.length > 0) {
-            // Download FIDO the root certificate and append it to the TOC certs
-            const respFIDORootCert = await node_fetch_1.default(rootCertURL);
-            const fidoRootCert = await respFIDORootCert.text();
-            fullCertPath = fullCertPath.concat(fidoRootCert);
+            // number of the last BLOB cached locally."
+            throw new Error(`Latest BLOB no. "${payload.no}" is not greater than previous ${no}`);
         }
+        const headerCertsPEM = header.x5c.map(convertCertBufferToPEM_1.default);
         try {
             // Validate the certificate chain
-            await validateCertificatePath_1.default(fullCertPath);
+            const rootCerts = settingsService_1.default.getRootCertificates({ identifier: 'mds' });
+            await validateCertificatePath_1.default(headerCertsPEM, rootCerts);
         }
-        catch (err) {
+        catch (error) {
+            const _error = error;
             // From FIDO MDS docs: "ignore the file if the chain cannot be verified or if one of the
             // chain certificates is revoked"
-            throw new Error(`TOC certificate path could not be validated: ${err.message}`);
+            throw new Error(`BLOB certificate path could not be validated: ${_error.message}`);
         }
-        // Verify the TOC JWT signature
-        const leafCert = fullCertPath[0];
+        // Verify the BLOB JWT signature
+        const leafCert = headerCertsPEM[0];
         const verified = jsrsasign_1.KJUR.jws.JWS.verifyJWT(data, leafCert, {
             alg: [header.alg],
             // Empty values to appease TypeScript and this library's subtly mis-typed @types definitions
@@ -200,30 +192,20 @@ class MetadataService {
         });
         if (!verified) {
             // From FIDO MDS docs: "The FIDO Server SHOULD ignore the file if the signature is invalid."
-            throw new Error('TOC signature could not be verified');
+            throw new Error('BLOB signature could not be verified');
         }
-        // Prepare the in-memory cache of statements.
+        // Cache statements for FIDO2 devices
         for (const entry of payload.entries) {
             // Only cache entries with an `aaguid`
             if (entry.aaguid) {
-                const _entry = entry;
-                const cached = {
-                    url: `${entry.url}${metadataURLSuffix}`,
-                    hash: entry.hash,
-                    statusReports: entry.statusReports,
-                    // An easy way for us to link back to a cached MDS API entry
-                    tocURL: url,
-                };
-                this.statementCache[_entry.aaguid] = cached;
+                this.statementCache[entry.aaguid] = { entry, url };
             }
         }
-        // Cache this MDS API
+        // Remember info about the server so we can refresh later
         const [year, month, day] = payload.nextUpdate.split('-');
         this.mdsCache[url] = {
             ...mds,
-            // Store the header `alg` so we know what to use when verifying metadata statement hashes
-            alg: header.alg,
-            // Store the payload `no` to make sure we're getting the next TOC in the sequence
+            // Store the payload `no` to make sure we're getting the next BLOB in the sequence
             no: payload.no,
             // Convert the nextUpdate property into a Date so we can determine when to re-download
             nextUpdate: new Date(parseInt(year, 10), 
@@ -264,19 +246,18 @@ class MetadataService {
     setState(newState) {
         this.state = newState;
         if (newState === SERVICE_STATE.DISABLED) {
-            // TODO: Re-enable this once we figure out logging
-            // log('MetadataService is DISABLED');
+            log('MetadataService is DISABLED');
         }
         else if (newState === SERVICE_STATE.REFRESHING) {
-            // TODO: Re-enable this once we figure out logging
-            // log('MetadataService is REFRESHING');
+            log('MetadataService is REFRESHING');
         }
         else if (newState === SERVICE_STATE.READY) {
-            // TODO: Re-enable this once we figure out logging
-            // log('MetadataService is READY');
+            log('MetadataService is READY');
         }
     }
 }
-const metadataService = new MetadataService();
-exports.default = metadataService;
+exports.BaseMetadataService = BaseMetadataService;
+// Export a service singleton
+const MetadataService = new BaseMetadataService();
+exports.default = MetadataService;
 //# sourceMappingURL=metadataService.js.map

package/dist/services/metadataService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadataService.js","sourceRoot":"","sources":["../../src/services/metadataService.ts"],"names":[],"mappings":";;;;;;AAAA,4DAA+B;AAC/B,yCAAiC;AAEjC,iGAAyE;AACzE,+FAAuE;AACvE,6FAAqE;AAOrE,kFAA0D;AAC1D,gDAA+C;AAE/C,oEAA4C;AAc5C,MAAM,aAAa,GAAG,+BAA+B,CAAC,CAAC,KAAK;AAE5D,IAAK,aAIJ;AAJD,WAAK,aAAa;IAChB,yDAAQ,CAAA;IACR,6DAAU,CAAA;IACV,mDAAK,CAAA;AACP,CAAC,EAJI,aAAa,KAAb,aAAa,QAIjB;AAMD,MAAM,GAAG,GAAG,mBAAS,CAAC,iBAAiB,CAAC,CAAC;AAEzC;;;;;GAKG;AACH,MAAa,mBAAmB;IAAhC;QACU,aAAQ,GAAiC,EAAE,CAAC;QAC5C,mBAAc,GAA0C,EAAE,CAAC;QAC3D,UAAK,GAAkB,aAAa,CAAC,QAAQ,CAAC;QAC9C,qBAAgB,GAAqB,QAAQ,CAAC;IA6QxD,CAAC;IA3QC;;;;;;;;;;;;OAYG;IACH,KAAK,CAAC,UAAU,CACd,OAII,EAAE;QAEN,MAAM,EACJ,UAAU,GAAG,CAAC,aAAa,CAAC,EAC5B,UAAU,EACV,gBAAgB,GACjB,GAAG,IAAI,CAAC;QAET,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAExC,sEAAsE;QACtE,IAAI,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,MAAM,EAAE;YACtB,IAAI,eAAe,GAAG,CAAC,CAAC;YAExB,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;gBAC7B,qEAAqE;gBACrE,IAAI,SAAS,CAAC,MAAM,EAAE;oBACpB,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG;wBACtC,KAAK,EAAE;4BACL,iBAAiB,EAAE,SAAS;4BAC5B,aAAa,EAAE,EAAE;4BACjB,sBAAsB,EAAE,YAAY;yBACrC;wBACD,GAAG,EAAE,EAAE;qBACR,CAAC;oBAEF,eAAe,IAAI,CAAC,CAAC;iBACtB;YACH,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,UAAU,eAAe,mBAAmB,CAAC,CAAC;SACnD;QAED,uFAAuF;QACvF,IAAI,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,MAAM,EAAE;YACtB,sFAAsF;YACtF,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC;YAClE,IAAI,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC;YAEnC,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE;gBAC5B,IAAI;oBACF,MAAM,IAAI,CAAC,YAAY,CAAC;wBACtB,GAAG;wBACH,EAAE,EAAE,CAAC;wBACL,UAAU,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC;qBACxB,CAAC,CAAC;iBACJ;gBAAC,OAAO,GAAG,EAAE;oBACZ,kCAAkC;oBAClC,GAAG,CAAC,gCAAgC,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;oBACjD,UAAU,IAAI,CAAC,CAAC;iBACjB;aACF;YAED,2FAA2F;YAC3F,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC;YAC9D,MAAM,SAAS,GAAG,aAAa,GAAG,iBAAiB,CAAC;YACpD,GAAG,CAAC,UAAU,SAAS,oBAAoB,UAAU,qBAAqB,CAAC,CAAC;SAC7E;QAED,IAAI,gBAAgB,EAAE;YACpB,IAAI,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;SAC1C;QAED,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAAC,MAAuB;QACxC,IAAI,IAAI,CAAC,KAAK,KAAK,aAAa,CAAC,QAAQ,EAAE;YACzC,OAAO;SACR;QAED,IAAI,CAAC,MAAM,EAAE;YACX,OAAO;SACR;QAED,IAAI,MAAM,YAAY,MAAM,EAAE;YAC5B,MAAM,GAAG,+BAAqB,CAAC,MAAM,CAAC,CAAC;SACxC;QAED,+EAA+E;QAC/E,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAE7B,iCAAiC;QACjC,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAEpD,IAAI,CAAC,eAAe,EAAE;YACpB,IAAI,IAAI,CAAC,gBAAgB,KAAK,QAAQ,EAAE;gBACtC,qEAAqE;gBACrE,MAAM,IAAI,KAAK,CAAC,2CAA2C,MAAM,GAAG,CAAC,CAAC;aACvE;YAED,qEAAqE;YACrE,OAAO;SACR;QAED,gGAAgG;QAChG,IAAI,eAAe,CAAC,GAAG,EAAE;YACvB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;YAC/C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,GAAG,GAAG,GAAG,CAAC,UAAU,EAAE;gBACxB,IAAI;oBACF,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;oBACxC,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;iBAC9B;wBAAS;oBACR,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;iBACpC;aACF;SACF;QAED,MAAM,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC;QAElC,kFAAkF;QAClF,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE;YACxC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;YAC1B,IACE,MAAM,KAAK,0BAA0B;gBACrC,MAAM,KAAK,4BAA4B;gBACvC,MAAM,KAAK,4BAA4B;gBACvC,MAAM,KAAK,8BAA8B,EACzC;gBACA,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,GAAG,CAAC,CAAC;aAC5D;SACF;QAED,OAAO,KAAK,CAAC,iBAAiB,CAAC;IACjC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY,CAAC,GAAc;QACvC,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC;QACxB,mDAAmD;QACnD,MAAM,IAAI,GAAG,MAAM,oBAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAE/B,gBAAgB;QAChB,MAAM,SAAS,GAAG,kBAAQ,CAA8B,IAAI,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAE7B,IAAI,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE;YACpB,uFAAuF;YACvF,2CAA2C;YAC3C,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,CAAC,EAAE,kCAAkC,EAAE,EAAE,CAAC,CAAC;SACvF;QAED,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,gCAAsB,CAAC,CAAC;QAC9D,IAAI;YACF,iCAAiC;YACjC,MAAM,SAAS,GAAG,yBAAe,CAAC,mBAAmB,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7E,MAAM,iCAAuB,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;SAC1D;QAAC,OAAO,KAAK,EAAE;YACd,MAAM,MAAM,GAAU,KAAc,CAAC;YACrC,wFAAwF;YACxF,iCAAiC;YACjC,MAAM,IAAI,KAAK,CAAC,iDAAiD,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;SACpF;QAED,gCAAgC;QAChC,MAAM,QAAQ,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,gBAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE;YACtD,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC;YACjB,4FAA4F;YAC5F,GAAG,EAAE,EAAE;YACP,GAAG,EAAE,EAAE;YACP,GAAG,EAAE,EAAE;SACR,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,EAAE;YACb,4FAA4F;YAC5F,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;SACzD;QAED,qCAAqC;QACrC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE;YACnC,sCAAsC;YACtC,IAAI,KAAK,CAAC,MAAM,EAAE;gBAChB,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;aACpD;SACF;QAED,yDAAyD;QACzD,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG;YACnB,GAAG,GAAG;YACN,kFAAkF;YAClF,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,sFAAsF;YACtF,UAAU,EAAE,IAAI,IAAI,CAClB,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YAClB,iCAAiC;YACjC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,EACvB,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAClB;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,eAAe;QAC3B,IAAI,IAAI,CAAC,KAAK,KAAK,aAAa,CAAC,KAAK,EAAE;YACtC,OAAO;SACR;QAED,uCAAuC;QACvC,MAAM,YAAY,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACzD,MAAM,cAAc,GAAG,KAAK,CAAC;YAC7B,MAAM,UAAU,GAAG,GAAG,CAAC;YACvB,IAAI,UAAU,GAAG,cAAc,GAAG,UAAU,CAAC;YAE7C,sDAAsD;YACtD,MAAM,UAAU,GAAmB,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE;gBACzD,IAAI,UAAU,GAAG,CAAC,EAAE;oBAClB,aAAa,CAAC,UAAU,CAAC,CAAC;oBAC1B,MAAM,CAAC,iCAAiC,cAAc,GAAG,IAAI,UAAU,CAAC,CAAC;iBAC1E;qBAAM,IAAI,IAAI,CAAC,KAAK,KAAK,aAAa,CAAC,KAAK,EAAE;oBAC7C,aAAa,CAAC,UAAU,CAAC,CAAC;oBAC1B,OAAO,EAAE,CAAC;iBACX;gBAED,UAAU,IAAI,CAAC,CAAC;YAClB,CAAC,EAAE,UAAU,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;QAEH,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;OAEG;IACK,QAAQ,CAAC,QAAuB;QACtC,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;QAEtB,IAAI,QAAQ,KAAK,aAAa,CAAC,QAAQ,EAAE;YACvC,GAAG,CAAC,6BAA6B,CAAC,CAAC;SACpC;aAAM,IAAI,QAAQ,KAAK,aAAa,CAAC,UAAU,EAAE;YAChD,GAAG,CAAC,+BAA+B,CAAC,CAAC;SACtC;aAAM,IAAI,QAAQ,KAAK,aAAa,CAAC,KAAK,EAAE;YAC3C,GAAG,CAAC,0BAA0B,CAAC,CAAC;SACjC;IACH,CAAC;CACF;AAjRD,kDAiRC;AAED,6BAA6B;AAC7B,MAAM,eAAe,GAAG,IAAI,mBAAmB,EAAE,CAAC;AAElD,kBAAe,eAAe,CAAC"}

package/dist/services/settingsService.d.ts

@@ -0,0 +1,26 @@
+/// <reference types="node" />
+import { AttestationFormat } from '../helpers/decodeAttestationObject';
+declare type RootCertIdentifier = AttestationFormat | 'mds';
+declare class SettingsService {
+    private pemCertificates;
+    constructor();
+    /**
+     * Set potential root certificates for attestation formats that use them. Root certs will be tried
+     * one-by-one when validating a certificate path.
+     *
+     * Certificates can be specified as a raw `Buffer`, or as a PEM-formatted string. If a
+     * `Buffer` is passed in it will be converted to PEM format.
+     */
+    setRootCertificates(opts: {
+        identifier: RootCertIdentifier;
+        certificates: (Buffer | string)[];
+    }): void;
+    /**
+     * Get any registered root certificates for the specified attestation format
+     */
+    getRootCertificates(opts: {
+        identifier: RootCertIdentifier;
+    }): string[];
+}
+declare const settingsService: SettingsService;
+export default settingsService;

package/dist/services/settingsService.js

@@ -0,0 +1,63 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const convertCertBufferToPEM_1 = __importDefault(require("../helpers/convertCertBufferToPEM"));
+const android_safetynet_1 = require("./defaultRootCerts/android-safetynet");
+const android_key_1 = require("./defaultRootCerts/android-key");
+const apple_1 = require("./defaultRootCerts/apple");
+const mds_1 = require("./defaultRootCerts/mds");
+class SettingsService {
+    constructor() {
+        this.pemCertificates = new Map();
+    }
+    /**
+     * Set potential root certificates for attestation formats that use them. Root certs will be tried
+     * one-by-one when validating a certificate path.
+     *
+     * Certificates can be specified as a raw `Buffer`, or as a PEM-formatted string. If a
+     * `Buffer` is passed in it will be converted to PEM format.
+     */
+    setRootCertificates(opts) {
+        const { identifier, certificates } = opts;
+        const newCertificates = [];
+        for (const cert of certificates) {
+            if (cert instanceof Buffer) {
+                newCertificates.push(convertCertBufferToPEM_1.default(cert));
+            }
+            else {
+                newCertificates.push(cert);
+            }
+        }
+        this.pemCertificates.set(identifier, newCertificates);
+    }
+    /**
+     * Get any registered root certificates for the specified attestation format
+     */
+    getRootCertificates(opts) {
+        var _a;
+        const { identifier } = opts;
+        return (_a = this.pemCertificates.get(identifier)) !== null && _a !== void 0 ? _a : [];
+    }
+}
+const settingsService = new SettingsService();
+// Initialize default certificates
+settingsService.setRootCertificates({
+    identifier: 'android-key',
+    certificates: [android_key_1.Google_Hardware_Attestation_Root_1, android_key_1.Google_Hardware_Attestation_Root_2],
+});
+settingsService.setRootCertificates({
+    identifier: 'android-safetynet',
+    certificates: [android_safetynet_1.GlobalSign_R2, android_safetynet_1.GlobalSign_Root_CA],
+});
+settingsService.setRootCertificates({
+    identifier: 'apple',
+    certificates: [apple_1.Apple_WebAuthn_Root_CA],
+});
+settingsService.setRootCertificates({
+    identifier: 'mds',
+    certificates: [mds_1.GlobalSign_Root_CA_R3],
+});
+exports.default = settingsService;
+//# sourceMappingURL=settingsService.js.map

package/dist/services/settingsService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settingsService.js","sourceRoot":"","sources":["../../src/services/settingsService.ts"],"names":[],"mappings":";;;;;AACA,+FAAuE;AAEvE,4EAAyF;AACzF,gEAGwC;AACxC,oDAAkE;AAClE,gDAA+D;AAI/D,MAAM,eAAe;IAInB;QACE,IAAI,CAAC,eAAe,GAAG,IAAI,GAAG,EAAE,CAAC;IACnC,CAAC;IAED;;;;;;OAMG;IACH,mBAAmB,CAAC,IAGnB;QACC,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC;QAE1C,MAAM,eAAe,GAAa,EAAE,CAAC;QACrC,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE;YAC/B,IAAI,IAAI,YAAY,MAAM,EAAE;gBAC1B,eAAe,CAAC,IAAI,CAAC,gCAAsB,CAAC,IAAI,CAAC,CAAC,CAAC;aACpD;iBAAM;gBACL,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aAC5B;SACF;QAED,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,IAAwC;;QAC1D,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAC5B,OAAO,MAAA,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,mCAAI,EAAE,CAAC;IACpD,CAAC;CACF;AAED,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;AAE9C,kCAAkC;AAClC,eAAe,CAAC,mBAAmB,CAAC;IAClC,UAAU,EAAE,aAAa;IACzB,YAAY,EAAE,CAAC,gDAAkC,EAAE,gDAAkC,CAAC;CACvF,CAAC,CAAC;AAEH,eAAe,CAAC,mBAAmB,CAAC;IAClC,UAAU,EAAE,mBAAmB;IAC/B,YAAY,EAAE,CAAC,iCAAa,EAAE,sCAAkB,CAAC;CAClD,CAAC,CAAC;AAEH,eAAe,CAAC,mBAAmB,CAAC;IAClC,UAAU,EAAE,OAAO;IACnB,YAAY,EAAE,CAAC,8BAAsB,CAAC;CACvC,CAAC,CAAC;AAEH,eAAe,CAAC,mBAAmB,CAAC;IAClC,UAAU,EAAE,KAAK;IACjB,YAAY,EAAE,CAAC,2BAAqB,CAAC;CACtC,CAAC,CAAC;AAEH,kBAAe,eAAe,CAAC"}

package/package.json

@@ -1,9 +1,23 @@
 {
   "name": "@simplewebauthn/server",
-  "version": "3.0.0",
+  "version": "4.3.0",
   "description": "SimpleWebAuthn for Servers",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
+  "exports": {
+    ".": "./dist/index.js",
+    "./helpers": "./dist/helpers/index.js"
+  },
+  "typesVersions": {
+    "*": {
+      "./dist/index.d.ts": [
+        "./dist/index.d.ts"
+      ],
+      "helpers": [
+        "./dist/helpers/index.d.ts"
+      ]
+    }
+  },
   "author": "Matthew Miller <matthew@millerti.me>",
   "license": "MIT",
   "repository": {
@@ -32,25 +46,27 @@
     "node"
   ],
   "dependencies": {
-    "@peculiar/asn1-android": "^2.0.26",
-    "@peculiar/asn1-schema": "^2.0.26",
-    "@peculiar/asn1-x509": "^2.0.26",
-    "@simplewebauthn/typescript-types": "^3.0.0",
+    "@peculiar/asn1-android": "^2.0.38",
+    "@peculiar/asn1-schema": "^2.0.38",
+    "@peculiar/asn1-x509": "^2.0.38",
+    "@simplewebauthn/typescript-types": "^4.0.0",
     "base64url": "^3.0.1",
     "cbor": "^5.1.0",
+    "debug": "^4.3.2",
     "elliptic": "^6.5.3",
-    "jsrsasign": "^10.2.0",
+    "jsrsasign": "^10.4.0",
     "jwk-to-pem": "^2.0.4",
     "node-fetch": "^2.6.0",
     "node-rsa": "^1.1.1"
   },
-  "gitHead": "8324f1fff96fb08422e609aa91a646dc2b08d184",
+  "gitHead": "717b7037f58ff18003309e2c1f05f5a2f7036c2d",
   "devDependencies": {
     "@types/cbor": "^5.0.1",
-    "@types/elliptic": "^6.4.12",
-    "@types/jsrsasign": "^8.0.11",
-    "@types/jwk-to-pem": "^2.0.0",
-    "@types/node-fetch": "^2.5.7",
-    "@types/node-rsa": "^1.0.0"
+    "@types/debug": "^4.1.7",
+    "@types/elliptic": "^6.4.13",
+    "@types/jsrsasign": "^8.0.13",
+    "@types/jwk-to-pem": "^2.0.1",
+    "@types/node-fetch": "^2.5.12",
+    "@types/node-rsa": "^1.1.1"
   }
 }

package/.env

@@ -1,2 +0,0 @@
-ENABLE_MDS=true
-MDS_API_TOKEN=80aaf72ececea00db08ecea79e1d618a186e1b54ce771429

package/dist/assertion/generateAssertionOptions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"generateAssertionOptions.js","sourceRoot":"","sources":["../../src/assertion/generateAssertionOptions.ts"],"names":[],"mappings":";;;;;AAMA,0DAAkC;AAElC,qFAA6D;AAW7D;;;;;;;;;;;;GAYG;AACH,SAAwB,wBAAwB,CAC9C,UAAwC,EAAE;IAE1C,MAAM,EACJ,gBAAgB,EAChB,SAAS,GAAG,2BAAiB,EAAE,EAC/B,OAAO,GAAG,KAAK,EACf,gBAAgB,EAChB,UAAU,EACV,IAAI,GACL,GAAG,OAAO,CAAC;IAEZ,OAAO;QACL,SAAS,EAAE,mBAAS,CAAC,MAAM,CAAC,SAAS,CAAC;QACtC,gBAAgB,EAAE,gBAAgB,aAAhB,gBAAgB,uBAAhB,gBAAgB,CAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/C,GAAG,IAAI;YACP,EAAE,EAAE,mBAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAY,CAAC;SACxC,CAAC,CAAC;QACH,OAAO;QACP,gBAAgB;QAChB,UAAU;QACV,IAAI,EAAE,IAAI;KACX,CAAC;AACJ,CAAC;AAvBD,2CAuBC"}

package/dist/assertion/verifyAssertionResponse.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"verifyAssertionResponse.js","sourceRoot":"","sources":["../../src/assertion/verifyAssertionResponse.ts"],"names":[],"mappings":";;;;;AAAA,0DAAkC;AAOlC,2FAAmE;AACnE,+DAAuC;AACvC,6FAAqE;AACrE,iFAAyD;AACzD,+FAAuE;AACvE,qFAA6D;AAW7D;;;;;;;;;;;;;;GAcG;AACH,SAAwB,uBAAuB,CAC7C,OAAoC;IAEpC,MAAM,EACJ,UAAU,EACV,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,oBAAoB,GACrB,GAAG,OAAO,CAAC;IACZ,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC;IAEjE,oCAAoC;IACpC,IAAI,CAAC,EAAE,EAAE;QACP,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;KAC1C;IAED,iCAAiC;IACjC,IAAI,EAAE,KAAK,KAAK,EAAE;QAChB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;KAC5D;IAED,0CAA0C;IAC1C,IAAI,cAAc,KAAK,YAAY,EAAE;QACnC,MAAM,IAAI,KAAK,CAAC,8BAA8B,cAAc,yBAAyB,CAAC,CAAC;KACxF;IAED,IAAI,CAAC,QAAQ,EAAE;QACb,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;KAChD;IAED,IAAI,QAAO,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,cAAc,CAAA,KAAK,QAAQ,EAAE;QAChD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;KACxE;IAED,MAAM,cAAc,GAAG,8BAAoB,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAErE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,cAAc,CAAC;IAEjE,wCAAwC;IACxC,IAAI,IAAI,KAAK,cAAc,EAAE;QAC3B,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;KACvD;IAED,sDAAsD;IACtD,IAAI,SAAS,KAAK,iBAAiB,EAAE;QACnC,MAAM,IAAI,KAAK,CACb,mCAAmC,SAAS,gBAAgB,iBAAiB,GAAG,CACjF,CAAC;KACH;IAED,oCAAoC;IACpC,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE;QACjC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;YACpC,MAAM,IAAI,KAAK,CACb,gCAAgC,MAAM,uBAAuB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACzF,CAAC;SACH;KACF;SAAM;QACL,IAAI,MAAM,KAAK,cAAc,EAAE;YAC7B,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,gBAAgB,cAAc,GAAG,CAAC,CAAC;SAC1F;KACF;IAED,IAAI,CAAC,2BAAiB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE;QAClD,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;KACrF;IAED,IAAI,CAAC,2BAAiB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE;QAC1C,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;KAC7E;IAED,IAAI,QAAQ,CAAC,UAAU,IAAI,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ,EAAE;QAClE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;KACpE;IAED,IAAI,YAAY,EAAE;QAChB,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE;YACpC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;SAClE;QAED,IAAI,CAAC,SAAS,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;YAC7E,MAAM,IAAI,KAAK,CAAC,kCAAkC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;SAC1E;KACF;IAED,MAAM,cAAc,GAAG,mBAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IACtE,MAAM,cAAc,GAAG,gCAAsB,CAAC,cAAc,CAAC,CAAC;IAC9D,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC;IAEpD,yCAAyC;IACzC,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE;QACpC,MAAM,gBAAgB,GAAG,gBAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE;YACtC,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;SAC1C;KACF;SAAM;QACL,kEAAkE;QAClE,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;YAC9C,MAAM,gBAAgB,GAAG,gBAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;YAChE,OAAO,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,UAAU,EAAE;YACf,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;SAC1C;KACF;IAED,wCAAwC;IACxC,IAAI,oBAAoB,EAAE;QACxB,IAAI,oBAAoB,KAAK,UAAU,EAAE;YACvC,0DAA0D;YAC1D,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE;gBACb,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;aAC/E;SACF;aAAM,IAAI,oBAAoB,KAAK,WAAW,IAAI,oBAAoB,KAAK,aAAa,EAAE;YACzF,oBAAoB;SACrB;KACF;SAAM;QACL,wDAAwD;QACxD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE;YACb,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;SACtD;KACF;IAED,MAAM,cAAc,GAAG,gBAAM,CAAC,mBAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;IAC3E,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;IAEtE,MAAM,SAAS,GAAG,+BAAqB,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,mBAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAEzD,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,aAAa,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,OAAO,IAAI,aAAa,CAAC,OAAO,EAAE;QAClF,sFAAsF;QACtF,2FAA2F;QAC3F,sFAAsF;QACtF,gDAAgD;QAChD,MAAM,IAAI,KAAK,CACb,0BAA0B,OAAO,4BAA4B,aAAa,CAAC,OAAO,EAAE,CACrF,CAAC;KACH;IAED,MAAM,QAAQ,GAAG;QACf,QAAQ,EAAE,yBAAe,CAAC,SAAS,EAAE,aAAa,EAAE,SAAS,CAAC;QAC9D,aAAa,EAAE;YACb,UAAU,EAAE,OAAO;YACnB,YAAY,EAAE,aAAa,CAAC,YAAY;SACzC;KACF,CAAC;IAEF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAvJD,0CAuJC"}

package/dist/attestation/generateAttestationOptions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"generateAttestationOptions.js","sourceRoot":"","sources":["../../src/attestation/generateAttestationOptions.ts"],"names":[],"mappings":";;;;;;AASA,0DAAkC;AAElC,qFAA6D;AAiB7D;;;;GAIG;AACU,QAAA,iCAAiC,GAA8B;IAC1E,mBAAmB;IACnB,CAAC,CAAC;IACF,QAAQ;IACR,CAAC,CAAC;IACF,mBAAmB;IACnB,CAAC,EAAE;IACH,wBAAwB;IACxB,CAAC,EAAE;IACH,wBAAwB;IACxB,CAAC,EAAE;IACH,wBAAwB;IACxB,CAAC,EAAE;IACH,+BAA+B;IAC/B,CAAC,GAAG;IACJ,+BAA+B;IAC/B,CAAC,GAAG;IACJ,+BAA+B;IAC/B,CAAC,GAAG;IACJ,mEAAmE;IACnE,CAAC,KAAK;CACP,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,6BAA6B,GAAmC;IACpE,kBAAkB,EAAE,KAAK;IACzB,gBAAgB,EAAE,WAAW;CAC9B,CAAC;AAEF;;;GAGG;AACH,MAAM,4BAA4B,GAAG,yCAAiC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;AAEnG;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAwB,0BAA0B,CAChD,OAAuC;IAEvC,MAAM,EACJ,MAAM,EACN,IAAI,EACJ,MAAM,EACN,QAAQ,EACR,SAAS,GAAG,2BAAiB,EAAE,EAC/B,eAAe,GAAG,QAAQ,EAC1B,OAAO,GAAG,KAAK,EACf,eAAe,GAAG,MAAM,EACxB,kBAAkB,GAAG,EAAE,EACvB,sBAAsB,GAAG,6BAA6B,EACtD,UAAU,EACV,qBAAqB,GAAG,4BAA4B,GACrD,GAAG,OAAO,CAAC;IAEZ;;OAEG;IACH,MAAM,gBAAgB,GAAoC,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACzF,GAAG,EAAE,EAAE;QACP,IAAI,EAAE,YAAY;KACnB,CAAC,CAAC,CAAC;IAEJ;;;;;OAKG;IACH,IAAI,sBAAsB,CAAC,WAAW,KAAK,UAAU,EAAE;QACrD,sBAAsB,CAAC,kBAAkB,GAAG,IAAI,CAAC;KAClD;SAAM;QACL,sBAAsB,CAAC,kBAAkB,GAAG,KAAK,CAAC;KACnD;IAED,OAAO;QACL,SAAS,EAAE,mBAAS,CAAC,MAAM,CAAC,SAAS,CAAC;QACtC,EAAE,EAAE;YACF,IAAI,EAAE,MAAM;YACZ,EAAE,EAAE,IAAI;SACT;QACD,IAAI,EAAE;YACJ,EAAE,EAAE,MAAM;YACV,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,eAAe;SAC7B;QACD,gBAAgB;QAChB,OAAO;QACP,WAAW,EAAE,eAAe;QAC5B,kBAAkB,EAAE,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClD,GAAG,IAAI;YACP,EAAE,EAAE,mBAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAY,CAAC;SACxC,CAAC,CAAC;QACH,sBAAsB;QACtB,UAAU;KACX,CAAC;AACJ,CAAC;AA3DD,6CA2DC"}

package/dist/attestation/verifications/tpm/constants.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../src/attestation/verifications/tpm/constants.ts"],"names":[],"mappings":";;;AAAA,sDAAsD;AACzC,QAAA,MAAM,GAA8B;IAC/C,MAAM,EAAE,oBAAoB;IAC5B,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,oBAAoB;IAC5B,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,kBAAkB;IAC1B,MAAM,EAAE,6BAA6B;IACrC,MAAM,EAAE,6BAA6B;IACrC,MAAM,EAAE,uBAAuB;IAC/B,MAAM,EAAE,qBAAqB;IAC7B,MAAM,EAAE,oBAAoB;IAC5B,MAAM,EAAE,wBAAwB;IAChC,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,oBAAoB;IAC5B,MAAM,EAAE,kBAAkB;IAC1B,MAAM,EAAE,oBAAoB;IAC5B,MAAM,EAAE,oBAAoB;CAC7B,CAAC;AAEW,QAAA,OAAO,GAA8B;IAChD,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,aAAa;IACrB,kBAAkB;IAClB,MAAM,EAAE,cAAc;IACtB,MAAM,EAAE,cAAc;IACtB,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,cAAc;IACtB,MAAM,EAAE,mBAAmB;IAC3B,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,cAAc;IACtB,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,cAAc;IACtB,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,cAAc;IACtB,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,mBAAmB;IAC3B,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,wBAAwB;IAChC,MAAM,EAAE,cAAc;IACtB,MAAM,EAAE,wBAAwB;IAChC,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,mBAAmB;IAC3B,MAAM,EAAE,kBAAkB;IAC1B,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,aAAa;IACrB,MAAM,EAAE,aAAa;CACtB,CAAC;AAEW,QAAA,aAAa,GAA8B;IACtD,MAAM,EAAE,cAAc;IACtB,MAAM,EAAE,mBAAmB;IAC3B,MAAM,EAAE,mBAAmB;IAC3B,MAAM,EAAE,mBAAmB;IAC3B,MAAM,EAAE,mBAAmB;IAC3B,MAAM,EAAE,mBAAmB;IAC3B,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,kBAAkB;CAC3B,CAAC;AAOW,QAAA,iBAAiB,GAAwC;IACpE,aAAa,EAAE;QACb,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,KAAK;KACV;IACD,aAAa,EAAE;QACb,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,MAAM;KACX;IACD,aAAa,EAAE;QACb,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,MAAM;KACX;IACD,aAAa,EAAE;QACb,IAAI,EAAE,KAAK;QACX,EAAE,EAAE,KAAK;KACV;IACD,aAAa,EAAE;QACb,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,KAAK;KACV;IACD,aAAa,EAAE;QACb,IAAI,EAAE,OAAO;QACb,EAAE,EAAE,MAAM;KACX;IACD,aAAa,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,EAAE,EAAE,KAAK;KACV;IACD,aAAa,EAAE;QACb,IAAI,EAAE,wBAAwB;QAC9B,EAAE,EAAE,KAAK;KACV;IACD,aAAa,EAAE;QACb,IAAI,EAAE,SAAS;QACf,EAAE,EAAE,KAAK;KACV;IACD,aAAa,EAAE;QACb,IAAI,EAAE,oBAAoB;QAC1B,EAAE,EAAE,KAAK;KACV;IACD,aAAa,EAAE;QACb,IAAI,EAAE,UAAU;QAChB,EAAE,EAAE,MAAM;KACX;IACD,aAAa,EAAE;QACb,IAAI,EAAE,MAAM;QACZ,EAAE,EAAE,MAAM;KACX;IACD,aAAa,EAAE;QACb,IAAI,EAAE,qBAAqB;QAC3B,EAAE,EAAE,KAAK;KACV;IACD,aAAa,EAAE;QACb,IAAI,EAAE,SAAS;QACf,EAAE,EAAE,MAAM;KACX;IACD,aAAa,EAAE;QACb,IAAI,EAAE,SAAS;QACf,EAAE,EAAE,KAAK;KACV;IACD,aAAa,EAAE;QACb,IAAI,EAAE,mBAAmB;QACzB,EAAE,EAAE,KAAK;KACV;IACD,aAAa,EAAE;QACb,IAAI,EAAE,SAAS;QACf,EAAE,EAAE,KAAK;KACV;IACD,aAAa,EAAE;QACb,IAAI,EAAE,kBAAkB;QACxB,EAAE,EAAE,MAAM;KACX;IACD,aAAa,EAAE;QACb,IAAI,EAAE,eAAe;QACrB,EAAE,EAAE,MAAM;KACX;CACF,CAAC"}

package/dist/attestation/verifications/tpm/parseCertInfo.js

@@ -1,65 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const constants_1 = require("./constants");
-/**
- * Cut up a TPM attestation's certInfo into intelligible chunks
- */
-function parseCertInfo(certInfo) {
-    let certBuffer = certInfo;
-    // Get a magic constant
-    const magic = certBuffer.slice(0, 4).readUInt32BE(0);
-    certBuffer = certBuffer.slice(4);
-    // Determine the algorithm used for attestation
-    const typeBuffer = certBuffer.slice(0, 2);
-    certBuffer = certBuffer.slice(2);
-    const type = constants_1.TPM_ST[typeBuffer.readUInt16BE(0)];
-    // The name of a parent entity, can be ignored
-    const qualifiedSignerLength = certBuffer.slice(0, 2).readUInt16BE(0);
-    certBuffer = certBuffer.slice(2);
-    const qualifiedSigner = certBuffer.slice(0, qualifiedSignerLength);
-    certBuffer = certBuffer.slice(qualifiedSignerLength);
-    // Get the expected hash of `attsToBeSigned`
-    const extraDataLength = certBuffer.slice(0, 2).readUInt16BE(0);
-    certBuffer = certBuffer.slice(2);
-    const extraData = certBuffer.slice(0, extraDataLength);
-    certBuffer = certBuffer.slice(extraDataLength);
-    // Information about the TPM device's internal clock, can be ignored
-    const clockInfoBuffer = certBuffer.slice(0, 17);
-    certBuffer = certBuffer.slice(17);
-    const clockInfo = {
-        clock: clockInfoBuffer.slice(0, 8),
-        resetCount: clockInfoBuffer.slice(8, 12).readUInt32BE(0),
-        restartCount: clockInfoBuffer.slice(12, 16).readUInt32BE(0),
-        safe: !!clockInfoBuffer[16],
-    };
-    // TPM device firmware version
-    const firmwareVersion = certBuffer.slice(0, 8);
-    certBuffer = certBuffer.slice(8);
-    // Attested Name
-    const attestedNameLength = certBuffer.slice(0, 2).readUInt16BE(0);
-    certBuffer = certBuffer.slice(2);
-    const attestedName = certBuffer.slice(0, attestedNameLength);
-    certBuffer = certBuffer.slice(attestedNameLength);
-    // Attested qualified name, can be ignored
-    const qualifiedNameLength = certBuffer.slice(0, 2).readUInt16BE(0);
-    certBuffer = certBuffer.slice(2);
-    const qualifiedName = certBuffer.slice(0, qualifiedNameLength);
-    certBuffer = certBuffer.slice(qualifiedNameLength);
-    const attested = {
-        nameAlg: constants_1.TPM_ALG[attestedName.slice(0, 2).readUInt16BE(0)],
-        nameAlgBuffer: attestedName.slice(0, 2),
-        name: attestedName,
-        qualifiedName,
-    };
-    return {
-        magic,
-        type,
-        qualifiedSigner,
-        extraData,
-        clockInfo,
-        firmwareVersion,
-        attested,
-    };
-}
-exports.default = parseCertInfo;
-//# sourceMappingURL=parseCertInfo.js.map

package/dist/attestation/verifications/tpm/parseCertInfo.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"parseCertInfo.js","sourceRoot":"","sources":["../../../../src/attestation/verifications/tpm/parseCertInfo.ts"],"names":[],"mappings":";;AAAA,2CAA8C;AAE9C;;GAEG;AACH,SAAwB,aAAa,CAAC,QAAgB;IACpD,IAAI,UAAU,GAAG,QAAQ,CAAC;IAE1B,uBAAuB;IACvB,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACrD,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEjC,+CAA+C;IAC/C,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1C,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,kBAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhD,8CAA8C;IAC9C,MAAM,qBAAqB,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACrE,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,eAAe,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;IACnE,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAErD,4CAA4C;IAC5C,MAAM,eAAe,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC/D,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IACvD,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAE/C,oEAAoE;IACpE,MAAM,eAAe,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChD,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG;QAChB,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAClC,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;QACxD,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;QAC3D,IAAI,EAAE,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC;KAC5B,CAAC;IAEF,8BAA8B;IAC9B,MAAM,eAAe,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/C,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEjC,gBAAgB;IAChB,MAAM,kBAAkB,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClE,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAC7D,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAElD,0CAA0C;IAC1C,MAAM,mBAAmB,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACnE,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC;IAC/D,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAEnD,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,mBAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC1D,aAAa,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,EAAE,YAAY;QAClB,aAAa;KACd,CAAC;IAEF,OAAO;QACL,KAAK;QACL,IAAI;QACJ,eAAe;QACf,SAAS;QACT,SAAS;QACT,eAAe;QACf,QAAQ;KACT,CAAC;AACJ,CAAC;AAlED,gCAkEC"}

package/dist/attestation/verifications/tpm/parsePubArea.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"parsePubArea.js","sourceRoot":"","sources":["../../../../src/attestation/verifications/tpm/parsePubArea.ts"],"names":[],"mappings":";;AAAA,2CAAqD;AAErD;;GAEG;AACH,SAAwB,YAAY,CAAC,OAAe;IAClD,IAAI,SAAS,GAAW,OAAO,CAAC;IAEhC,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzC,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,mBAAO,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAEjD,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,mBAAO,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvD,uCAAuC;IACvC,MAAM,mBAAmB,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClE,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,gBAAgB,GAAG;QACvB,QAAQ,EAAE,CAAC,CAAC,CAAC,mBAAmB,GAAG,CAAC,CAAC;QACrC,OAAO,EAAE,CAAC,CAAC,CAAC,mBAAmB,GAAG,CAAC,CAAC;QACpC,WAAW,EAAE,CAAC,CAAC,CAAC,mBAAmB,GAAG,CAAC,CAAC;QACxC,mBAAmB,EAAE,CAAC,CAAC,CAAC,mBAAmB,GAAG,EAAE,CAAC;QACjD,YAAY,EAAE,CAAC,CAAC,CAAC,mBAAmB,GAAG,EAAE,CAAC;QAC1C,eAAe,EAAE,CAAC,CAAC,CAAC,mBAAmB,GAAG,EAAE,CAAC;QAC7C,IAAI,EAAE,CAAC,CAAC,CAAC,mBAAmB,GAAG,GAAG,CAAC;QACnC,oBAAoB,EAAE,CAAC,CAAC,CAAC,mBAAmB,GAAG,IAAI,CAAC;QACpD,UAAU,EAAE,CAAC,CAAC,CAAC,mBAAmB,GAAG,KAAK,CAAC;QAC3C,OAAO,EAAE,CAAC,CAAC,CAAC,mBAAmB,GAAG,KAAK,CAAC;QACxC,aAAa,EAAE,CAAC,CAAC,CAAC,mBAAmB,GAAG,MAAM,CAAC;KAChD,CAAC;IAEF,6CAA6C;IAC7C,MAAM,gBAAgB,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC/D,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACxD,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAE9C,oDAAoD;IACpD,MAAM,UAAU,GAAiD,EAAE,CAAC;IACpE,IAAI,IAAI,KAAK,aAAa,EAAE;QAC1B,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzC,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAEhC,UAAU,CAAC,GAAG,GAAG;YACf,SAAS,EAAE,mBAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACzD,MAAM,EAAE,mBAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACtD,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;YAC9C,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;SACjD,CAAC;KACH;SAAM,IAAI,IAAI,KAAK,aAAa,EAAE;QACjC,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxC,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAE/B,UAAU,CAAC,GAAG,GAAG;YACf,SAAS,EAAE,mBAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACzD,MAAM,EAAE,mBAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACtD,OAAO,EAAE,yBAAa,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC7D,GAAG,EAAE,mBAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;SACpD,CAAC;KACH;SAAM;QACL,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,SAAS,CAAC,CAAC;KACpD;IAED,qCAAqC;IACrC,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC3D,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;IAChD,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAE1C,OAAO;QACL,IAAI;QACJ,OAAO;QACP,gBAAgB;QAChB,UAAU;QACV,UAAU;QACV,MAAM;KACP,CAAC;AACJ,CAAC;AA1ED,+BA0EC"}

package/dist/attestation/verifications/tpm/verifyTPM.d.ts

@@ -1,11 +0,0 @@
-/// <reference types="node" />
-import type { AttestationStatement } from '../../../helpers/decodeAttestationObject';
-declare type Options = {
-    aaguid: Buffer;
-    attStmt: AttestationStatement;
-    authData: Buffer;
-    credentialPublicKey: Buffer;
-    clientDataHash: Buffer;
-};
-export default function verifyTPM(options: Options): Promise<boolean>;
-export {};