akey-electron-webauthn-macos 1.3.10

package/dist/additional-objc/ASCPublicKeyCredentialDescriptor.d.ts

@@ -0,0 +1,12 @@
+import type { _NSArray, _NSData, _NSObject, _NSSecureCoding } from "objcjs-types/Foundation";
+export declare class _ASCPublicKeyCredentialDescriptor extends _NSObject {
+    static alloc(): _ASCPublicKeyCredentialDescriptor;
+    static new(): _ASCPublicKeyCredentialDescriptor;
+    init(): _ASCPublicKeyCredentialDescriptor;
+    initWithCredentialID$transports$(credentialID: _NSData, allowedTransports: _NSArray | null): _ASCPublicKeyCredentialDescriptor;
+    credentialID(): _NSData;
+    transports(): _NSArray | null;
+}
+export interface _ASCPublicKeyCredentialDescriptor extends _NSSecureCoding {
+}
+export declare const ASCPublicKeyCredentialDescriptor: typeof _ASCPublicKeyCredentialDescriptor;

package/dist/create/authorization-controller.d.ts

@@ -0,0 +1,10 @@
+import { NobjcObject } from "objc-js";
+import type { ExcludeCredential } from "./internal-handler.js";
+import type { ASAuthorizationController } from "objcjs-types/AuthenticationServices";
+export interface PublicKeyCredentialParams {
+    type: "public-key";
+    algorithm: number;
+}
+export declare function setControllerState(self: NobjcObject, clientDataHash: Buffer, pubKeyCredParams: PublicKeyCredentialParams[], residentKeyRequired: boolean, excludeCredentialIds: ExcludeCredential[]): void;
+export declare function removeControllerState(self: NobjcObject): void;
+export declare const WebauthnCreateController: typeof ASAuthorizationController;

package/dist/create/handler.d.ts

@@ -0,0 +1,2 @@
+import type { CreateCredentialResult, WebauthnCreateRequestOptions } from "akey-electron-webauthn-types";
+export declare function createCredential(publicKeyOptions: PublicKeyCredentialCreationOptions | undefined, additionalOptions: WebauthnCreateRequestOptions): Promise<CreateCredentialResult>;

package/dist/create/internal-handler.d.ts

@@ -0,0 +1,36 @@
+import { type PRFInput } from "../helpers/prf.js";
+import { type PublicKeyCredentialParams } from "./authorization-controller.js";
+export type AuthenticatorAttachmentWithExtra = AuthenticatorAttachment | "all";
+export interface CreateCredentialResult {
+    credentialId: Buffer;
+    clientDataJSON: Buffer;
+    attestationObject: Buffer;
+    authenticatorData: Buffer;
+    attachment: AuthenticatorAttachment;
+    transports: string[];
+    isResidentKey: boolean;
+    publicKeyAlgorithm: number;
+    publicKey: Buffer;
+    isLargeBlobSupported: boolean | null;
+    isPRFSupported: boolean | null;
+    prfFirst: Buffer | null;
+    prfSecond: Buffer | null;
+}
+type CredentialUserVerificationPreference = "required" | "preferred" | "discouraged";
+type CredentialAttestationPreference = "direct" | "enterprise" | "indirect" | "none";
+declare const VALID_EXTENSIONS: readonly ["largeBlob", "prf"];
+export type CredentialCreationExtensions = (typeof VALID_EXTENSIONS)[number];
+export type LargeBlobSupport = "required" | "preferred" | "unspecified";
+interface CreateCredentialAdditionalOptions {
+    allowSecurityKeyRequests?: boolean;
+    topFrameOrigin?: string;
+    userDisplayName?: string;
+    largeBlobSupport?: LargeBlobSupport;
+    prf?: PRFInput;
+}
+export interface ExcludeCredential {
+    id: Buffer;
+    transports?: string[];
+}
+declare function createCredentialInternal(rpid: string, challenge: Buffer, username: string, userID: Buffer, nativeWindowHandle: Buffer, origin: string, timeout: number, enabledExtensions: CredentialCreationExtensions[], attestation: CredentialAttestationPreference, supportedAlgorithmIdentifiers: PublicKeyCredentialParams[], excludeCredentials: ExcludeCredential[], residentKeyRequired?: boolean, preferredAuthenticatorAttachment?: AuthenticatorAttachmentWithExtra, userVerification?: CredentialUserVerificationPreference, additionalOptions?: CreateCredentialAdditionalOptions): Promise<CreateCredentialResult>;
+export { createCredentialInternal };

package/dist/get/authorization-controller.d.ts

@@ -0,0 +1,5 @@
+import { NobjcObject } from "objc-js";
+import type { ASAuthorizationController } from "objcjs-types/AuthenticationServices";
+export declare function setClientDataHash(self: NobjcObject, clientDataHash: Buffer): void;
+export declare function removeClientDataHash(self: NobjcObject): void;
+export declare const WebauthnGetController: typeof ASAuthorizationController;

package/dist/get/handler.d.ts

@@ -0,0 +1,2 @@
+import type { GetCredentialResult, WebauthnGetRequestOptions } from "akey-electron-webauthn-types";
+export declare function getCredential(publicKeyOptions: PublicKeyCredentialRequestOptions | undefined, additionalOptions: WebauthnGetRequestOptions): Promise<GetCredentialResult>;

package/dist/get/internal-handler.d.ts

@@ -0,0 +1,25 @@
+import { type PRFInput } from "../helpers/prf.js";
+import type { AuthenticatorAttachment } from "../helpers/types.js";
+export type UserVerificationPreference = "preferred" | "required" | "discouraged";
+declare const VALID_EXTENSIONS: readonly ["largeBlobRead", "largeBlobWrite", "prf"];
+export type CredentialAssertionExtensions = (typeof VALID_EXTENSIONS)[number];
+export interface GetCredentialResult {
+    id: Buffer;
+    authenticatorAttachment: AuthenticatorAttachment;
+    clientDataJSON: Buffer;
+    authenticatorData: Buffer;
+    signature: Buffer;
+    userHandle: Buffer;
+    prf: [Buffer | null, Buffer | null];
+    largeBlob: Buffer | null;
+    largeBlobWritten: boolean | null;
+}
+export interface GetCredentialAdditionalOptions {
+    allowSecurityKeyRequests?: boolean;
+    largeBlobDataToWrite?: Buffer;
+    prf?: PRFInput;
+    prfByCredential?: Record<string, PRFInput>;
+    topFrameOrigin?: string;
+}
+declare function getCredentialInternal(rpid: string, challenge: Buffer, nativeWindowHandle: Buffer, origin: string, timeout: number, enabledExtensions: CredentialAssertionExtensions[], allowedCredentialIds: Buffer[], userVerificationPreference?: UserVerificationPreference, additionalOptions?: GetCredentialAdditionalOptions): Promise<GetCredentialResult>;
+export { getCredentialInternal };

package/dist/helpers/client-data.d.ts

@@ -0,0 +1,14 @@
+interface WebauthnClientData {
+    type: "webauthn.get" | "webauthn.create";
+    challenge: string;
+    origin: string;
+    topOrigin?: string;
+    crossOrigin: boolean;
+}
+export declare function generateWebauthnClientData(type: "webauthn.get" | "webauthn.create", origin: string, challenge: Buffer, topFrameOrigin?: string): WebauthnClientData;
+export declare function generateClientDataInfo(clientData: WebauthnClientData): {
+    clientDataJSON: string;
+    clientDataBuffer: Buffer<ArrayBuffer>;
+    clientDataHash: Buffer<ArrayBufferLike>;
+};
+export {};

package/dist/helpers/index.d.ts

@@ -0,0 +1,8 @@
+export declare function PromiseWithResolvers<T = void>(): {
+    promise: Promise<T>;
+    resolve: (value: T | PromiseLike<T>) => void;
+    reject: (reason?: unknown) => void;
+};
+export declare function bufferToBase64Url(buffer: Buffer): string;
+export declare function base64UrlToBuffer(b64url: string): Buffer;
+export declare function bufferSourceToBuffer(src: BufferSource): Buffer | null;

package/dist/helpers/origin.d.ts

@@ -0,0 +1,19 @@
+export declare function serializeOrigin(origin: string): string | null;
+type TupleOrigin = {
+    type: "tuple";
+    scheme: string;
+    host: string;
+    port: number | null;
+};
+type OpaqueOrigin = {
+    type: "opaque";
+    reason?: string;
+};
+type Origin = TupleOrigin | OpaqueOrigin;
+export type OriginCompareOptions = {
+    allowOpaqueStringEquality?: boolean;
+};
+export declare function computeOrigin(input: string | URL): Origin;
+export declare function isSameOrigin(a: string | URL, b: string | URL, opts?: OriginCompareOptions): boolean;
+export declare function isCrossOrigin(a: string | URL, b: string | URL, opts?: OriginCompareOptions): boolean;
+export {};

package/dist/helpers/passkey-authorization.d.ts

@@ -0,0 +1,13 @@
+import type { PasskeyAuthorizationError, PasskeyAuthorizationResult, PasskeyAuthorizationStatus } from "akey-electron-webauthn-types";
+import { type _ASAuthorizationWebBrowserPublicKeyCredentialManager } from "objcjs-types/AuthenticationServices";
+export interface ResolvePasskeyAuthorizationOptions {
+    requestIfNeeded: boolean;
+    manager?: _ASAuthorizationWebBrowserPublicKeyCredentialManager;
+}
+type PasskeyAuthorizationManagerFactory = () => _ASAuthorizationWebBrowserPublicKeyCredentialManager;
+export declare function createPasskeyAuthorizationManager(): _ASAuthorizationWebBrowserPublicKeyCredentialManager;
+export declare function resolvePasskeyAuthorization({ requestIfNeeded, manager, }: ResolvePasskeyAuthorizationOptions): Promise<PasskeyAuthorizationStatus>;
+export declare function getListPasskeyAuthorizationStatus(): Promise<PasskeyAuthorizationResult | PasskeyAuthorizationError>;
+export declare function requestListPasskeyAuthorization(): Promise<PasskeyAuthorizationResult | PasskeyAuthorizationError>;
+export declare function __setPasskeyAuthorizationManagerFactoryForTesting(factory: PasskeyAuthorizationManagerFactory | null): void;
+export {};

package/dist/helpers/presentation.d.ts

@@ -0,0 +1 @@
+export declare function createPresentationContextProviderFromNativeWindowHandle(nativeWindowHandle: Buffer): import("objc-js").NobjcObject & import("objcjs-types/AuthenticationServices")._ASAuthorizationControllerPresentationContextProviding;

package/dist/helpers/prf.d.ts

@@ -0,0 +1,5 @@
+export interface PRFInput {
+    first: Buffer;
+    second?: Buffer;
+}
+export declare function createPRFInput(prf: PRFInput): import("objcjs-types/AuthenticationServices")._ASAuthorizationPublicKeyCredentialPRFAssertionInputValues;

package/dist/helpers/public-key.d.ts

@@ -0,0 +1 @@
+export declare function encodeEC2PublicKeyToSPKI(x: bigint, y: bigint): Buffer;

package/dist/helpers/rpid.d.ts

@@ -0,0 +1,13 @@
+export type RpIdCheckOptions = {
+    allowInsecureLocalhost?: boolean;
+    isPublicSuffix?: (domain: string) => boolean;
+};
+export type RpIdCheckResult = {
+    ok: true;
+    rpId: string;
+} | {
+    ok: false;
+    rpId: string;
+    reason: string;
+};
+export declare function isRpIdAllowedForOrigin(origin: string, rpIdInput?: string, opts?: RpIdCheckOptions): RpIdCheckResult;

package/dist/helpers/types.d.ts

@@ -0,0 +1 @@
+export type AuthenticatorAttachment = "platform" | "cross-platform";

package/dist/helpers/validation.d.ts

@@ -0,0 +1,3 @@
+export declare function isString(value: unknown): value is string;
+export declare function isNumber(value: unknown): value is number;
+export declare function isObject(value: unknown): boolean;

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./get/handler.js";
+export * from "./create/handler.js";
+export * from "./list/handler.js";
+export type * from "akey-electron-webauthn-types";