faire-auth 1.0.3 → 1.1.0

package/dist/plugins/passkey/index.d.mts

@@ -1,4 +1,123 @@
-import "../../index-rFv8Hxld.mjs";
-import "../../hono-D0VqxVy1.mjs";
-import { n as PasskeyOptions, r as passkey, t as Passkey } from "../../index-BVRfQy6L.mjs";
-export { Passkey, PasskeyOptions, passkey };
+import { St as InferOptionSchema, an as AuthEndpoint } from "../../shared.mjs";
+import { CredentialDeviceType } from "@simplewebauthn/server";
+export interface PasskeyOptions {
+  /**
+   * A unique identifier for your website. 'localhost' is okay for
+   * local dev
+   *
+   * @default "localhost"
+   */
+  rpID?: string;
+  /**
+   * Human-readable title for your website
+   *
+   * @default "Better Auth"
+   */
+  rpName?: string;
+  /**
+   * The URL at which registrations and authentications should occur.
+   * `http://localhost` and `http://localhost:PORT` are also valid.
+   * Do NOT include any trailing /
+   *
+   * if this isn't provided. The client itself will
+   * pass this value.
+   */
+  origin?: string | null;
+  /**
+   * Allow customization of the authenticatorSelection options
+   * during passkey registration.
+   */
+  authenticatorSelection?: AuthenticatorSelectionCriteria;
+  /**
+   * Advanced options
+   */
+  advanced?: {
+    webAuthnChallengeCookie?: string;
+  };
+  /**
+   * Schema for the passkey model
+   */
+  schema?: InferOptionSchema<typeof schema>;
+}
+export type Passkey = {
+  id: string;
+  name?: string;
+  publicKey: string;
+  userId: string;
+  credentialID: string;
+  counter: number;
+  deviceType: CredentialDeviceType;
+  backedUp: boolean;
+  transports?: string;
+  createdAt: Date;
+  aaguid?: string;
+};
+export declare const passkey: (options?: PasskeyOptions) => {
+  id: string;
+  routes: {
+    generatePasskeyRegistrationOptions: AuthEndpoint<any>;
+    generatePasskeyAuthenticationOptions: AuthEndpoint<any>;
+    verifyPasskeyRegistration: AuthEndpoint<any>;
+    verifyPasskeyAuthentication: AuthEndpoint<any>;
+    /**
+     * ### Endpoint
+     *
+     * GET `/passkey/list-user-passkeys`
+     *
+     * ### API Methods
+     *
+     * **server:**
+     * `auth.api.listPasskeys`
+     *
+     * **client:**
+     * `authClient.passkey.listUserPasskeys`
+     *
+     * @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/passkey#api-method-passkey-list-user-passkeys)
+     */
+    listPasskeys: AuthEndpoint<any>;
+    /**
+     * ### Endpoint
+     *
+     * POST `/passkey/delete-passkey`
+     *
+     * ### API Methods
+     *
+     * **server:**
+     * `auth.api.deletePasskey`
+     *
+     * **client:**
+     * `authClient.passkey.deletePasskey`
+     *
+     * @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/passkey#api-method-passkey-delete-passkey)
+     */
+    deletePasskey: AuthEndpoint<any>;
+    /**
+     * ### Endpoint
+     *
+     * POST `/passkey/update-passkey`
+     *
+     * ### API Methods
+     *
+     * **server:**
+     * `auth.api.updatePasskey`
+     *
+     * **client:**
+     * `authClient.passkey.updatePasskey`
+     *
+     * @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/passkey#api-method-passkey-update-passkey)
+     */
+    updatePasskey: AuthEndpoint<any>;
+  };
+  schema: FaireAuthPluginDBSchema;
+  $ERROR_CODES: {
+    CHALLENGE_NOT_FOUND: string;
+    YOU_ARE_NOT_ALLOWED_TO_REGISTER_THIS_PASSKEY: string;
+    FAILED_TO_VERIFY_REGISTRATION: string;
+    PASSKEY_NOT_FOUND: string;
+    AUTHENTICATION_FAILED: string;
+    UNABLE_TO_CREATE_SESSION: string;
+    FAILED_TO_UPDATE_PASSKEY: string;
+  };
+};
+declare const schema: FaireAuthPluginDBSchema;
+export {};

package/dist/plugins/passkey/index.mjs

@@ -1,15 +1,547 @@
-import "../../hono-CoKYWnXA.mjs";
-import "../../crypto-DH2Aa7jN.mjs";
-import "../../json-B1v2qRTQ.mjs";
-import "../../cookies-BTs1o992.mjs";
-import "../../logged-CyGfp8_H.mjs";
-import "../../url-BoUuoIwZ.mjs";
-import "../../middleware-CE6OhDkq.mjs";
-import "../../session-CM3rmOYF.mjs";
-import "../../state-CQghgH9I.mjs";
-import "../../request-1NL_1lyJ.mjs";
-import "../../utils-D4vZd1-9.mjs";
-import "../../schema-DTIwLLmf.mjs";
-import { t as passkey } from "../../passkey-CzY_W2us.mjs";
-
-export { passkey };
+import { f as createEndpoint, r as getSessionFromCtx, t as freshSessionMiddleware, u as sessionMiddleware } from "../../session-BGjJgihS.mjs";
+import { t as mergeSchema } from "../../schema-CFCpv0tK.mjs";
+import { i as generateRandomString, r as generateId } from "../../utils-C7OHyfHa.mjs";
+import { n as cookies_exports, y as setSessionCookie } from "../../cookies-D9aY_gJh.mjs";
+import { logger } from "@faire-auth/core/env";
+import { createRoute, emailSchema, req, res } from "@faire-auth/core/factory";
+import { Definitions, False, SCHEMAS, True } from "@faire-auth/core/static";
+import { toSuccess } from "@faire-auth/core/utils";
+import { base64 } from "@faire-auth/core/datatypes";
+import * as z from "zod";
+import { generateAuthenticationOptions, generateRegistrationOptions, verifyAuthenticationResponse, verifyRegistrationResponse } from "@simplewebauthn/server";
+// src/plugins/passkey/index.ts
+const getRpID = (options, baseURL) => options.rpID || (baseURL ? new URL(baseURL).hostname : "localhost");
+const passkeySchema = z.object({
+	id: z.string(),
+	name: z.string().optional(),
+	publicKey: z.string(),
+	userId: z.string(),
+	credentialID: z.string(),
+	counter: z.number().int().nonnegative(),
+	deviceType: z.enum(["singleDevice", "multiDevice"]),
+	backedUp: z.boolean(),
+	transports: z.string().optional(),
+	createdAt: z.date().or(z.iso.datetime()),
+	aaguid: z.string().optional()
+});
+const passkey = (options) => {
+	const opts = {
+		origin: null,
+		...options,
+		advanced: {
+			webAuthnChallengeCookie: "better-auth-passkey",
+			...options?.advanced
+		}
+	};
+	const expirationTime = new Date(Date.now() + 3e5);
+	const currentTime = /* @__PURE__ */ new Date();
+	const maxAgeInSeconds = Math.floor((expirationTime.getTime() - currentTime.getTime()) / 1e3);
+	const ERROR_CODES = {
+		CHALLENGE_NOT_FOUND: "Challenge not found",
+		YOU_ARE_NOT_ALLOWED_TO_REGISTER_THIS_PASSKEY: "You are not allowed to register this passkey",
+		FAILED_TO_VERIFY_REGISTRATION: "Failed to verify registration",
+		PASSKEY_NOT_FOUND: "Passkey not found",
+		AUTHENTICATION_FAILED: "Authentication failed",
+		UNABLE_TO_CREATE_SESSION: "Unable to create session",
+		FAILED_TO_UPDATE_PASSKEY: "Failed to update passkey"
+	};
+	return {
+		id: "passkey",
+		routes: {
+			generatePasskeyRegistrationOptions: createEndpoint(createRoute({
+				operationId: "generatePasskeyRegistrationOptions",
+				method: "get",
+				path: "/passkey/generate-register-options",
+				client: false,
+				description: "Generate registration options for a new passkey",
+				middleware: [freshSessionMiddleware],
+				request: req().qry(z.object({
+					authenticatorAttachment: z.enum(["platform", "cross-platform"]).optional().openapi({ description: `Type of authenticator to use for registration.
+                                  "platform" for device-specific authenticators,
+                                  "cross-platform" for authenticators that can be used across devices.` }),
+					name: z.string().optional().openapi({ description: `Optional custom name for the passkey.
+                                  This can help identify the passkey when managing multiple credentials.` })
+				})).bld(),
+				responses: res(z.object({
+					challenge: z.base64url(),
+					timeout: z.number().optional(),
+					rp: z.object({
+						name: z.string(),
+						id: z.string().optional()
+					}),
+					user: z.object({
+						id: z.string(),
+						name: z.string(),
+						displayName: z.string()
+					}),
+					pubKeyCredParams: z.array(z.object({
+						type: z.string(),
+						alg: z.number()
+					})),
+					excludeCredentials: z.array(z.object({
+						id: z.string(),
+						type: z.string(),
+						transports: z.array(z.enum([
+							"ble",
+							"cable",
+							"hybrid",
+							"internal",
+							"nfc",
+							"smart-card",
+							"usb"
+						])).optional()
+					})).optional(),
+					authenticatorSelection: z.object({
+						authenticatorAttachment: z.string(),
+						requireResidentKey: z.boolean(),
+						userVerification: z.string()
+					}).partial().optional(),
+					attestation: z.string(),
+					extensions: z.record(z.string(), z.any())
+				}).transform(toSuccess)).err(401).bld()
+			}), (authOptions) => async (ctx) => {
+				const session = ctx.get("session");
+				const { name, authenticatorAttachment } = ctx.req.valid("query");
+				const userPasskeys = await ctx.get("context").adapter.findMany({
+					model: "passkey",
+					where: [{
+						field: "userId",
+						value: session.user.id
+					}]
+				});
+				const userID = new TextEncoder().encode(generateRandomString(32, "a-z", "0-9"));
+				let options;
+				options = await generateRegistrationOptions({
+					rpName: opts.rpName || ctx.get("context").appName,
+					rpID: getRpID(opts, authOptions.baseURL),
+					userID,
+					userName: name ?? session.user.email ?? session.user.id,
+					userDisplayName: session.user.email ?? session.user.id,
+					attestationType: "none",
+					excludeCredentials: userPasskeys.map((passkey) => ({
+						id: passkey.credentialID,
+						transports: passkey.transports?.split(",")
+					})),
+					authenticatorSelection: {
+						residentKey: "preferred",
+						userVerification: "preferred",
+						...opts.authenticatorSelection ?? {},
+						...authenticatorAttachment && { authenticatorAttachment }
+					}
+				});
+				const id = generateId(32);
+				const webAuthnCookie = ctx.get("context").createAuthCookie(opts.advanced.webAuthnChallengeCookie);
+				await (0, cookies_exports.setSignedCookie)(ctx, webAuthnCookie.name, id, ctx.get("context").secret, {
+					...webAuthnCookie.attributes,
+					maxAge: maxAgeInSeconds
+				});
+				await ctx.get("context").internalAdapter.createVerificationValue({
+					identifier: id,
+					value: JSON.stringify({
+						expectedChallenge: options.challenge,
+						userData: { id: session.user.id }
+					}),
+					expiresAt: expirationTime
+				});
+				return ctx.render(options, 200);
+			}),
+			generatePasskeyAuthenticationOptions: createEndpoint(createRoute({
+				operationId: "generatePasskeyAuthenticationOptions",
+				method: "post",
+				path: "/passkey/generate-authenticate-options",
+				description: "Generate authentication options for a passkey",
+				request: req().bdy(z.object({ email: emailSchema.openapi({ description: "The email address of the user" }).optional() })).bld(),
+				responses: res(z.object({
+					challenge: z.base64url(),
+					timeout: z.number().optional(),
+					rpId: z.string().optional(),
+					allowCredentials: z.array(z.object({
+						id: z.string(),
+						type: z.string(),
+						transports: z.array(z.enum([
+							"ble",
+							"cable",
+							"hybrid",
+							"internal",
+							"nfc",
+							"smart-card",
+							"usb"
+						])).optional()
+					})).optional(),
+					userVerification: z.enum([
+						"discouraged",
+						"preferred",
+						"required"
+					]).optional(),
+					extensions: z.record(z.string(), z.any()).optional()
+				}).transform(toSuccess)).bld()
+			}), (authOptions) => async (ctx) => {
+				const session = await getSessionFromCtx(ctx);
+				let userPasskeys = [];
+				if (!(session instanceof Response)) userPasskeys = await ctx.get("context").adapter.findMany({
+					model: "passkey",
+					where: [{
+						field: "userId",
+						value: session.user.id
+					}]
+				});
+				const options = await generateAuthenticationOptions({
+					rpID: getRpID(opts, authOptions.baseURL),
+					userVerification: "preferred",
+					...userPasskeys.length > 0 && { allowCredentials: userPasskeys.map((passkey) => ({
+						id: passkey.credentialID,
+						transports: passkey.transports?.split(",")
+					})) }
+				});
+				const data = {
+					expectedChallenge: options.challenge,
+					userData: { id: "user" in session ? session.user.id : "" }
+				};
+				const id = generateId(32);
+				const webAuthnCookie = ctx.get("context").createAuthCookie(opts.advanced.webAuthnChallengeCookie);
+				await (0, cookies_exports.setSignedCookie)(ctx, webAuthnCookie.name, id, ctx.get("context").secret, {
+					...webAuthnCookie.attributes,
+					maxAge: maxAgeInSeconds
+				});
+				await ctx.get("context").internalAdapter.createVerificationValue({
+					identifier: id,
+					value: JSON.stringify(data),
+					expiresAt: expirationTime
+				});
+				return ctx.render(options, 200);
+			}),
+			verifyPasskeyRegistration: createEndpoint(createRoute({
+				operationId: "verifyPasskeyRegistration",
+				method: "post",
+				path: "/passkey/verify-registration",
+				description: "Verify registration of a new passkey",
+				middleware: [freshSessionMiddleware],
+				request: req().bdy(z.object({
+					response: z.any(),
+					name: z.string().openapi({ description: "Name of the passkey" }).optional()
+				})).bld(),
+				responses: res(passkeySchema.transform(toSuccess)).err(400).err(401).err(500, "Failed to verify registration").bld()
+			}), (authOptions) => async (ctx) => {
+				const origin = options?.origin ?? ctx.req.header("origin") ?? "";
+				if (!origin) return ctx.render({ success: False }, 400);
+				const session = ctx.get("session");
+				const { response } = ctx.req.valid("json");
+				const webAuthnCookie = ctx.get("context").createAuthCookie(opts.advanced.webAuthnChallengeCookie);
+				const challengeId = await (0, cookies_exports.getSignedCookie)(ctx, ctx.get("context").secret, webAuthnCookie.name);
+				if (!challengeId) return ctx.render({
+					success: False,
+					message: ERROR_CODES.CHALLENGE_NOT_FOUND
+				}, 400);
+				const data = await ctx.get("context").internalAdapter.findVerificationValue(challengeId);
+				if (!data) return ctx.render({
+					success: False,
+					message: ERROR_CODES.FAILED_TO_VERIFY_REGISTRATION
+				}, 400);
+				const { expectedChallenge, userData } = JSON.parse(data.value);
+				if (userData.id !== session.user.id) return ctx.render({
+					success: False,
+					message: ERROR_CODES.YOU_ARE_NOT_ALLOWED_TO_REGISTER_THIS_PASSKEY
+				}, 401);
+				try {
+					const { verified, registrationInfo } = await verifyRegistrationResponse({
+						response,
+						expectedChallenge,
+						expectedOrigin: origin,
+						expectedRPID: getRpID(opts, authOptions.baseURL),
+						requireUserVerification: false
+					});
+					if (!verified || !registrationInfo) return ctx.render({
+						success: False,
+						message: ERROR_CODES.FAILED_TO_VERIFY_REGISTRATION
+					}, 400);
+					const { aaguid, credentialDeviceType, credentialBackedUp, credential } = registrationInfo;
+					const pubKey = base64.encode(credential.publicKey);
+					const newPasskey = {
+						name: ctx.body.name,
+						userId: userData.id,
+						credentialID: credential.id,
+						publicKey: pubKey,
+						counter: credential.counter,
+						deviceType: credentialDeviceType,
+						transports: response.response.transports.join(","),
+						backedUp: credentialBackedUp,
+						createdAt: /* @__PURE__ */ new Date(),
+						aaguid
+					};
+					const newPasskeyRes = await ctx.get("context").adapter.create({
+						model: "passkey",
+						data: newPasskey
+					});
+					return ctx.render(newPasskeyRes, 200);
+				} catch (e) {
+					logger.error(String(e));
+					return ctx.render({
+						success: False,
+						message: ERROR_CODES.FAILED_TO_VERIFY_REGISTRATION
+					}, 500);
+				}
+			}),
+			verifyPasskeyAuthentication: createEndpoint(createRoute({
+				operationId: "verifyPasskeyAuthentication",
+				method: "post",
+				path: "/passkey/verify-authentication",
+				description: "Verify authentication of a passkey",
+				$Infer: { body: {} },
+				request: req().bdy(z.object({ response: z.record(z.string(), z.any()) })).bld(),
+				responses: res(SCHEMAS[Definitions.SESSION_RESPONSE].default).err(400, "Origin missing, challenge not found, or auth failed").err(401, "Passkey not found or auth failed").err(500, "User not found or unable to create session").bld()
+			}), (authOptions) => async (ctx) => {
+				const origin = options?.origin ?? ctx.req.header("origin") ?? "";
+				if (!origin) return ctx.render({
+					success: False,
+					message: "Origin missing"
+				}, 400);
+				const { response } = ctx.req.valid("json");
+				const webAuthnCookie = ctx.get("context").createAuthCookie(opts.advanced.webAuthnChallengeCookie);
+				const challengeId = await (0, cookies_exports.getSignedCookie)(ctx, ctx.get("context").secret, webAuthnCookie.name);
+				if (!challengeId) return ctx.render({
+					success: False,
+					message: ERROR_CODES.CHALLENGE_NOT_FOUND
+				}, 400);
+				const data = await ctx.get("context").internalAdapter.findVerificationValue(challengeId);
+				if (!data) return ctx.render({
+					success: False,
+					message: ERROR_CODES.CHALLENGE_NOT_FOUND
+				}, 400);
+				const { expectedChallenge } = JSON.parse(data.value);
+				const passkey = await ctx.get("context").adapter.findOne({
+					model: "passkey",
+					where: [{
+						field: "credentialID",
+						value: response["id"]
+					}]
+				});
+				if (!passkey) return ctx.render({
+					success: False,
+					message: ERROR_CODES.PASSKEY_NOT_FOUND
+				}, 401);
+				try {
+					const verification = await verifyAuthenticationResponse({
+						response,
+						expectedChallenge,
+						expectedOrigin: origin,
+						expectedRPID: getRpID(opts, authOptions.baseURL),
+						credential: {
+							id: passkey.credentialID,
+							publicKey: base64.decode(passkey.publicKey),
+							counter: passkey.counter,
+							transports: passkey.transports?.split(",")
+						},
+						requireUserVerification: false
+					});
+					const { verified } = verification;
+					if (!verified) return ctx.render({
+						success: False,
+						message: ERROR_CODES.AUTHENTICATION_FAILED
+					}, 401);
+					await ctx.get("context").adapter.update({
+						model: "passkey",
+						where: [{
+							field: "id",
+							value: passkey.id
+						}],
+						update: { counter: verification.authenticationInfo.newCounter }
+					});
+					const s = await ctx.get("context").internalAdapter.createSession(passkey.userId);
+					if (!s) return ctx.render({
+						success: False,
+						message: ERROR_CODES.UNABLE_TO_CREATE_SESSION
+					}, 500);
+					const user = await ctx.get("context").internalAdapter.findUserById(passkey.userId);
+					if (!user) return ctx.render({
+						success: False,
+						message: "User not found"
+					}, 500);
+					await setSessionCookie(ctx, authOptions, {
+						session: s,
+						user
+					});
+					return ctx.render(s, 200);
+				} catch (e) {
+					ctx.get("context").logger.error("Failed to verify authentication", e);
+					return ctx.render({
+						success: False,
+						message: ERROR_CODES.AUTHENTICATION_FAILED
+					}, 400);
+				}
+			}),
+			/**
+			* ### Endpoint
+			*
+			* GET `/passkey/list-user-passkeys`
+			*
+			* ### API Methods
+			*
+			* **server:**
+			* `auth.api.listPasskeys`
+			*
+			* **client:**
+			* `authClient.passkey.listUserPasskeys`
+			*
+			* @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/passkey#api-method-passkey-list-user-passkeys)
+			*/
+			listPasskeys: createEndpoint(createRoute({
+				operationId: "listPasskeys",
+				method: "get",
+				path: "/passkey/list-user-passkeys",
+				description: "List all passkeys for the authenticated user",
+				middleware: [sessionMiddleware()],
+				responses: res(z.array(passkeySchema).openapi({ description: "Array of passkey objects associated with the user" }).transform(toSuccess)).err(401).bld()
+			}), (_authOptions) => async (ctx) => {
+				const session = ctx.get("session");
+				const passkeys = await ctx.get("context").adapter.findMany({
+					model: "passkey",
+					where: [{
+						field: "userId",
+						value: session.user.id
+					}]
+				});
+				return ctx.render(passkeys, 200);
+			}),
+			/**
+			* ### Endpoint
+			*
+			* POST `/passkey/delete-passkey`
+			*
+			* ### API Methods
+			*
+			* **server:**
+			* `auth.api.deletePasskey`
+			*
+			* **client:**
+			* `authClient.passkey.deletePasskey`
+			*
+			* @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/passkey#api-method-passkey-delete-passkey)
+			*/
+			deletePasskey: createEndpoint(createRoute({
+				operationId: "deletePasskey",
+				method: "post",
+				path: "/passkey/delete-passkey",
+				description: "Delete a specific passkey",
+				middleware: [sessionMiddleware()],
+				request: req().bdy(z.object({ id: z.string().openapi({ description: "The ID of the passkey to delete. Eg: \"some-passkey-id\"" }) })).bld(),
+				responses: res(SCHEMAS[Definitions.SUCCESS].default, "Passkey deleted successfully").err(401).bld()
+			}), (_authOptions) => async (ctx) => {
+				await ctx.get("context").adapter.delete({
+					model: "passkey",
+					where: [{
+						field: "id",
+						value: ctx.req.valid("json").id
+					}]
+				});
+				return ctx.render({ success: True }, 200);
+			}),
+			/**
+			* ### Endpoint
+			*
+			* POST `/passkey/update-passkey`
+			*
+			* ### API Methods
+			*
+			* **server:**
+			* `auth.api.updatePasskey`
+			*
+			* **client:**
+			* `authClient.passkey.updatePasskey`
+			*
+			* @see [Read our docs to learn more.](https://better-auth.com/docs/plugins/passkey#api-method-passkey-update-passkey)
+			*/
+			updatePasskey: createEndpoint(createRoute({
+				operationId: "updatePasskey",
+				method: "post",
+				path: "/passkey/update-passkey",
+				description: "Update a specific passkey's name",
+				middleware: [sessionMiddleware()],
+				request: req().bdy(z.object({
+					id: z.string().openapi({ description: `The ID of the passkey which will be updated. Eg: \"passkey-id\"` }),
+					name: z.string().openapi({ description: `The new name which the passkey will be updated to. Eg: \"my-new-passkey-name\"` })
+				})).bld(),
+				responses: res(passkeySchema.transform(toSuccess)).err(401, "Invalid session or not allowed to register").err(404, "Passkey not found").err(500, "Failed to update passkey").bld()
+			}), (_authOptions) => async (ctx) => {
+				const session = ctx.get("session");
+				const { id, name } = ctx.req.valid("json");
+				const passkey = await ctx.get("context").adapter.findOne({
+					model: "passkey",
+					where: [{
+						field: "id",
+						value: id
+					}]
+				});
+				if (!passkey) return ctx.render({
+					success: False,
+					message: ERROR_CODES.PASSKEY_NOT_FOUND
+				}, 404);
+				if (passkey.userId !== session.user.id) return ctx.render({
+					success: False,
+					message: ERROR_CODES.YOU_ARE_NOT_ALLOWED_TO_REGISTER_THIS_PASSKEY
+				}, 401);
+				const updatedPasskey = await ctx.get("context").adapter.update({
+					model: "passkey",
+					where: [{
+						field: "id",
+						value: id
+					}],
+					update: { name }
+				});
+				if (!updatedPasskey) return ctx.render({
+					success: False,
+					message: ERROR_CODES.FAILED_TO_UPDATE_PASSKEY
+				}, 500);
+				return ctx.render(updatedPasskey, 200);
+			})
+		},
+		schema: mergeSchema(schema, options?.schema),
+		$ERROR_CODES: ERROR_CODES
+	};
+};
+const schema = { passkey: { fields: {
+	name: {
+		type: "string",
+		required: false
+	},
+	publicKey: {
+		type: "string",
+		required: true
+	},
+	userId: {
+		type: "string",
+		references: {
+			model: "user",
+			field: "id"
+		},
+		required: true
+	},
+	credentialID: {
+		type: "string",
+		required: true
+	},
+	counter: {
+		type: "number",
+		required: true
+	},
+	deviceType: {
+		type: "string",
+		required: true
+	},
+	backedUp: {
+		type: "boolean",
+		required: true
+	},
+	transports: {
+		type: "string",
+		required: false
+	},
+	createdAt: {
+		type: "date",
+		required: false
+	},
+	aaguid: {
+		type: "string",
+		required: false
+	}
+} } };
+export { passkey };