@simplewebauthn/server 8.0.1 → 8.1.1

package/esm/authentication/verifyAuthenticationResponse.d.ts

@@ -2,7 +2,7 @@ import type { AuthenticationResponseJSON, AuthenticatorDevice, CredentialDeviceT
 import { AuthenticationExtensionsAuthenticatorOutputs } from '../helpers/decodeAuthenticatorExtensions.js';
 export type VerifyAuthenticationResponseOpts = {
     response: AuthenticationResponseJSON;
-    expectedChallenge: string | ((challenge: string) => boolean);
+    expectedChallenge: string | ((challenge: string) => boolean | Promise<boolean>);
     expectedOrigin: string | string[];
     expectedRPID: string | string[];
     authenticator: AuthenticatorDevice;

package/esm/authentication/verifyAuthenticationResponse.js

@@ -53,7 +53,7 @@ export async function verifyAuthenticationResponse(options) {
     }
     // Ensure the device provided the challenge we gave it
     if (typeof expectedChallenge === 'function') {
-        if (!expectedChallenge(challenge)) {
+        if (!(await expectedChallenge(challenge))) {
             throw new Error(`Custom challenge verifier returned false for registration response challenge "${challenge}"`);
         }
     }

package/esm/deps.d.ts

@@ -2,8 +2,6 @@ export type { AttestationConveyancePreference, AuthenticationExtensionsClientInp
 export * as cborx from 'cbor-x';
 export { default as base64 } from '@hexagon/base64';
 export { fetch as crossFetch } from 'cross-fetch';
-export { default as debug } from 'debug';
-export type { Debugger } from '@types/debug';
 export { AsnParser, AsnSerializer } from '@peculiar/asn1-schema';
 export { AuthorityKeyIdentifier, BasicConstraints, Certificate, CertificateList, CRLDistributionPoints, ExtendedKeyUsage, id_ce_authorityKeyIdentifier, id_ce_basicConstraints, id_ce_cRLDistributionPoints, id_ce_extKeyUsage, id_ce_subjectAltName, id_ce_subjectKeyIdentifier, Name, SubjectAlternativeName, SubjectKeyIdentifier, } from '@peculiar/asn1-x509';
 export { ECDSASigValue, ECParameters, id_ecPublicKey, id_secp256r1, id_secp384r1, } from '@peculiar/asn1-ecc';

package/esm/deps.js

@@ -4,8 +4,6 @@ export * as cborx from 'cbor-x';
 export { default as base64 } from '@hexagon/base64';
 // cross-fetch
 export { fetch as crossFetch } from 'cross-fetch';
-// debug
-export { default as debug } from 'debug';
 // @peculiar libraries
 export { AsnParser, AsnSerializer } from '@peculiar/asn1-schema';
 export { AuthorityKeyIdentifier, BasicConstraints, Certificate, CertificateList, CRLDistributionPoints, ExtendedKeyUsage, id_ce_authorityKeyIdentifier, id_ce_basicConstraints, id_ce_cRLDistributionPoints, id_ce_extKeyUsage, id_ce_subjectAltName, id_ce_subjectKeyIdentifier, Name, SubjectAlternativeName, SubjectKeyIdentifier, } from '@peculiar/asn1-x509';

package/esm/helpers/logging.d.ts

@@ -1,4 +1,3 @@
-import { Debugger } from '../deps.js';
 /**
  * Generate an instance of a `debug` logger that extends off of the "simplewebauthn" namespace for
  * consistent naming.
@@ -13,4 +12,4 @@ import { Debugger } from '../deps.js';
  * log('hello'); // simplewebauthn:mds hello +0ms
  * ```
  */
-export declare function getLogger(name: string): Debugger;
+export declare function getLogger(_name: string): (message: string, ..._rest: unknown[]) => void;

package/esm/helpers/logging.js

@@ -1,5 +1,5 @@
-import { debug } from '../deps.js';
-const defaultLogger = debug('SimpleWebAuthn');
+// import { debug, Debugger } from '../deps.ts';
+// const defaultLogger = debug('SimpleWebAuthn');
 /**
  * Generate an instance of a `debug` logger that extends off of the "simplewebauthn" namespace for
  * consistent naming.
@@ -14,6 +14,7 @@ const defaultLogger = debug('SimpleWebAuthn');
  * log('hello'); // simplewebauthn:mds hello +0ms
  * ```
  */
-export function getLogger(name) {
-    return defaultLogger.extend(name);
+export function getLogger(_name) {
+    // This is a noop for now while I search for a better debug logger technique
+    return (_message, ..._rest) => { };
 }

package/esm/registration/verifyRegistrationResponse.d.ts

@@ -3,7 +3,7 @@ import { AttestationFormat, AttestationStatement } from '../helpers/decodeAttest
 import { AuthenticationExtensionsAuthenticatorOutputs } from '../helpers/decodeAuthenticatorExtensions.js';
 export type VerifyRegistrationResponseOpts = {
     response: RegistrationResponseJSON;
-    expectedChallenge: string | ((challenge: string) => boolean);
+    expectedChallenge: string | ((challenge: string) => boolean | Promise<boolean>);
     expectedOrigin: string | string[];
     expectedRPID?: string | string[];
     requireUserVerification?: boolean;

package/esm/registration/verifyRegistrationResponse.js

@@ -54,7 +54,7 @@ export async function verifyRegistrationResponse(options) {
     }
     // Ensure the device provided the challenge we gave it
     if (typeof expectedChallenge === 'function') {
-        if (!expectedChallenge(challenge)) {
+        if (!(await expectedChallenge(challenge))) {
             throw new Error(`Custom challenge verifier returned false for registration response challenge "${challenge}"`);
         }
     }

package/package.json

@@ -2,7 +2,7 @@
   "module": "./esm/index.js",
   "main": "./script/index.js",
   "name": "@simplewebauthn/server",
-  "version": "8.0.1",
+  "version": "8.1.1",
   "description": "SimpleWebAuthn for Servers",
   "license": "MIT",
   "author": "Matthew Miller <matthew@millerti.me>",
@@ -56,10 +56,8 @@
     "@peculiar/asn1-schema": "^2.3.6",
     "@peculiar/asn1-x509": "^2.3.6",
     "@simplewebauthn/typescript-types": "^8.0.0",
-    "@types/debug": "^4.1.8",
     "cbor-x": "^1.5.2",
-    "cross-fetch": "^4.0.0",
-    "debug": "^4.3.4"
+    "cross-fetch": "^4.0.0"
   },
   "devDependencies": {
     "@types/node": "^18.11.9",

package/script/authentication/verifyAuthenticationResponse.d.ts

@@ -2,7 +2,7 @@ import type { AuthenticationResponseJSON, AuthenticatorDevice, CredentialDeviceT
 import { AuthenticationExtensionsAuthenticatorOutputs } from '../helpers/decodeAuthenticatorExtensions.js';
 export type VerifyAuthenticationResponseOpts = {
     response: AuthenticationResponseJSON;
-    expectedChallenge: string | ((challenge: string) => boolean);
+    expectedChallenge: string | ((challenge: string) => boolean | Promise<boolean>);
     expectedOrigin: string | string[];
     expectedRPID: string | string[];
     authenticator: AuthenticatorDevice;

package/script/authentication/verifyAuthenticationResponse.js

@@ -56,7 +56,7 @@ async function verifyAuthenticationResponse(options) {
     }
     // Ensure the device provided the challenge we gave it
     if (typeof expectedChallenge === 'function') {
-        if (!expectedChallenge(challenge)) {
+        if (!(await expectedChallenge(challenge))) {
             throw new Error(`Custom challenge verifier returned false for registration response challenge "${challenge}"`);
         }
     }

package/script/deps.d.ts

@@ -2,8 +2,6 @@ export type { AttestationConveyancePreference, AuthenticationExtensionsClientInp
 export * as cborx from 'cbor-x';
 export { default as base64 } from '@hexagon/base64';
 export { fetch as crossFetch } from 'cross-fetch';
-export { default as debug } from 'debug';
-export type { Debugger } from '@types/debug';
 export { AsnParser, AsnSerializer } from '@peculiar/asn1-schema';
 export { AuthorityKeyIdentifier, BasicConstraints, Certificate, CertificateList, CRLDistributionPoints, ExtendedKeyUsage, id_ce_authorityKeyIdentifier, id_ce_basicConstraints, id_ce_cRLDistributionPoints, id_ce_extKeyUsage, id_ce_subjectAltName, id_ce_subjectKeyIdentifier, Name, SubjectAlternativeName, SubjectKeyIdentifier, } from '@peculiar/asn1-x509';
 export { ECDSASigValue, ECParameters, id_ecPublicKey, id_secp256r1, id_secp384r1, } from '@peculiar/asn1-ecc';

package/script/deps.js

@@ -26,7 +26,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.KeyDescription = exports.id_ce_keyDescription = exports.RSAPublicKey = exports.id_secp384r1 = exports.id_secp256r1 = exports.id_ecPublicKey = exports.ECParameters = exports.ECDSASigValue = exports.SubjectKeyIdentifier = exports.SubjectAlternativeName = exports.Name = exports.id_ce_subjectKeyIdentifier = exports.id_ce_subjectAltName = exports.id_ce_extKeyUsage = exports.id_ce_cRLDistributionPoints = exports.id_ce_basicConstraints = exports.id_ce_authorityKeyIdentifier = exports.ExtendedKeyUsage = exports.CRLDistributionPoints = exports.CertificateList = exports.Certificate = exports.BasicConstraints = exports.AuthorityKeyIdentifier = exports.AsnSerializer = exports.AsnParser = exports.debug = exports.crossFetch = exports.base64 = exports.cborx = void 0;
+exports.KeyDescription = exports.id_ce_keyDescription = exports.RSAPublicKey = exports.id_secp384r1 = exports.id_secp256r1 = exports.id_ecPublicKey = exports.ECParameters = exports.ECDSASigValue = exports.SubjectKeyIdentifier = exports.SubjectAlternativeName = exports.Name = exports.id_ce_subjectKeyIdentifier = exports.id_ce_subjectAltName = exports.id_ce_extKeyUsage = exports.id_ce_cRLDistributionPoints = exports.id_ce_basicConstraints = exports.id_ce_authorityKeyIdentifier = exports.ExtendedKeyUsage = exports.CRLDistributionPoints = exports.CertificateList = exports.Certificate = exports.BasicConstraints = exports.AuthorityKeyIdentifier = exports.AsnSerializer = exports.AsnParser = exports.crossFetch = exports.base64 = exports.cborx = void 0;
 // cbor (a.k.a. cbor-x in Node land)
 exports.cborx = __importStar(require("cbor-x"));
 // b64 (a.k.a. @hexagon/base64 in Node land)
@@ -35,9 +35,6 @@ Object.defineProperty(exports, "base64", { enumerable: true, get: function () {
 // cross-fetch
 var cross_fetch_1 = require("cross-fetch");
 Object.defineProperty(exports, "crossFetch", { enumerable: true, get: function () { return cross_fetch_1.fetch; } });
-// debug
-var debug_1 = require("debug");
-Object.defineProperty(exports, "debug", { enumerable: true, get: function () { return __importDefault(debug_1).default; } });
 // @peculiar libraries
 var asn1_schema_1 = require("@peculiar/asn1-schema");
 Object.defineProperty(exports, "AsnParser", { enumerable: true, get: function () { return asn1_schema_1.AsnParser; } });

package/script/helpers/logging.d.ts

@@ -1,5 +1,3 @@
-/// <reference types="debug" />
-import { Debugger } from '../deps.js';
 /**
  * Generate an instance of a `debug` logger that extends off of the "simplewebauthn" namespace for
  * consistent naming.
@@ -14,4 +12,4 @@ import { Debugger } from '../deps.js';
  * log('hello'); // simplewebauthn:mds hello +0ms
  * ```
  */
-export declare function getLogger(name: string): Debugger;
+export declare function getLogger(_name: string): (message: string, ..._rest: unknown[]) => void;

package/script/helpers/logging.js

@@ -1,8 +1,8 @@
 "use strict";
+// import { debug, Debugger } from '../deps.ts';
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getLogger = void 0;
-const deps_js_1 = require("../deps.js");
-const defaultLogger = (0, deps_js_1.debug)('SimpleWebAuthn');
+// const defaultLogger = debug('SimpleWebAuthn');
 /**
  * Generate an instance of a `debug` logger that extends off of the "simplewebauthn" namespace for
  * consistent naming.
@@ -17,7 +17,8 @@ const defaultLogger = (0, deps_js_1.debug)('SimpleWebAuthn');
  * log('hello'); // simplewebauthn:mds hello +0ms
  * ```
  */
-function getLogger(name) {
-    return defaultLogger.extend(name);
+function getLogger(_name) {
+    // This is a noop for now while I search for a better debug logger technique
+    return (_message, ..._rest) => { };
 }
 exports.getLogger = getLogger;

package/script/registration/verifyRegistrationResponse.d.ts

@@ -3,7 +3,7 @@ import { AttestationFormat, AttestationStatement } from '../helpers/decodeAttest
 import { AuthenticationExtensionsAuthenticatorOutputs } from '../helpers/decodeAuthenticatorExtensions.js';
 export type VerifyRegistrationResponseOpts = {
     response: RegistrationResponseJSON;
-    expectedChallenge: string | ((challenge: string) => boolean);
+    expectedChallenge: string | ((challenge: string) => boolean | Promise<boolean>);
     expectedOrigin: string | string[];
     expectedRPID?: string | string[];
     requireUserVerification?: boolean;

package/script/registration/verifyRegistrationResponse.js

@@ -57,7 +57,7 @@ async function verifyRegistrationResponse(options) {
     }
     // Ensure the device provided the challenge we gave it
     if (typeof expectedChallenge === 'function') {
-        if (!expectedChallenge(challenge)) {
+        if (!(await expectedChallenge(challenge))) {
             throw new Error(`Custom challenge verifier returned false for registration response challenge "${challenge}"`);
         }
     }