@things-factory/auth-base 7.0.1-beta.7 → 7.0.1-beta.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@things-factory/auth-base",
-  "version": "7.0.1-beta.7",
+  "version": "7.0.1-beta.9",
   "main": "dist-server/index.js",
   "browser": "dist-client/index.js",
   "things-factory": true,
@@ -30,9 +30,9 @@
     "migration:create": "node ../../node_modules/typeorm/cli.js migration:create -d ./server/migrations"
   },
   "dependencies": {
-    "@things-factory/email-base": "^7.0.1-beta.7",
+    "@things-factory/email-base": "^7.0.1-beta.8",
     "@things-factory/env": "^7.0.1-beta.6",
-    "@things-factory/shell": "^7.0.1-beta.7",
+    "@things-factory/shell": "^7.0.1-beta.8",
     "@things-factory/utils": "^7.0.1-beta.6",
     "@types/webappsec-credential-management": "^0.6.8",
     "jsonwebtoken": "^9.0.0",
@@ -45,5 +45,5 @@
     "passport-local": "^1.0.0",
     "popsicle-cookie-jar": "^1.0.0"
   },
-  "gitHead": "aedcdffb709f76c636e0693177a4a1d6984cb0de"
+  "gitHead": "b2fb4923e2763b4d831f934905dd6ae0019446a4"
 }

package/server/constants/error-code.ts

@@ -17,3 +17,4 @@ export const PASSWORD_USED_PAST = 'password used in the past'
 export const VERIFICATION_ERROR = 'user or verification token not found'
 export const USER_CREDENTIAL_NOT_FOUND = 'user credential not found'
 export const AUTH_ERROR = 'auth error'
+export const FIDO2_CERT_UNSUPPORTED = 'fido2 certificate unsupported'

package/server/middlewares/webauthn-middleware.ts

@@ -24,7 +24,12 @@ passport.use(
         return cb(null, false, { errorCode: AuthError.ERROR_CODES.USER_CREDENTIAL_NOT_FOUND })
       }
 
-      return cb(null, user, credential.publicKey)
+      try {
+        return cb(null, user, credential.publicKey)
+      } catch (error) {
+        console.error(error)
+        return cb(null, false, { errorCode: AuthError.ERROR_CODES.FIDO2_CERT_UNSUPPORTED })
+      }
     },
     async function register(user, id, publicKey, cb) {
       const userObject = await getRepository(User).findOne({ where: { id: user.id.toString() } })

package/translations/en.json

@@ -4,6 +4,7 @@
   "error.domain mismatch": "certificate is not for this domain",
   "error.domain not allowed": "user not allowed domain `{subdomain}`",
   "error.failed to find x": "failed to find {x}",
+  "error.fido2 certificate unsupported": "FIDO2 certificate unsupported",
   "error.password should match the rule": "password should match following rule. ${rule}",
   "error.password used in the past": "password used in the past",
   "error.subdomain not found": "domain not found",

package/translations/ja.json

@@ -4,6 +4,7 @@
   "error.domain mismatch": "証明書のドメインと現在のドメインが一致しません.",
   "error.domain not allowed": "'{subdomain}' 領域はこのユーザに許可されていません.",
   "error.failed to find x": "{x}が見つかりません.",
+  "error.fido2 certificate unsupported": "fido2証明書はサポートされていません",
   "error.password should match the rule": "パスワードは次の規則を守らなければなりません. {rule}",
   "error.password used in the past": "過去に使用されたパスワードです.",
   "error.subdomain not found": "サブドメインが見つかりません.",

package/translations/ko.json

@@ -4,6 +4,7 @@
   "error.domain mismatch": "인증서의 도메인과 현재 도메인이 일치하지 않습니다.",
   "error.domain not allowed": "'{subdomain}' 영역은 이 사용자에게 허가되지 않았습니다.",
   "error.failed to find x": "{x}을(를) 찾을 수 없습니다.",
+  "error.fido2 certificate unsupported": "제공된 인증서가 올바르지 않거나 지원되지 않는 형식입니다. 다른 로그인 방법을 사용하세요.",
   "error.password should match the rule": "비밀번호는 다음 규칙을 지켜야 합니다. {rule}",
   "error.password used in the past": "과거에 사용된 비밀번호입니다.",
   "error.subdomain not found": "서브도메인을 찾을 수 없습니다.",

package/translations/ms.json

@@ -4,6 +4,7 @@
   "error.domain mismatch": "Sijil tidak sesuai untuk domain ini",
   "error.domain not allowed": "Pengguna tidak dibenarkan domain `{subdomain}`",
   "error.failed to find x": "Gagal mencari {x}",
+  "error.fido2 certificate unsupported": "sijil fido2 tidak disokong",
   "error.password should match the rule": "Kata laluan harus mematuhi peraturan berikut. ${rule}",
   "error.password used in the past": "Kata laluan telah digunakan dalam masa lampau",
   "error.subdomain not found": "Domain tidak ditemui",

package/translations/zh.json

@@ -4,6 +4,7 @@
   "error.domain mismatch": "证书不适用于该域！",
   "error.domain not allowed": "用户无权限使用`{subdomain}`域！",
   "error.failed to find x": "查询{x}失败！",
+  "error.fido2 certificate unsupported": "fido2证书不支持",
   "error.password should match the rule": "密码应符合以下规则。${rule}",
   "error.password used in the past": "使用过的密码！",
   "error.subdomain not found": "用户域查询失败！",