nid-webauthn-emulator 0.1.4 → 0.2.0

package/README.md

@@ -143,6 +143,13 @@ async function startWebAuthnEmulator(page: Page, origin: string, debug = false)
       return response;
     },
   );
+
+  await page.exposeFunction(
+    BrowserInjection.WebAuthnEmulatorSignalUnknownCredential,
+    async (options: { rpId: string; credentialId: string }) => {
+      emulator.signalUnknownCredential(options);
+    },
+  );
 }
 
 test.describe("Passkeys Tests", { tag: ["@daily"] }, () => {
@@ -162,6 +169,7 @@ test.describe("Passkeys Tests", { tag: ["@daily"] }, () => {
 
 - `window.webAuthnEmulatorGet`: `WebAuthnEmulator.getJSON` の Exposed Function
 - `window.webAuthnEmulatorCreate`: `WebAuthnEmulator.createJSON` の Exposed Function
+- `window.webAuthnEmulatorSignalUnknownCredential`: `WebAuthnEmulator.signalUnknownCredential` の Exposed Function
 
 これらは Page グローバルに定義されるため、Page インスタンスにつき 1 回だけ定義する必要があります。
 
@@ -175,6 +183,7 @@ await page.evaluate(BrowserInjection.HookWebAuthnApis);
 
 - `navigator.credentials.get` の定義を上書きし、`window.webAuthnEmulatorGet` を呼び出す
 - `navigator.credentials.create` の定義を上書きし、`window.webAuthnEmulatorCreate` を呼び出す
+- `PublicKeyCredential.signalUnknownCredential` の定義を追加し、`window.webAuthnEmulatorSignalUnknownCredential` を呼び出す
 
 これにより先ほどの `exposeFunction` で定義した `WebAuthnEmulator` のメソッドが、`navigator.credentials.get` および `navigator.credentials.create` 呼び出し時に実行されるようになります。これらの処理中にはテストコンテキストと Playwright のコンテキスト間の通信のためにデータのシリアライズおよびデシリアライズが行われるため、そのための処理も含まれています。
 

package/dist/spec/libs/browser-injection.spec.js

@@ -5,11 +5,15 @@ const browser_injection_1 = require("../../src/test-utils/browser-injection");
 (0, globals_1.describe)("Browser Injection Test", () => {
     (0, globals_1.test)("Browser Injection Test", async () => {
         const window = { navigator: { credentials: { create: undefined, get: undefined } } };
-        const PublicKeyCredential = { isConditionalMediationAvailable: async () => false };
+        const PublicKeyCredential = {
+            isConditionalMediationAvailable: async () => false,
+            signalUnknownCredential: undefined,
+        };
         // biome-ignore lint/security/noGlobalEval: This is a test code.
         eval(browser_injection_1.HookWebAuthnApis);
         (0, globals_1.expect)(await PublicKeyCredential.isConditionalMediationAvailable()).toBeTruthy();
         (0, globals_1.expect)(window.navigator.credentials.create).toBeDefined();
         (0, globals_1.expect)(window.navigator.credentials.get).toBeDefined();
+        (0, globals_1.expect)(PublicKeyCredential.signalUnknownCredential).toBeDefined();
     });
 });

package/dist/spec/repository/credential-repository.spec.js

@@ -15,13 +15,23 @@ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (
 }) : function(o, v) {
     o["default"] = v;
 });
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };

package/dist/spec/webauthn/cose-key.spec.js

@@ -15,13 +15,23 @@ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (
 }) : function(o, v) {
     o["default"] = v;
 });
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };

package/dist/spec/webauthn/webauthn-emulator.spec.js

@@ -15,13 +15,23 @@ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (
 }) : function(o, v) {
     o["default"] = v;
 });
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
@@ -29,6 +39,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 const globals_1 = require("@jest/globals");
 const src_1 = __importStar(require("../../src"));
 const encode_utils_1 = __importDefault(require("../../src/libs/encode-utils"));
+const credentials_memory_repository_1 = require("../../src/repository/credentials-memory-repository");
 const webauthn_test_server_1 = require("./webauthn-test-server");
 (0, globals_1.describe)("WebAuthnEmulator Registration Passkeys Test", () => {
     const user = { username: "test", id: "test" };
@@ -220,3 +231,30 @@ const webauthn_test_server_1 = require("./webauthn-test-server");
         });
     });
 });
+(0, globals_1.describe)("WebAuthnEmulator signalUnknownCredential Test", () => {
+    (0, globals_1.test)("Signal Unknown Credential _ OK", async () => {
+        const user = { username: "test-signal", id: "test-signal" };
+        // Create a new emulator with a clean repository
+        const repository = new credentials_memory_repository_1.PasskeysCredentialsMemoryRepository();
+        const authenticator = new src_1.AuthenticatorEmulator({
+            credentialsRepository: repository,
+        });
+        const emulator = new src_1.default(authenticator);
+        const testServer = new webauthn_test_server_1.WebAuthnTestServer();
+        // Create a credential
+        const options = await testServer.getRegistrationOptions(user);
+        const credential = emulator.createJSON(webauthn_test_server_1.TEST_RP_ORIGIN, options);
+        await testServer.getRegistrationVerification(user, credential);
+        // Verify the credential exists
+        const credentialsBefore = repository.loadCredentials();
+        (0, globals_1.expect)(credentialsBefore.length).toBe(1);
+        // Signal unknown credential
+        emulator.signalUnknownCredential({
+            rpId: webauthn_test_server_1.TEST_RP_ORIGIN.replace("https://", ""),
+            credentialId: credential.id,
+        });
+        // Verify the credential was deleted
+        const credentialsAfter = repository.loadCredentials();
+        (0, globals_1.expect)(credentialsAfter.length).toBe(0);
+    });
+});

package/dist/src/authenticator/authenticator-emulator.d.ts

@@ -1,6 +1,6 @@
 import type { PasskeysCredentialsRepository } from "../repository/credentials-repository";
 import { type AuthenticatorData, type PublicKeyCredentialSource } from "../webauthn/webauthn-model";
-import { type AuthenticatorGetAssertionRequest, type AuthenticatorGetAssertionResponse, type AuthenticatorGetInfoResponse, type AuthenticatorMakeCredentialRequest, type AuthenticatorMakeCredentialResponse, type AuthenticatorOptions, type CTAPAuthenticatorRequest, type CTAPAuthenticatorResponse } from "./ctap-model";
+import { type AuthenticatorCredentialManagementRequest, type AuthenticatorCredentialManagementResponse, type AuthenticatorGetAssertionRequest, type AuthenticatorGetAssertionResponse, type AuthenticatorGetInfoResponse, type AuthenticatorMakeCredentialRequest, type AuthenticatorMakeCredentialResponse, type AuthenticatorOptions, type CTAPAuthenticatorRequest, type CTAPAuthenticatorResponse } from "./ctap-model";
 type InteractionResponse = {
     options: {
         uv: boolean;
@@ -52,6 +52,11 @@ export declare class AuthenticatorEmulator {
     constructor(params?: Partial<AuthenticatorParameters>);
     /** @see https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#authenticator-api */
     command(request: CTAPAuthenticatorRequest): CTAPAuthenticatorResponse;
+    /**
+     * @see https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html#authenticatorCredentialManagement
+     */
+    authenticatorCredentialManagement(request: AuthenticatorCredentialManagementRequest): AuthenticatorCredentialManagementResponse;
+    private authenticatorDeleteCredential;
     /** @see https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#authenticatorGetInfo */
     authenticatorGetInfo(): AuthenticatorGetInfoResponse;
     /**

package/dist/src/authenticator/authenticator-emulator.js

@@ -48,7 +48,9 @@ class AuthenticatorEmulator {
             verifications: params.verifications ?? AuthenticatorEmulator.DEFAULT_VERIFICATIONS,
             userMakeCredentialInteraction: params.userMakeCredentialInteraction ?? AuthenticatorEmulator.DEFAULT_MAKE_CREDENTIAL_INTERACTION,
             userGetAssertionInteraction: params.userGetAssertionInteraction ?? AuthenticatorEmulator.DEFAULT_GET_ASSERTION_INTERACTION,
-            credentialsRepository: params.stateless ? undefined : AuthenticatorEmulator.DEFAULT_CREDENTIALS_REPOSITORY,
+            credentialsRepository: params.stateless
+                ? undefined
+                : (params.credentialsRepository ?? AuthenticatorEmulator.DEFAULT_CREDENTIALS_REPOSITORY),
             stateless: params.stateless ?? AuthenticatorEmulator.DEFAULT_STATELESS,
         };
     }
@@ -68,8 +70,47 @@ class AuthenticatorEmulator {
         if (unpackedRequest.command === ctap_model_1.CTAP_COMMAND.authenticatorGetInfo) {
             return (0, ctap_model_1.packGetInfoResponse)(this.authenticatorGetInfo());
         }
+        if (unpackedRequest.command === ctap_model_1.CTAP_COMMAND.authenticatorCredentialManagement) {
+            const credentialManagementRequest = (0, ctap_model_1.unpackCredentialManagementRequest)(request);
+            const credentialManagementResponse = this.authenticatorCredentialManagement(credentialManagementRequest);
+            return (0, ctap_model_1.packCredentialManagementResponse)(credentialManagementResponse);
+        }
         throw new ctap_model_1.AuthenticationEmulatorError(ctap_model_1.CTAP_STATUS_CODE.CTAP1_ERR_INVALID_COMMAND);
     }
+    /**
+     * @see https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-errata-20220621.html#authenticatorCredentialManagement
+     */
+    authenticatorCredentialManagement(request) {
+        const repository = this.params.credentialsRepository;
+        if (!repository) {
+            throw new ctap_model_1.AuthenticationEmulatorError(ctap_model_1.CTAP_STATUS_CODE.CTAP2_ERR_NOT_ALLOWED);
+        }
+        switch (request.subCommand) {
+            case ctap_model_1.CREDENTIAL_MANAGEMENT_SUBCOMMAND.deleteCredential:
+                return this.authenticatorDeleteCredential(request);
+            default:
+                throw new ctap_model_1.AuthenticationEmulatorError(ctap_model_1.CTAP_STATUS_CODE.CTAP1_ERR_INVALID_COMMAND);
+        }
+    }
+    authenticatorDeleteCredential(request) {
+        const repository = this.params.credentialsRepository;
+        if (!repository) {
+            throw new ctap_model_1.AuthenticationEmulatorError(ctap_model_1.CTAP_STATUS_CODE.CTAP2_ERR_NOT_ALLOWED);
+        }
+        if (!request.subCommandParams?.credentialId) {
+            throw new ctap_model_1.AuthenticationEmulatorError(ctap_model_1.CTAP_STATUS_CODE.CTAP1_ERR_INVALID_PARAMETER);
+        }
+        const credentialId = request.subCommandParams.credentialId;
+        const credentials = repository.loadCredentials();
+        const credential = credentials.find((cred) => encode_utils_1.default.encodeBase64Url(cred.publicKeyCredentialSource.id) === encode_utils_1.default.encodeBase64Url(credentialId));
+        if (!credential) {
+            throw new ctap_model_1.AuthenticationEmulatorError(ctap_model_1.CTAP_STATUS_CODE.CTAP2_ERR_NO_CREDENTIALS);
+        }
+        repository.deleteCredential(credential);
+        return {
+            existingResidentCredentialsCount: repository.loadCredentials().length,
+        };
+    }
     /** @see https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#authenticatorGetInfo */
     authenticatorGetInfo() {
         return {

package/dist/src/authenticator/ctap-model.d.ts

@@ -76,7 +76,40 @@ export declare enum CTAP_COMMAND {
     authenticatorGetInfo = 4,
     authenticatorClientPIN = 6,
     authenticatorReset = 7,
-    authenticatorGetNextAssertion = 8
+    authenticatorGetNextAssertion = 8,
+    authenticatorCredentialManagement = 10
+}
+export declare enum CREDENTIAL_MANAGEMENT_SUBCOMMAND {
+    getCredsMetadata = 1,
+    enumerateRPsBegin = 2,
+    enumerateRPsGetNextRP = 3,
+    enumerateCredentialsBegin = 4,
+    enumerateCredentialsGetNextCredential = 5,
+    deleteCredential = 6,
+    updateUserInformation = 7
+}
+export interface AuthenticatorCredentialManagementRequest {
+    subCommand: CREDENTIAL_MANAGEMENT_SUBCOMMAND;
+    subCommandParams?: {
+        credentialId?: Uint8Array;
+        rpId?: string;
+        user?: PublicKeyCredentialUserEntity;
+    };
+    pinUvAuthProtocol?: number;
+    pinUvAuthParam?: Uint8Array;
+}
+export interface AuthenticatorCredentialManagementResponse {
+    existingResidentCredentialsCount?: number;
+    maxPossibleRemainingResidentCredentialsCount?: number;
+    rp?: PublicKeyCredentialRpEntity;
+    rpIDHash?: Uint8Array;
+    totalRPs?: number;
+    user?: PublicKeyCredentialUserEntity;
+    credentialID?: Uint8Array;
+    publicKey?: Uint8Array;
+    totalCredentials?: number;
+    credProtect?: number;
+    largeBlobKey?: Uint8Array;
 }
 /** @see https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#responses */
 export interface CTAPAuthenticatorResponse {
@@ -99,9 +132,13 @@ export declare function unpackRequest(request: CTAPAuthenticatorRequest): {
 };
 export declare function packMakeCredentialRequest(request: AuthenticatorMakeCredentialRequest): CTAPAuthenticatorRequest;
 export declare function packGetAssertionRequest(request: AuthenticatorGetAssertionRequest): CTAPAuthenticatorRequest;
+export declare function packCredentialManagementRequest(request: AuthenticatorCredentialManagementRequest): CTAPAuthenticatorRequest;
+export declare function unpackCredentialManagementRequest(request: CTAPAuthenticatorRequest): AuthenticatorCredentialManagementRequest;
 export declare function unpackMakeCredentialResponse(response: CTAPAuthenticatorResponse): AuthenticatorMakeCredentialResponse;
 export declare function packMakeCredentialResponse(response: AuthenticatorMakeCredentialResponse): CTAPAuthenticatorResponse;
 export declare function unpackGetAssertionResponse(response: CTAPAuthenticatorResponse): AuthenticatorGetAssertionResponse;
 export declare function packGetAssertionResponse(response: AuthenticatorGetAssertionResponse): CTAPAuthenticatorResponse;
 export declare function unpackGetInfoResponse(response: CTAPAuthenticatorResponse): AuthenticatorGetInfoResponse;
 export declare function packGetInfoResponse(response: AuthenticatorGetInfoResponse): CTAPAuthenticatorResponse;
+export declare function packCredentialManagementResponse(response: AuthenticatorCredentialManagementResponse): CTAPAuthenticatorResponse;
+export declare function unpackCredentialManagementResponse(response: CTAPAuthenticatorResponse): AuthenticatorCredentialManagementResponse;

package/dist/src/authenticator/ctap-model.js

@@ -3,16 +3,20 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AuthenticationEmulatorError = exports.CTAP_COMMAND = exports.CTAP_STATUS_CODE = void 0;
+exports.AuthenticationEmulatorError = exports.CREDENTIAL_MANAGEMENT_SUBCOMMAND = exports.CTAP_COMMAND = exports.CTAP_STATUS_CODE = void 0;
 exports.unpackRequest = unpackRequest;
 exports.packMakeCredentialRequest = packMakeCredentialRequest;
 exports.packGetAssertionRequest = packGetAssertionRequest;
+exports.packCredentialManagementRequest = packCredentialManagementRequest;
+exports.unpackCredentialManagementRequest = unpackCredentialManagementRequest;
 exports.unpackMakeCredentialResponse = unpackMakeCredentialResponse;
 exports.packMakeCredentialResponse = packMakeCredentialResponse;
 exports.unpackGetAssertionResponse = unpackGetAssertionResponse;
 exports.packGetAssertionResponse = packGetAssertionResponse;
 exports.unpackGetInfoResponse = unpackGetInfoResponse;
 exports.packGetInfoResponse = packGetInfoResponse;
+exports.packCredentialManagementResponse = packCredentialManagementResponse;
+exports.unpackCredentialManagementResponse = unpackCredentialManagementResponse;
 const encode_utils_1 = __importDefault(require("../libs/encode-utils"));
 /** @see https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#error-responses */
 var CTAP_STATUS_CODE;
@@ -36,7 +40,18 @@ var CTAP_COMMAND;
     CTAP_COMMAND[CTAP_COMMAND["authenticatorClientPIN"] = 6] = "authenticatorClientPIN";
     CTAP_COMMAND[CTAP_COMMAND["authenticatorReset"] = 7] = "authenticatorReset";
     CTAP_COMMAND[CTAP_COMMAND["authenticatorGetNextAssertion"] = 8] = "authenticatorGetNextAssertion";
+    CTAP_COMMAND[CTAP_COMMAND["authenticatorCredentialManagement"] = 10] = "authenticatorCredentialManagement";
 })(CTAP_COMMAND || (exports.CTAP_COMMAND = CTAP_COMMAND = {}));
+var CREDENTIAL_MANAGEMENT_SUBCOMMAND;
+(function (CREDENTIAL_MANAGEMENT_SUBCOMMAND) {
+    CREDENTIAL_MANAGEMENT_SUBCOMMAND[CREDENTIAL_MANAGEMENT_SUBCOMMAND["getCredsMetadata"] = 1] = "getCredsMetadata";
+    CREDENTIAL_MANAGEMENT_SUBCOMMAND[CREDENTIAL_MANAGEMENT_SUBCOMMAND["enumerateRPsBegin"] = 2] = "enumerateRPsBegin";
+    CREDENTIAL_MANAGEMENT_SUBCOMMAND[CREDENTIAL_MANAGEMENT_SUBCOMMAND["enumerateRPsGetNextRP"] = 3] = "enumerateRPsGetNextRP";
+    CREDENTIAL_MANAGEMENT_SUBCOMMAND[CREDENTIAL_MANAGEMENT_SUBCOMMAND["enumerateCredentialsBegin"] = 4] = "enumerateCredentialsBegin";
+    CREDENTIAL_MANAGEMENT_SUBCOMMAND[CREDENTIAL_MANAGEMENT_SUBCOMMAND["enumerateCredentialsGetNextCredential"] = 5] = "enumerateCredentialsGetNextCredential";
+    CREDENTIAL_MANAGEMENT_SUBCOMMAND[CREDENTIAL_MANAGEMENT_SUBCOMMAND["deleteCredential"] = 6] = "deleteCredential";
+    CREDENTIAL_MANAGEMENT_SUBCOMMAND[CREDENTIAL_MANAGEMENT_SUBCOMMAND["updateUserInformation"] = 7] = "updateUserInformation";
+})(CREDENTIAL_MANAGEMENT_SUBCOMMAND || (exports.CREDENTIAL_MANAGEMENT_SUBCOMMAND = CREDENTIAL_MANAGEMENT_SUBCOMMAND = {}));
 // Not standard functions and interfaces
 class AuthenticationEmulatorError extends Error {
     status;
@@ -84,6 +99,24 @@ function unpackRequest(request) {
                     pinProtocol: data[0x07],
                 },
             };
+        case CTAP_COMMAND.authenticatorCredentialManagement:
+            return {
+                command: request.command,
+                request: {
+                    subCommand: data[0x01],
+                    subCommandParams: data[0x02]
+                        ? {
+                            credentialId: data[0x02][0x01]
+                                ? encode_utils_1.default.bufferSourceToUint8Array(data[0x02][0x01])
+                                : undefined,
+                            rpId: data[0x02][0x02],
+                            user: data[0x02][0x03],
+                        }
+                        : undefined,
+                    pinUvAuthProtocol: data[0x03],
+                    pinUvAuthParam: data[0x04] ? encode_utils_1.default.bufferSourceToUint8Array(data[0x04]) : undefined,
+                },
+            };
         default:
             return {
                 command: request.command,
@@ -121,6 +154,46 @@ function packGetAssertionRequest(request) {
         }),
     };
 }
+function packCredentialManagementRequest(request) {
+    return {
+        command: CTAP_COMMAND.authenticatorCredentialManagement,
+        data: encode_utils_1.default.encodeCbor({
+            [0x01]: request.subCommand,
+            [0x02]: request.subCommandParams
+                ? {
+                    [0x01]: request.subCommandParams.credentialId,
+                    [0x02]: request.subCommandParams.rpId,
+                    [0x03]: request.subCommandParams.user,
+                }
+                : undefined,
+            [0x03]: request.pinUvAuthProtocol,
+            [0x04]: request.pinUvAuthParam,
+        }),
+    };
+}
+function unpackCredentialManagementRequest(request) {
+    try {
+        const data = encode_utils_1.default.decodeCbor(request.data);
+        const subCommandParams = data[0x02];
+        return {
+            subCommand: data[0x01],
+            subCommandParams: subCommandParams
+                ? {
+                    credentialId: subCommandParams[0x01]
+                        ? encode_utils_1.default.bufferSourceToUint8Array(subCommandParams[0x01])
+                        : undefined,
+                    rpId: subCommandParams[0x02],
+                    user: subCommandParams[0x03],
+                }
+                : undefined,
+            pinUvAuthProtocol: data[0x03],
+            pinUvAuthParam: data[0x04] ? encode_utils_1.default.bufferSourceToUint8Array(data[0x04]) : undefined,
+        };
+    }
+    catch (error) {
+        throw new AuthenticationEmulatorError(CTAP_STATUS_CODE.CTAP2_ERR_INVALID_CBOR, { cause: error });
+    }
+}
 function unpackMakeCredentialResponse(response) {
     try {
         const data = encode_utils_1.default.decodeCbor(response.data);
@@ -200,3 +273,42 @@ function packGetInfoResponse(response) {
         }),
     };
 }
+function packCredentialManagementResponse(response) {
+    return {
+        status: CTAP_STATUS_CODE.CTAP2_OK,
+        data: encode_utils_1.default.encodeCbor({
+            [0x01]: response.existingResidentCredentialsCount,
+            [0x02]: response.maxPossibleRemainingResidentCredentialsCount,
+            [0x03]: response.rp,
+            [0x04]: response.rpIDHash,
+            [0x05]: response.totalRPs,
+            [0x06]: response.user,
+            [0x07]: response.credentialID,
+            [0x08]: response.publicKey,
+            [0x09]: response.totalCredentials,
+            [0x0a]: response.credProtect,
+            [0x0b]: response.largeBlobKey,
+        }),
+    };
+}
+function unpackCredentialManagementResponse(response) {
+    try {
+        const data = encode_utils_1.default.decodeCbor(response.data);
+        return {
+            existingResidentCredentialsCount: data[0x01],
+            maxPossibleRemainingResidentCredentialsCount: data[0x02],
+            rp: data[0x03],
+            rpIDHash: data[0x04] ? encode_utils_1.default.bufferSourceToUint8Array(data[0x04]) : undefined,
+            totalRPs: data[0x05],
+            user: data[0x06],
+            credentialID: data[0x07] ? encode_utils_1.default.bufferSourceToUint8Array(data[0x07]) : undefined,
+            publicKey: data[0x08] ? encode_utils_1.default.bufferSourceToUint8Array(data[0x08]) : undefined,
+            totalCredentials: data[0x09],
+            credProtect: data[0x0a],
+            largeBlobKey: data[0x0b] ? encode_utils_1.default.bufferSourceToUint8Array(data[0x0b]) : undefined,
+        };
+    }
+    catch (error) {
+        throw new AuthenticationEmulatorError(CTAP_STATUS_CODE.CTAP2_ERR_INVALID_CBOR, { cause: error });
+    }
+}

package/dist/src/index.d.ts

@@ -12,5 +12,6 @@ export * from "./repository/credentials-memory-repository";
 export declare const BrowserInjection: {
     WebAuthnEmulatorGet: string;
     WebAuthnEmulatorCreate: string;
+    WebAuthnEmulatorSignalUnknownCredential: string;
     HookWebAuthnApis: string;
 };

package/dist/src/index.js

@@ -30,5 +30,6 @@ __exportStar(require("./repository/credentials-memory-repository"), exports);
 exports.BrowserInjection = {
     WebAuthnEmulatorGet: browser_injection_1.WebAuthnEmulatorGet,
     WebAuthnEmulatorCreate: browser_injection_1.WebAuthnEmulatorCreate,
+    WebAuthnEmulatorSignalUnknownCredential: browser_injection_1.WebAuthnEmulatorSignalUnknownCredential,
     HookWebAuthnApis: browser_injection_1.HookWebAuthnApis,
 };

package/dist/src/repository/credentials-file-repository.js

@@ -15,13 +15,23 @@ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (
 }) : function(o, v) {
     o["default"] = v;
 });
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PasskeysCredentialsFileRepository = void 0;
 const fs = __importStar(require("node:fs"));

package/dist/src/test-utils/browser-injection.d.ts

@@ -1,3 +1,4 @@
 export declare const WebAuthnEmulatorGet = "webAuthnEmulatorGet";
 export declare const WebAuthnEmulatorCreate = "webAuthnEmulatorCreate";
+export declare const WebAuthnEmulatorSignalUnknownCredential = "webAuthnEmulatorSignalUnknownCredential";
 export declare const HookWebAuthnApis: string;

package/dist/src/test-utils/browser-injection.js

@@ -15,18 +15,29 @@ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (
 }) : function(o, v) {
     o["default"] = v;
 });
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.HookWebAuthnApis = exports.WebAuthnEmulatorCreate = exports.WebAuthnEmulatorGet = void 0;
+exports.HookWebAuthnApis = exports.WebAuthnEmulatorSignalUnknownCredential = exports.WebAuthnEmulatorCreate = exports.WebAuthnEmulatorGet = void 0;
 const Model = __importStar(require("../webauthn/webauthn-model-json"));
 exports.WebAuthnEmulatorGet = "webAuthnEmulatorGet";
 exports.WebAuthnEmulatorCreate = "webAuthnEmulatorCreate";
+exports.WebAuthnEmulatorSignalUnknownCredential = "webAuthnEmulatorSignalUnknownCredential";
 const webAuthnModelExports = Object.values(Model)
     .map((m) => m.toString())
     .join("\n  ");
@@ -47,6 +58,12 @@ exports.HookWebAuthnApis = `
     const responseJSON = await window.${exports.WebAuthnEmulatorGet}(optionsJSON);
     return parseAuthenticationResponseFromJSON(responseJSON);
   }
+  
   PublicKeyCredential.isConditionalMediationAvailable = async () => true;
+  
+  PublicKeyCredential.signalUnknownCredential = async (options) => {
+    if (!options || !options.rpId || !options.credentialId) return;
+    await window.${exports.WebAuthnEmulatorSignalUnknownCredential}(options);
+  }
 })();
 `;

package/dist/src/webauthn/webauthn-emulator.d.ts

@@ -1,5 +1,5 @@
 import { AuthenticatorEmulator } from "../authenticator/authenticator-emulator";
-import { type AuthenticationResponseJSON, type CreatePublicKeyCredential, type PublicKeyCredentialCreationOptionsJSON, type PublicKeyCredentialRequestOptionsJSON, type RegistrationResponseJSON, type RequestPublicKeyCredential } from "./webauthn-model-json";
+import { type AuthenticationResponseJSON, type CreatePublicKeyCredential, type PublicKeyCredentialCreationOptionsJSON, type PublicKeyCredentialRequestOptionsJSON, type RegistrationResponseJSON, type RequestPublicKeyCredential, type UnknownCredentialOptionsJSON } from "./webauthn-model-json";
 export type AuthenticatorInfo = {
     version: string;
     aaguid: string;
@@ -23,6 +23,7 @@ export declare class WebAuthnEmulator {
     getJSON(origin: string, optionsJSON: PublicKeyCredentialRequestOptionsJSON): AuthenticationResponseJSON;
     createJSON(origin: string, optionsJSON: PublicKeyCredentialCreationOptionsJSON): RegistrationResponseJSON;
     getAuthenticatorInfo(): AuthenticatorInfo;
+    signalUnknownCredential(options: UnknownCredentialOptionsJSON): void;
     /** @see https://developer.mozilla.org/en-US/docs/Web/API/CredentialsContainer/get */
     get(origin: string, options: CredentialRequestOptions): RequestPublicKeyCredential;
     /** @see https://developer.mozilla.org/ja/docs/Web/API/CredentialsContainer/create */

package/dist/src/webauthn/webauthn-emulator.js

@@ -48,6 +48,17 @@ class WebAuthnEmulator {
             },
         };
     }
+    signalUnknownCredential(options) {
+        const credentialId = (0, webauthn_model_json_1.decodeBase64Url)(options.credentialId);
+        const request = (0, ctap_model_1.packCredentialManagementRequest)({
+            subCommand: ctap_model_1.CREDENTIAL_MANAGEMENT_SUBCOMMAND.deleteCredential,
+            subCommandParams: {
+                credentialId: encode_utils_1.default.bufferSourceToUint8Array(credentialId),
+                rpId: options.rpId,
+            },
+        });
+        this.authenticator.command(request);
+    }
     /** @see https://developer.mozilla.org/en-US/docs/Web/API/CredentialsContainer/get */
     get(origin, options) {
         if (!options.publicKey)

package/dist/src/webauthn/webauthn-model-json.d.ts

@@ -91,6 +91,10 @@ export declare function toAuthenticationResponseJSON(credential: PublicKeyCreden
 export declare function toCreationOptionsJSON(options: PublicKeyCredentialCreationOptions): PublicKeyCredentialCreationOptionsJSON;
 export declare function toRequestOptionsJSON(options: PublicKeyCredentialRequestOptions): PublicKeyCredentialRequestOptionsJSON;
 export declare function parseRegistrationResponseFromJSON(options: RegistrationResponseJSON): CreatePublicKeyCredential;
+export interface UnknownCredentialOptionsJSON {
+    rpId: string;
+    credentialId: Base64urlString;
+}
 export declare function parseAuthenticationResponseFromJSON(options: AuthenticationResponseJSON): RequestPublicKeyCredential;
 export declare function toPublicKeyCredentialDescriptorJSON(credential: PublicKeyCredentialDescriptor): PublicKeyCredentialDescriptorJSON;
 export declare function parsePublicKeyCredentialDescriptorFromJSON(credential: PublicKeyCredentialDescriptorJSON): PublicKeyCredentialDescriptor;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nid-webauthn-emulator",
-  "version": "0.1.4",
+  "version": "0.2.0",
   "keywords": [
     "test",
     "e2e",
@@ -15,19 +15,19 @@
   "main": "dist/src/index.js",
   "types": "dist/src/index.d.ts",
   "devDependencies": {
-    "@biomejs/biome": "^1.9.3",
+    "@biomejs/biome": "^1.9.4",
     "@jest/globals": "^29.7.0",
-    "@simplewebauthn/server": "^11.0.0",
-    "@tsconfig/recommended": "^1.0.7",
-    "@types/node": "^22.7.5",
+    "@simplewebauthn/server": "^13.1.1",
+    "@tsconfig/recommended": "^1.0.8",
+    "@types/node": "^22.13.4",
     "jest": "^29.7.0",
     "ts-jest": "^29.2.5",
     "ts-node": "^10.9.2",
-    "typescript": "^5.6.3"
+    "typescript": "^5.7.3"
   },
   "dependencies": {
-    "cbor": "^9.0.2",
-    "tldts": "^6.1.51"
+    "cbor": "^10.0.3",
+    "tldts": "^6.1.77"
   },
   "scripts": {
     "check": "biome check .",