nid-webauthn-emulator 0.2.13 → 0.2.15

package/dist/spec/authenticator/ctap-model.spec.js

@@ -1,9 +1,13 @@
 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
-const globals_1 = require("@jest/globals");
+const strict_1 = __importDefault(require("node:assert/strict"));
+const node_test_1 = require("node:test");
 const ctap_model_1 = require("../../src/authenticator/ctap-model");
-(0, globals_1.describe)("CTAP Model Test", () => {
-    (0, globals_1.test)("MakeCredentialRequest CTAP Object pack and unpack", async () => {
+(0, node_test_1.describe)("CTAP Model Test", () => {
+    (0, node_test_1.test)("MakeCredentialRequest CTAP Object pack and unpack", async () => {
         const testRequest = {
             clientDataHash: new Uint8Array([99, 104, 97, 108, 108, 101, 110, 103, 101]),
             rp: { name: "webauthn.io", id: "webauthn.io" },
@@ -18,10 +22,10 @@ const ctap_model_1 = require("../../src/authenticator/ctap-model");
         const packed = (0, ctap_model_1.packMakeCredentialRequest)(testRequest);
         const unpacked = (0, ctap_model_1.unpackRequest)(packed);
         const rePacked = (0, ctap_model_1.packMakeCredentialRequest)(unpacked.request);
-        (0, globals_1.expect)(packed).toEqual(rePacked);
-        (0, globals_1.expect)(unpacked.request).toEqual(testRequest);
+        strict_1.default.deepEqual(packed, rePacked);
+        strict_1.default.deepEqual(unpacked.request, testRequest);
     });
-    (0, globals_1.test)("GetAssertionRequest CTAP Object pack and unpack", async () => {
+    (0, node_test_1.test)("GetAssertionRequest CTAP Object pack and unpack", async () => {
         const testRequest = {
             rpId: "webauthn.io",
             clientDataHash: new Uint8Array([99, 104, 97, 108, 108, 101, 110, 103, 101]),
@@ -34,10 +38,10 @@ const ctap_model_1 = require("../../src/authenticator/ctap-model");
         const packed = (0, ctap_model_1.packGetAssertionRequest)(testRequest);
         const unpacked = (0, ctap_model_1.unpackRequest)(packed);
         const rePacked = (0, ctap_model_1.packGetAssertionRequest)(unpacked.request);
-        (0, globals_1.expect)(packed).toEqual(rePacked);
-        (0, globals_1.expect)(unpacked.request).toEqual(testRequest);
+        strict_1.default.deepEqual(packed, rePacked);
+        strict_1.default.deepEqual(unpacked.request, testRequest);
     });
-    (0, globals_1.test)("MakeCredentialResponse CTAP Object pack and unpack", async () => {
+    (0, node_test_1.test)("MakeCredentialResponse CTAP Object pack and unpack", async () => {
         const testResponse = {
             fmt: "none",
             attStmt: {},
@@ -46,11 +50,12 @@ const ctap_model_1 = require("../../src/authenticator/ctap-model");
         const packed = (0, ctap_model_1.packMakeCredentialResponse)(testResponse);
         const unpacked = (0, ctap_model_1.unpackMakeCredentialResponse)(packed);
         const rePacked = (0, ctap_model_1.packMakeCredentialResponse)(unpacked);
-        (0, globals_1.expect)(packed).toEqual(rePacked);
-        (0, globals_1.expect)(unpacked).toEqual(testResponse);
+        strict_1.default.deepEqual(packed, rePacked);
+        strict_1.default.deepEqual(unpacked, testResponse);
     });
-    (0, globals_1.test)("GetAssertionResponse CTAP Object pack and unpack", async () => {
+    (0, node_test_1.test)("GetAssertionResponse CTAP Object pack and unpack", async () => {
         const testResponse = {
+            credential: undefined,
             authData: new Uint8Array([97, 117, 116, 104, 68, 97, 116, 97]),
             signature: new Uint8Array([115, 105, 103]),
             user: { id: new Uint8Array([116, 101, 115, 116, 45, 117, 115, 101, 114]), name: "user", displayName: "user" },
@@ -59,10 +64,10 @@ const ctap_model_1 = require("../../src/authenticator/ctap-model");
         const packed = (0, ctap_model_1.packGetAssertionResponse)(testResponse);
         const unpacked = (0, ctap_model_1.unpackGetAssertionResponse)(packed);
         const rePacked = (0, ctap_model_1.packGetAssertionResponse)(unpacked);
-        (0, globals_1.expect)(packed).toEqual(rePacked);
-        (0, globals_1.expect)(unpacked).toEqual(testResponse);
+        strict_1.default.deepEqual(packed, rePacked);
+        strict_1.default.deepEqual(unpacked, testResponse);
     });
-    (0, globals_1.test)("GetInfoResponse CTAP Object pack and unpack", async () => {
+    (0, node_test_1.test)("GetInfoResponse CTAP Object pack and unpack", async () => {
         const testResponse = {
             versions: ["U2F_V2"],
             extensions: ["credProtect"],
@@ -74,48 +79,48 @@ const ctap_model_1 = require("../../src/authenticator/ctap-model");
         const packed = (0, ctap_model_1.packGetInfoResponse)(testResponse);
         const unpacked = (0, ctap_model_1.unpackGetInfoResponse)(packed);
         const rePacked = (0, ctap_model_1.packGetInfoResponse)(unpacked);
-        (0, globals_1.expect)(packed).toEqual(rePacked);
-        (0, globals_1.expect)(unpacked).toEqual(testResponse);
+        strict_1.default.deepEqual(packed, rePacked);
+        strict_1.default.deepEqual(unpacked, testResponse);
     });
-    (0, globals_1.test)("Illegal data parse test _ failed to unpack", async () => {
+    (0, node_test_1.test)("Illegal data parse test _ failed to unpack", async () => {
         const response = {};
         const expected = "CTAP error: CTAP2_ERR_INVALID_CBOR (18)";
-        (0, globals_1.expect)(() => (0, ctap_model_1.unpackMakeCredentialResponse)(response)).toThrow(expected);
-        (0, globals_1.expect)(() => (0, ctap_model_1.unpackGetAssertionResponse)(response)).toThrow(expected);
-        (0, globals_1.expect)(() => (0, ctap_model_1.unpackGetInfoResponse)(response)).toThrow(expected);
+        strict_1.default.throws(() => (0, ctap_model_1.unpackMakeCredentialResponse)(response), { message: expected });
+        strict_1.default.throws(() => (0, ctap_model_1.unpackGetAssertionResponse)(response), { message: expected });
+        strict_1.default.throws(() => (0, ctap_model_1.unpackGetInfoResponse)(response), { message: expected });
     });
-    (0, globals_1.test)("Illegal cbor data parse test _ failed to unpack", async () => {
+    (0, node_test_1.test)("Illegal cbor data parse test _ failed to unpack", async () => {
         const request = {
             command: ctap_model_1.CTAP_COMMAND.authenticatorMakeCredential,
             data: new Uint8Array([1, 2, 3, 4, 5]),
         };
-        (0, globals_1.expect)(() => (0, ctap_model_1.unpackRequest)(request)).toThrow("CTAP error: CTAP2_ERR_INVALID_CBOR (18)");
+        strict_1.default.throws(() => (0, ctap_model_1.unpackRequest)(request), { message: "CTAP error: CTAP2_ERR_INVALID_CBOR (18)" });
     });
-    (0, globals_1.test)("unpackRequest default branch returns undefined request for unhandled command", () => {
+    (0, node_test_1.test)("unpackRequest default branch returns undefined request for unhandled command", () => {
         const req = { command: ctap_model_1.CTAP_COMMAND.authenticatorClientPIN }; // not explicitly handled in switch
         const unpacked = (0, ctap_model_1.unpackRequest)(req);
-        (0, globals_1.expect)(unpacked.command).toBe(ctap_model_1.CTAP_COMMAND.authenticatorClientPIN);
-        (0, globals_1.expect)(unpacked.request).toBeUndefined();
+        strict_1.default.equal(unpacked.command, ctap_model_1.CTAP_COMMAND.authenticatorClientPIN);
+        strict_1.default.equal(unpacked.request, undefined);
     });
-    (0, globals_1.test)("credential management request with undefined optional params round-trips", () => {
+    (0, node_test_1.test)("credential management request with undefined optional params round-trips", () => {
         const packed = (0, ctap_model_1.packCredentialManagementRequest)({
             subCommand: ctap_model_1.CREDENTIAL_MANAGEMENT_SUBCOMMAND.enumerateCredentialsBegin,
             // subCommandParams and pinUvAuth* omitted intentionally
         });
         const unpacked = (0, ctap_model_1.unpackCredentialManagementRequest)(packed);
-        (0, globals_1.expect)(unpacked.subCommand).toBe(ctap_model_1.CREDENTIAL_MANAGEMENT_SUBCOMMAND.enumerateCredentialsBegin);
-        (0, globals_1.expect)(unpacked.subCommandParams).toBeUndefined();
-        (0, globals_1.expect)(unpacked.pinUvAuthParam).toBeUndefined();
-        (0, globals_1.expect)(unpacked.pinUvAuthProtocol).toBeUndefined();
+        strict_1.default.equal(unpacked.subCommand, ctap_model_1.CREDENTIAL_MANAGEMENT_SUBCOMMAND.enumerateCredentialsBegin);
+        strict_1.default.equal(unpacked.subCommandParams, undefined);
+        strict_1.default.equal(unpacked.pinUvAuthParam, undefined);
+        strict_1.default.equal(unpacked.pinUvAuthProtocol, undefined);
     });
-    (0, globals_1.test)("credential management response optional binary fields handled when absent/present", () => {
+    (0, node_test_1.test)("credential management response optional binary fields handled when absent/present", () => {
         // Absent case
         const packedAbsent = (0, ctap_model_1.packCredentialManagementResponse)({});
         const absent = (0, ctap_model_1.unpackCredentialManagementResponse)(packedAbsent);
-        (0, globals_1.expect)(absent.credentialID).toBeUndefined();
-        (0, globals_1.expect)(absent.publicKey).toBeUndefined();
-        (0, globals_1.expect)(absent.rpIDHash).toBeUndefined();
-        (0, globals_1.expect)(absent.largeBlobKey).toBeUndefined();
+        strict_1.default.equal(absent.credentialID, undefined);
+        strict_1.default.equal(absent.publicKey, undefined);
+        strict_1.default.equal(absent.rpIDHash, undefined);
+        strict_1.default.equal(absent.largeBlobKey, undefined);
         // Present case
         const bin = new Uint8Array([1, 2, 3]);
         const packedPresent = (0, ctap_model_1.packCredentialManagementResponse)({
@@ -125,32 +130,32 @@ const ctap_model_1 = require("../../src/authenticator/ctap-model");
             largeBlobKey: bin,
         });
         const present = (0, ctap_model_1.unpackCredentialManagementResponse)(packedPresent);
-        (0, globals_1.expect)(present.credentialID).toBeDefined();
-        (0, globals_1.expect)(present.publicKey).toBeDefined();
-        (0, globals_1.expect)(present.rpIDHash).toBeDefined();
-        (0, globals_1.expect)(present.largeBlobKey).toBeDefined();
+        strict_1.default.notEqual(present.credentialID, undefined);
+        strict_1.default.notEqual(present.publicKey, undefined);
+        strict_1.default.notEqual(present.rpIDHash, undefined);
+        strict_1.default.notEqual(present.largeBlobKey, undefined);
         if (present.credentialID && present.publicKey && present.rpIDHash && present.largeBlobKey) {
-            (0, globals_1.expect)(Array.from(present.credentialID)).toEqual([1, 2, 3]);
-            (0, globals_1.expect)(Array.from(present.publicKey)).toEqual([1, 2, 3]);
-            (0, globals_1.expect)(Array.from(present.rpIDHash)).toEqual([1, 2, 3]);
-            (0, globals_1.expect)(Array.from(present.largeBlobKey)).toEqual([1, 2, 3]);
+            strict_1.default.deepEqual(Array.from(present.credentialID), [1, 2, 3]);
+            strict_1.default.deepEqual(Array.from(present.publicKey), [1, 2, 3]);
+            strict_1.default.deepEqual(Array.from(present.rpIDHash), [1, 2, 3]);
+            strict_1.default.deepEqual(Array.from(present.largeBlobKey), [1, 2, 3]);
         }
     });
-    (0, globals_1.test)("unpackCredentialManagementRequest throws on invalid CBOR", () => {
+    (0, node_test_1.test)("unpackCredentialManagementRequest throws on invalid CBOR", () => {
         const bad = {
             command: ctap_model_1.CTAP_COMMAND.authenticatorCredentialManagement,
             data: new Uint8Array([1, 2, 3]),
         };
-        (0, globals_1.expect)(() => (0, ctap_model_1.unpackCredentialManagementRequest)(bad)).toThrow(/CTAP2_ERR_INVALID_CBOR/);
+        strict_1.default.throws(() => (0, ctap_model_1.unpackCredentialManagementRequest)(bad), /CTAP2_ERR_INVALID_CBOR/);
     });
-    (0, globals_1.test)("unpackCredentialManagementResponse throws on invalid CBOR", () => {
+    (0, node_test_1.test)("unpackCredentialManagementResponse throws on invalid CBOR", () => {
         const bad = {
             status: ctap_model_1.CTAP_STATUS_CODE.CTAP2_OK,
             data: new Uint8Array([1, 2, 3]),
         };
-        (0, globals_1.expect)(() => (0, ctap_model_1.unpackCredentialManagementResponse)(bad)).toThrow(/CTAP2_ERR_INVALID_CBOR/);
+        strict_1.default.throws(() => (0, ctap_model_1.unpackCredentialManagementResponse)(bad), /CTAP2_ERR_INVALID_CBOR/);
     });
-    (0, globals_1.test)("unpackRequest CM includes pinUvAuthParam when present", () => {
+    (0, node_test_1.test)("unpackRequest CM includes pinUvAuthParam when present", () => {
         const pin = new Uint8Array([7, 7]);
         const packed = (0, ctap_model_1.packCredentialManagementRequest)({
             subCommand: ctap_model_1.CREDENTIAL_MANAGEMENT_SUBCOMMAND.enumerateCredentialsBegin,
@@ -160,12 +165,12 @@ const ctap_model_1 = require("../../src/authenticator/ctap-model");
         const unpacked = (0, ctap_model_1.unpackRequest)(packed);
         const req = unpacked.request;
         const isMgmt = (x) => typeof x === "object" && x !== null && "subCommand" in x;
-        (0, globals_1.expect)(isMgmt(req)).toBe(true);
+        strict_1.default.equal(isMgmt(req), true);
         if (isMgmt(req)) {
-            (0, globals_1.expect)(Array.from(req.pinUvAuthParam ?? new Uint8Array())).toEqual([7, 7]);
+            strict_1.default.deepEqual(Array.from(req.pinUvAuthParam ?? new Uint8Array()), [7, 7]);
         }
     });
-    (0, globals_1.test)("unpackCredentialManagementRequest includes pinUvAuthParam when present", () => {
+    (0, node_test_1.test)("unpackCredentialManagementRequest includes pinUvAuthParam when present", () => {
         const pin = new Uint8Array([9, 9]);
         const packed = (0, ctap_model_1.packCredentialManagementRequest)({
             subCommand: ctap_model_1.CREDENTIAL_MANAGEMENT_SUBCOMMAND.enumerateCredentialsBegin,
@@ -173,6 +178,6 @@ const ctap_model_1 = require("../../src/authenticator/ctap-model");
             pinUvAuthParam: pin,
         });
         const req = (0, ctap_model_1.unpackCredentialManagementRequest)(packed);
-        (0, globals_1.expect)(Array.from(req.pinUvAuthParam ?? new Uint8Array())).toEqual([9, 9]);
+        strict_1.default.deepEqual(Array.from(req.pinUvAuthParam ?? new Uint8Array()), [9, 9]);
     });
 });

package/dist/spec/integration/integration.spec.js

@@ -3,11 +3,14 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-const globals_1 = require("@jest/globals");
+const node_test_1 = require("node:test");
 const index_1 = __importDefault(require("../../src/index"));
 const webauthn_io_1 = require("./webauthn-io");
-(0, globals_1.describe)("Passkeys Integration Test by webauthn.io", () => {
-    globals_1.test.skip("Registration Ceremony and Authentication Ceremony", async () => {
+(0, node_test_1.describe)("Passkeys Integration Test by webauthn.io", () => {
+    (0, node_test_1.test)("Registration Ceremony and Authentication Ceremony", {
+        timeout: 60_000,
+        skip: process.env.RUN_WEBAUTHN_IO !== "1",
+    }, async () => {
         const origin = "https://webauthn.io";
         const emulator = new index_1.default();
         const webauthnIO = await webauthn_io_1.WebAuthnIO.create();
@@ -28,5 +31,5 @@ const webauthn_io_1 = require("./webauthn-io");
         console.log("Authentication credential", requestCredential);
         await webauthnIO.getAuthenticationVerification(requestCredential);
         console.log("Authentication verification completed");
-    }, 60000);
+    });
 });

package/dist/spec/integration/passkeys-api-client.d.ts

@@ -1,4 +1,3 @@
-import type { AuthenticationResponseJSON, PublicKeyCredentialCreationOptionsJSON, PublicKeyCredentialRequestOptionsJSON, RegistrationResponseJSON } from "../../src/webauthn/webauthn-model-json";
 export interface PasskeysUser {
     username: string;
     id: string;

package/dist/spec/integration/webauthn-io.d.ts

@@ -1,4 +1,3 @@
-import type { AuthenticationResponseJSON, PublicKeyCredentialCreationOptionsJSON, PublicKeyCredentialRequestOptionsJSON, RegistrationResponseJSON } from "../../src/webauthn/webauthn-model-json";
 import type { PasskeysApiClient, PasskeysUser } from "./passkeys-api-client";
 /**
  * Passkeys Api Client implementation for webauthn.io

package/dist/spec/libs/browser-injection.spec.js

@@ -1,9 +1,16 @@
 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
-const globals_1 = require("@jest/globals");
+const strict_1 = __importDefault(require("node:assert/strict"));
+const node_test_1 = require("node:test");
+const authenticator_emulator_1 = require("../../src/authenticator/authenticator-emulator");
+const encode_utils_1 = __importDefault(require("../../src/libs/encode-utils"));
 const browser_injection_1 = require("../../src/test-utils/browser-injection");
-(0, globals_1.describe)("Browser Injection Test", () => {
-    (0, globals_1.test)("Browser Injection Test", async () => {
+const webauthn_emulator_1 = require("../../src/webauthn/webauthn-emulator");
+(0, node_test_1.describe)("Browser Injection Test", () => {
+    (0, node_test_1.test)("Browser Injection Test", async () => {
         const window = { navigator: { credentials: { create: undefined, get: undefined } } };
         const PublicKeyCredential = {
             isConditionalMediationAvailable: async () => false,
@@ -11,9 +18,50 @@ const browser_injection_1 = require("../../src/test-utils/browser-injection");
         };
         // biome-ignore lint/security/noGlobalEval: This is a test code.
         eval(browser_injection_1.HookWebAuthnApis);
-        (0, globals_1.expect)(await PublicKeyCredential.isConditionalMediationAvailable()).toBeTruthy();
-        (0, globals_1.expect)(window.navigator.credentials.create).toBeDefined();
-        (0, globals_1.expect)(window.navigator.credentials.get).toBeDefined();
-        (0, globals_1.expect)(PublicKeyCredential.signalUnknownCredential).toBeDefined();
+        strict_1.default.ok(await PublicKeyCredential.isConditionalMediationAvailable());
+        strict_1.default.notEqual(window.navigator.credentials.create, undefined);
+        strict_1.default.notEqual(window.navigator.credentials.get, undefined);
+        strict_1.default.notEqual(PublicKeyCredential.signalUnknownCredential, undefined);
+    });
+    // The hooked create/get run in-page, so every helper they reach must be exported.
+    (0, node_test_1.test)("hooked create and get round-trip prf through the emulator", async () => {
+        const origin = "https://test-rp.org";
+        const emulator = new webauthn_emulator_1.WebAuthnEmulator(new authenticator_emulator_1.AuthenticatorEmulator({ hmacSecret: "hmac-secret-mc" }));
+        const window = {
+            navigator: { credentials: { create: undefined, get: undefined } },
+            webAuthnEmulatorCreate: async (optionsJSON) => emulator.createJSON(origin, optionsJSON),
+            webAuthnEmulatorGet: async (optionsJSON) => emulator.getJSON(origin, optionsJSON),
+        };
+        const PublicKeyCredential = { isConditionalMediationAvailable: async () => false };
+        // biome-ignore lint/security/noGlobalEval: This is a test code.
+        eval(browser_injection_1.HookWebAuthnApis);
+        strict_1.default.ok(await PublicKeyCredential.isConditionalMediationAvailable());
+        const first = encode_utils_1.default.strToUint8Array("prf-input-first");
+        const create = window.navigator.credentials.create;
+        strict_1.default.ok(create);
+        const created = await create({
+            publicKey: {
+                rp: { id: "test-rp.org", name: "rp" },
+                user: { id: encode_utils_1.default.strToUint8Array("user"), name: "user", displayName: "user" },
+                challenge: encode_utils_1.default.strToUint8Array("challenge"),
+                pubKeyCredParams: [{ alg: -7, type: "public-key" }],
+                extensions: { prf: { eval: { first } } },
+            },
+        });
+        const createdPrf = created.getClientExtensionResults().prf?.results?.first;
+        strict_1.default.ok(createdPrf instanceof ArrayBuffer);
+        strict_1.default.equal(createdPrf.byteLength, 32);
+        const get = window.navigator.credentials.get;
+        strict_1.default.ok(get);
+        const asserted = await get({
+            publicKey: {
+                rpId: "test-rp.org",
+                challenge: encode_utils_1.default.strToUint8Array("challenge-2"),
+                extensions: { prf: { eval: { first } } },
+            },
+        });
+        const assertedPrf = asserted.getClientExtensionResults().prf?.results?.first;
+        strict_1.default.ok(assertedPrf instanceof ArrayBuffer);
+        strict_1.default.deepEqual(new Uint8Array(assertedPrf), new Uint8Array(createdPrf));
     });
 });

package/dist/spec/libs/cbor.spec.js

@@ -3,21 +3,22 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-const globals_1 = require("@jest/globals");
+const strict_1 = __importDefault(require("node:assert/strict"));
+const node_test_1 = require("node:test");
 const encode_utils_1 = __importDefault(require("../../src/libs/encode-utils"));
-(0, globals_1.describe)("CBOR encode/decode edge cases", () => {
-    (0, globals_1.test)("round-trips primitive values and large integer encodings", () => {
+(0, node_test_1.describe)("CBOR encode/decode edge cases", () => {
+    (0, node_test_1.test)("round-trips primitive values and large integer encodings", () => {
         const encoded = encode_utils_1.default.encodeCbor({
             1: "one",
             nil: null,
             values: [false, true, undefined, -2, 24, 0x100, 0x1_0000, 0x1_0000_0000],
         });
         const decoded = encode_utils_1.default.decodeCbor(encoded);
-        (0, globals_1.expect)(decoded[1]).toBe("one");
-        (0, globals_1.expect)(decoded.nil).toBeNull();
-        (0, globals_1.expect)(decoded.values).toEqual([false, true, undefined, -2, 24, 0x100, 0x1_0000, 0x1_0000_0000]);
+        strict_1.default.equal(decoded[1], "one");
+        strict_1.default.equal(decoded.nil, null);
+        strict_1.default.deepEqual(decoded.values, [false, true, undefined, -2, 24, 0x100, 0x1_0000, 0x1_0000_0000]);
     });
-    (0, globals_1.test)("handles ArrayBuffer values within objects and arrays", () => {
+    (0, node_test_1.test)("handles ArrayBuffer values within objects and arrays", () => {
         const ab = new Uint8Array([1, 2, 3]).buffer; // ArrayBuffer branch
         const ua = new Uint8Array([4, 5]);
         const obj = {
@@ -28,49 +29,70 @@ const encode_utils_1 = __importDefault(require("../../src/libs/encode-utils"));
         const encoded = encode_utils_1.default.encodeCbor(obj);
         const decoded = encode_utils_1.default.decodeCbor(encoded);
         // ArrayBuffer is decoded back to Uint8Array
-        (0, globals_1.expect)(decoded.v1).toBeInstanceOf(Uint8Array);
-        (0, globals_1.expect)(Array.from(decoded.v1)).toEqual([1, 2, 3]);
+        strict_1.default.ok(decoded.v1 instanceof Uint8Array);
+        strict_1.default.deepEqual(Array.from(decoded.v1), [1, 2, 3]);
         // Existing Uint8Array round-trips
-        (0, globals_1.expect)(Array.from(decoded.v2)).toEqual([4, 5]);
+        strict_1.default.deepEqual(Array.from(decoded.v2), [4, 5]);
         // Mixed array elements preserved as Uint8Array
-        (0, globals_1.expect)(Array.isArray(decoded.arr)).toBe(true);
+        strict_1.default.equal(Array.isArray(decoded.arr), true);
         const [a0, a1] = decoded.arr;
-        (0, globals_1.expect)(Array.from(a0)).toEqual([1, 2, 3]);
-        (0, globals_1.expect)(Array.from(a1)).toEqual([4, 5]);
+        strict_1.default.deepEqual(Array.from(a0), [1, 2, 3]);
+        strict_1.default.deepEqual(Array.from(a1), [4, 5]);
     });
-    (0, globals_1.test)("handles Buffer values without conversion in encoder and to Uint8Array on decode", () => {
+    (0, node_test_1.test)("handles Buffer values without conversion in encoder and to Uint8Array on decode", () => {
         const buf = Buffer.from([9, 8]);
         const obj = { b: buf };
         const encoded = encode_utils_1.default.encodeCbor(obj);
         const decoded = encode_utils_1.default.decodeCbor(encoded);
-        (0, globals_1.expect)(decoded.b).toBeInstanceOf(Uint8Array);
-        (0, globals_1.expect)(Array.from(decoded.b)).toEqual([9, 8]);
+        strict_1.default.ok(decoded.b instanceof Uint8Array);
+        strict_1.default.deepEqual(Array.from(decoded.b), [9, 8]);
     });
-    (0, globals_1.test)("keeps non-exact integer object keys as text string map keys", () => {
+    (0, node_test_1.test)("keeps non-exact integer object keys as text string map keys", () => {
         const decoded = encode_utils_1.default.decodeCbor(encode_utils_1.default.encodeCbor({
             "1": false,
             "01": true,
             "1abc": true,
         }));
-        (0, globals_1.expect)(decoded[1]).toBe(false);
-        (0, globals_1.expect)(decoded["01"]).toBe(true);
-        (0, globals_1.expect)(decoded["1abc"]).toBe(true);
+        strict_1.default.equal(decoded[1], false);
+        strict_1.default.equal(decoded["01"], true);
+        strict_1.default.equal(decoded["1abc"], true);
     });
-    (0, globals_1.test)("decodes explicit integer widths", () => {
-        (0, globals_1.expect)(encode_utils_1.default.decodeCbor(new Uint8Array([0x1a, 0x00, 0x01, 0x00, 0x00]))).toBe(0x1_0000);
-        (0, globals_1.expect)(encode_utils_1.default.decodeCbor(new Uint8Array([0x1b, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00]))).toBe(0x1_0000_0000);
-        (0, globals_1.expect)(encode_utils_1.default.decodeCbor(new Uint8Array([0xf6]))).toBeNull();
+    (0, node_test_1.test)("decodes explicit integer widths", () => {
+        strict_1.default.equal(encode_utils_1.default.decodeCbor(new Uint8Array([0x1a, 0x00, 0x01, 0x00, 0x00])), 0x1_0000);
+        strict_1.default.equal(encode_utils_1.default.decodeCbor(new Uint8Array([0x1b, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00, 0x00])), 0x1_0000_0000);
+        strict_1.default.equal(encode_utils_1.default.decodeCbor(new Uint8Array([0xf6])), null);
     });
-    (0, globals_1.test)("rejects unsupported values and malformed input", () => {
-        (0, globals_1.expect)(() => encode_utils_1.default.encodeCbor(Symbol("unsupported"))).toThrow("Unsupported CBOR value type: symbol");
-        (0, globals_1.expect)(() => encode_utils_1.default.encodeCbor({ value: Number.NaN })).toThrow("CBOR only supports safe integers");
-        (0, globals_1.expect)(() => encode_utils_1.default.decodeCbor(new Uint8Array())).toThrow("Insufficient data");
-        (0, globals_1.expect)(() => encode_utils_1.default.decodeCbor(new Uint8Array([0x42, 0x01]))).toThrow("Insufficient data");
-        (0, globals_1.expect)(() => encode_utils_1.default.decodeCbor(new Uint8Array([0x5f]))).toThrow("Unsupported indefinite-length CBOR data");
-        (0, globals_1.expect)(() => encode_utils_1.default.decodeCbor(new Uint8Array([0x01, 0x02]))).toThrow("Unexpected trailing CBOR data");
-        (0, globals_1.expect)(() => encode_utils_1.default.decodeCbor(new Uint8Array([0xc1, 0x01]))).toThrow("Unsupported CBOR tagged value");
-        (0, globals_1.expect)(() => encode_utils_1.default.decodeCbor(new Uint8Array([0xf8]))).toThrow("Unsupported CBOR simple value: 24");
-        (0, globals_1.expect)(() => encode_utils_1.default.decodeCbor(new Uint8Array([0xa1, 0x41, 0x01, 0x01]))).toThrow("Unsupported CBOR map key type");
-        (0, globals_1.expect)(() => encode_utils_1.default.decodeCbor(new Uint8Array([0x1b, 0x00, 0x20, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00]))).toThrow("CBOR integer exceeds JavaScript safe integer range");
+    (0, node_test_1.test)("decodeCborWithRemainder returns the first value and trailing bytes", () => {
+        const first = encode_utils_1.default.encodeCbor({ 1: "a", [-2]: new Uint8Array([9, 9]) });
+        const second = encode_utils_1.default.encodeCbor({ 2: "b" });
+        const combined = new Uint8Array([...first, ...second]);
+        const { value, remainder } = encode_utils_1.default.decodeCborWithRemainder(combined);
+        strict_1.default.equal(value[1], "a");
+        strict_1.default.deepEqual(value[-2], new Uint8Array([9, 9]));
+        strict_1.default.deepEqual(remainder, second);
+    });
+    (0, node_test_1.test)("rejects unsupported values and malformed input", () => {
+        strict_1.default.throws(() => encode_utils_1.default.encodeCbor(Symbol("unsupported")), {
+            message: "Unsupported CBOR value type: symbol",
+        });
+        strict_1.default.throws(() => encode_utils_1.default.encodeCbor({ value: Number.NaN }), { message: "CBOR only supports safe integers" });
+        strict_1.default.throws(() => encode_utils_1.default.decodeCbor(new Uint8Array()), { message: "Insufficient data" });
+        strict_1.default.throws(() => encode_utils_1.default.decodeCbor(new Uint8Array([0x42, 0x01])), { message: "Insufficient data" });
+        strict_1.default.throws(() => encode_utils_1.default.decodeCbor(new Uint8Array([0x5f])), {
+            message: "Unsupported indefinite-length CBOR data",
+        });
+        strict_1.default.throws(() => encode_utils_1.default.decodeCbor(new Uint8Array([0x01, 0x02])), {
+            message: "Unexpected trailing CBOR data",
+        });
+        strict_1.default.throws(() => encode_utils_1.default.decodeCbor(new Uint8Array([0xc1, 0x01])), {
+            message: "Unsupported CBOR tagged value",
+        });
+        strict_1.default.throws(() => encode_utils_1.default.decodeCbor(new Uint8Array([0xf8])), {
+            message: "Unsupported CBOR simple value: 24",
+        });
+        strict_1.default.throws(() => encode_utils_1.default.decodeCbor(new Uint8Array([0xa1, 0x41, 0x01, 0x01])), {
+            message: "Unsupported CBOR map key type",
+        });
+        strict_1.default.throws(() => encode_utils_1.default.decodeCbor(new Uint8Array([0x1b, 0x00, 0x20, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00])), { message: "CBOR integer exceeds JavaScript safe integer range" });
     });
 });

package/dist/spec/libs/cose-key.spec.js

@@ -1,47 +1,53 @@
 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
-const globals_1 = require("@jest/globals");
+const strict_1 = __importDefault(require("node:assert/strict"));
+const node_test_1 = require("node:test");
 const authenticator_emulator_1 = require("../../src/authenticator/authenticator-emulator");
 const cose_key_1 = require("../../src/webauthn/cose-key");
 const webauthn_model_1 = require("../../src/webauthn/webauthn-model");
-globals_1.describe.each([-7, -8, -257])("CoseKey Test: %s", (alg) => {
-    const getKey = () => {
-        const authenticator = new authenticator_emulator_1.AuthenticatorEmulator();
-        const rpId = new webauthn_model_1.RpId("example.com");
-        const userHandle = new Uint8Array([0x01, 0x02, 0x03, 0x04]);
-        const credential = authenticator.authenticatorMakeCredential({
-            rp: { id: rpId.value, name: "example" },
-            user: { id: userHandle, name: "example", displayName: "example" },
-            pubKeyCredParams: [{ alg, type: "public-key" }],
-            clientDataHash: new Uint8Array(32),
+for (const alg of [-7, -8, -257]) {
+    (0, node_test_1.describe)(`CoseKey Test: ${alg}`, () => {
+        const getKey = () => {
+            const authenticator = new authenticator_emulator_1.AuthenticatorEmulator();
+            const rpId = new webauthn_model_1.RpId("example.com");
+            const userHandle = new Uint8Array([0x01, 0x02, 0x03, 0x04]);
+            const credential = authenticator.authenticatorMakeCredential({
+                rp: { id: rpId.value, name: "example" },
+                user: { id: userHandle, name: "example", displayName: "example" },
+                pubKeyCredParams: [{ alg, type: "public-key" }],
+                clientDataHash: new Uint8Array(32),
+            });
+            return (0, webauthn_model_1.unpackAuthenticatorData)(credential.authData).attestedCredentialData?.credentialPublicKey;
+        };
+        (0, node_test_1.test)("Der format _ serialize and deserialize test", async () => {
+            const testCoseKey = getKey();
+            const serialized = testCoseKey.toDer();
+            const deserialized = cose_key_1.CoseKey.fromDer(testCoseKey.toDer());
+            const reSerialized = deserialized.toDer();
+            strict_1.default.deepEqual(testCoseKey.alg, alg);
+            strict_1.default.deepEqual(testCoseKey, deserialized);
+            strict_1.default.deepEqual(serialized, reSerialized);
+        });
+        (0, node_test_1.test)("Jwk format _ serialize and deserialize test", async () => {
+            const testCoseKey = getKey();
+            const serialized = testCoseKey.toJwk();
+            const deserialized = cose_key_1.CoseKey.fromJwk(testCoseKey.toJwk()).toJwk();
+            const reSerialized = cose_key_1.CoseKey.fromJwk(deserialized).toJwk();
+            strict_1.default.deepEqual(testCoseKey.alg, alg);
+            strict_1.default.deepEqual(serialized, deserialized);
+            strict_1.default.deepEqual(serialized, reSerialized);
+        });
+        (0, node_test_1.test)("KeyObject format _ serialize and deserialize test", async () => {
+            const testCoseKey = getKey();
+            const serialized = testCoseKey.toKeyObject();
+            const deserialized = cose_key_1.CoseKey.fromKeyObject(testCoseKey.toKeyObject()).toKeyObject();
+            const reSerialized = cose_key_1.CoseKey.fromKeyObject(deserialized).toKeyObject();
+            strict_1.default.deepEqual(testCoseKey.alg, alg);
+            strict_1.default.deepEqual(serialized, deserialized);
+            strict_1.default.deepEqual(serialized, reSerialized);
         });
-        return (0, webauthn_model_1.unpackAuthenticatorData)(credential.authData).attestedCredentialData?.credentialPublicKey;
-    };
-    (0, globals_1.test)("Der format _ serialize and deserialize test", async () => {
-        const testCoseKey = getKey();
-        const serialized = testCoseKey.toDer();
-        const deserialized = cose_key_1.CoseKey.fromDer(testCoseKey.toDer());
-        const reSerialized = deserialized.toDer();
-        (0, globals_1.expect)(testCoseKey.alg).toEqual(alg);
-        (0, globals_1.expect)(testCoseKey).toEqual(deserialized);
-        (0, globals_1.expect)(serialized).toEqual(reSerialized);
-    });
-    (0, globals_1.test)("Jwk format _ serialize and deserialize test", async () => {
-        const testCoseKey = getKey();
-        const serialized = testCoseKey.toJwk();
-        const deserialized = cose_key_1.CoseKey.fromJwk(testCoseKey.toJwk()).toJwk();
-        const reSerialized = cose_key_1.CoseKey.fromJwk(deserialized).toJwk();
-        (0, globals_1.expect)(testCoseKey.alg).toEqual(alg);
-        (0, globals_1.expect)(serialized).toEqual(deserialized);
-        (0, globals_1.expect)(serialized).toEqual(reSerialized);
-    });
-    (0, globals_1.test)("KeyObject format _ serialize and deserialize test", async () => {
-        const testCoseKey = getKey();
-        const serialized = testCoseKey.toKeyObject();
-        const deserialized = cose_key_1.CoseKey.fromKeyObject(testCoseKey.toKeyObject()).toKeyObject();
-        const reSerialized = cose_key_1.CoseKey.fromKeyObject(deserialized).toKeyObject();
-        (0, globals_1.expect)(testCoseKey.alg).toEqual(alg);
-        (0, globals_1.expect)(serialized).toEqual(deserialized);
-        (0, globals_1.expect)(serialized).toEqual(reSerialized);
     });
-});
+}