permissionless 0.2.39 → 0.2.40

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # permissionless
 
+## 0.2.40
+
+### Patch Changes
+
+- 9448c6fc5275f4be21916cb9f91dc067452baa6b: Added passkeys authentication flow
+
 ## 0.2.39
 
 ### Patch Changes

package/_cjs/actions/passkeyServer/startAuthentication.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startAuthentication = void 0;
+const ox_1 = require("ox");
+const viem_1 = require("viem");
+const startAuthentication = async (client) => {
+    const response = await client.request({
+        method: "pks_startAuthentication",
+        params: []
+    });
+    return {
+        challenge: (0, viem_1.toHex)(ox_1.Base64.toBytes(response.challenge)),
+        rpId: response.rpId,
+        userVerification: response.userVerification,
+        uuid: response.uuid
+    };
+};
+exports.startAuthentication = startAuthentication;
+//# sourceMappingURL=startAuthentication.js.map

package/_cjs/actions/passkeyServer/startAuthentication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"startAuthentication.js","sourceRoot":"","sources":["../../../actions/passkeyServer/startAuthentication.ts"],"names":[],"mappings":";;;AAAA,2BAA2B;AAE3B,+BAMa;AAON,MAAM,mBAAmB,GAAG,KAAK,EACpC,MAKC,EACqC,EAAE;IACxC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,MAAM,EAAE,yBAAyB;QACjC,MAAM,EAAE,EAAE;KACb,CAAC,CAAA;IAEF,OAAO;QACH,SAAS,EAAE,IAAA,YAAK,EAAC,WAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,IAAI,EAAE,QAAQ,CAAC,IAAI;KACtB,CAAA;AACL,CAAC,CAAA;AAnBY,QAAA,mBAAmB,uBAmB/B"}

package/_cjs/actions/passkeyServer/verifyAuthentication.js

@@ -0,0 +1,78 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyAuthentication = void 0;
+const ox_1 = require("ox");
+const verifyAuthentication = async (client, args) => {
+    const { raw, uuid } = args;
+    let responseAuthenticatorData;
+    if ("authenticatorData" in raw.response) {
+        responseAuthenticatorData = ox_1.Base64.fromBytes(new Uint8Array(raw.response.authenticatorData), {
+            url: true
+        });
+    }
+    else {
+        throw new Error("authenticatorData not found in the signature");
+    }
+    let signature;
+    if ("signature" in raw.response) {
+        signature = ox_1.Base64.fromBytes(new Uint8Array(raw.response.signature), {
+            pad: false,
+            url: true
+        });
+    }
+    else {
+        throw new Error("signature not found in the signature");
+    }
+    let userHandle;
+    if ("userHandle" in raw.response) {
+        userHandle = ox_1.Base64.fromBytes(new Uint8Array(raw.response.userHandle), {
+            pad: false,
+            url: true
+        });
+    }
+    const serverResponse = await client.request({
+        method: "pks_verifyAuthentication",
+        params: [
+            {
+                id: raw.id,
+                rawId: ox_1.Base64.fromBytes(new Uint8Array(raw.rawId), {
+                    pad: false,
+                    url: true
+                }),
+                authenticatorAttachment: raw.authenticatorAttachment,
+                response: {
+                    clientDataJSON: ox_1.Base64.fromBytes(new Uint8Array(raw.response.clientDataJSON), {
+                        pad: false,
+                        url: true
+                    }),
+                    authenticatorData: responseAuthenticatorData,
+                    signature,
+                    userHandle
+                },
+                clientExtensionResults: raw.getClientExtensionResults(),
+                type: raw.type
+            },
+            {
+                uuid
+            }
+        ]
+    }, {
+        retryCount: 0
+    });
+    const success = Boolean(serverResponse?.success);
+    const id = serverResponse?.id;
+    const publicKey = serverResponse?.publicKey;
+    if (typeof id !== "string") {
+        throw new Error("Invalid passkey id returned from server");
+    }
+    if (typeof publicKey !== "string" || !publicKey.startsWith("0x")) {
+        throw new Error("Invalid public key returned from server - must be hex string starting with 0x");
+    }
+    return {
+        success,
+        id,
+        publicKey: publicKey
+    };
+};
+exports.verifyAuthentication = verifyAuthentication;
+//# sourceMappingURL=verifyAuthentication.js.map

package/_cjs/actions/passkeyServer/verifyAuthentication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyAuthentication.js","sourceRoot":"","sources":["../../../actions/passkeyServer/verifyAuthentication.ts"],"names":[],"mappings":";;;AAAA,2BAA8C;AAevC,MAAM,oBAAoB,GAAG,KAAK,EACrC,MAKC,EACD,IAAoC,EACG,EAAE;IACzC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,CAAA;IAE1B,IAAI,yBAAiC,CAAA;IAErC,IAAI,mBAAmB,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACtC,yBAAyB,GAAG,WAAM,CAAC,SAAS,CACxC,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,iBAAgC,CAAC,EAC7D;YACI,GAAG,EAAE,IAAI;SACZ,CACJ,CAAA;IACL,CAAC;SAAM,CAAC;QACJ,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IACnE,CAAC;IAED,IAAI,SAAiB,CAAA;IACrB,IAAI,WAAW,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,SAAS,GAAG,WAAM,CAAC,SAAS,CACxB,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAwB,CAAC,EACrD;YACI,GAAG,EAAE,KAAK;YACV,GAAG,EAAE,IAAI;SACZ,CACJ,CAAA;IACL,CAAC;SAAM,CAAC;QACJ,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;IAC3D,CAAC;IAED,IAAI,UAA8B,CAAA;IAClC,IAAI,YAAY,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC/B,UAAU,GAAG,WAAM,CAAC,SAAS,CACzB,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAyB,CAAC,EACtD;YACI,GAAG,EAAE,KAAK;YACV,GAAG,EAAE,IAAI;SACZ,CACJ,CAAA;IACL,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,OAAO,CACvC;QACI,MAAM,EAAE,0BAA0B;QAClC,MAAM,EAAE;YACJ;gBACI,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,KAAK,EAAE,WAAM,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;oBAC/C,GAAG,EAAE,KAAK;oBACV,GAAG,EAAE,IAAI;iBACZ,CAAC;gBACF,uBAAuB,EAAE,GAAG,CAAC,uBAEb;gBAChB,QAAQ,EAAE;oBACN,cAAc,EAAE,WAAM,CAAC,SAAS,CAC5B,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,EAC3C;wBACI,GAAG,EAAE,KAAK;wBACV,GAAG,EAAE,IAAI;qBACZ,CACJ;oBACD,iBAAiB,EAAE,yBAAyB;oBAC5C,SAAS;oBACT,UAAU;iBACb;gBACD,sBAAsB,EAAE,GAAG,CAAC,yBAAyB,EAAE;gBACvD,IAAI,EAAE,GAAG,CAAC,IAAoB;aACjC;YACD;gBACI,IAAI;aACP;SACJ;KACJ,EACD;QACI,UAAU,EAAE,CAAC;KAChB,CACJ,CAAA;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;IAChD,MAAM,EAAE,GAAG,cAAc,EAAE,EAAE,CAAA;IAC7B,MAAM,SAAS,GAAG,cAAc,EAAE,SAAS,CAAA;IAE3C,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC9D,CAAC;IAED,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CACX,+EAA+E,CAClF,CAAA;IACL,CAAC;IAED,OAAO;QACH,OAAO;QACP,EAAE;QACF,SAAS,EAAE,SAAgB;KAC9B,CAAA;AACL,CAAC,CAAA;AAzGY,QAAA,oBAAoB,wBAyGhC"}

package/_cjs/actions/passkeyServer/verifyRegistration.js

@@ -51,6 +51,8 @@ const verifyRegistration = async (client, args) => {
             },
             context
         ]
+    }, {
+        retryCount: 0
     });
     const success = Boolean(serverResponse?.success);
     const id = serverResponse?.id;

package/_cjs/actions/passkeyServer/verifyRegistration.js.map

@@ -1 +1 @@
-{"version":3,"file":"verifyRegistration.js","sourceRoot":"","sources":["../../../actions/passkeyServer/verifyRegistration.ts"],"names":[],"mappings":";;;AAAA,2BAA2B;AAgBpB,MAAM,kBAAkB,GAAG,KAAK,EACnC,MAKC,EACD,IAAkC,EACG,EAAE;IACvC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;IAEpC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG;SAC1B,QAAuD,CAAA;IAE5D,IAAI,0BAA0B,GAAuB,SAAS,CAAA;IAC9D,IAAI,OAAO,QAAQ,CAAC,qBAAqB,KAAK,UAAU,EAAE,CAAC;QACvD,IAAI,CAAC;YACD,0BAA0B,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAA;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;QAC/D,CAAC;IACL,CAAC;IAED,IAAI,yBAA6C,CAAA;IACjD,IAAI,OAAO,QAAQ,CAAC,oBAAoB,KAAK,UAAU,EAAE,CAAC;QACtD,IAAI,CAAC;YACD,yBAAyB,GAAG,WAAM,CAAC,SAAS,CACxC,IAAI,UAAU,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC,CAClD,CAAA;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;QAC9D,CAAC;IACL,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACxC,MAAM,EAAE,wBAAwB;QAChC,MAAM,EAAE;YACJ;gBACI,EAAE,EAAE,UAAU,CAAC,EAAE;gBACjB,KAAK,EAAE,WAAM,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;oBAC1D,GAAG,EAAE,KAAK;oBACV,GAAG,EAAE,IAAI;iBACZ,CAAC;gBACF,QAAQ,EAAE;oBACN,cAAc,EAAE,WAAM,CAAC,SAAS,CAC5B,IAAI,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,CAC1C;oBACD,iBAAiB,EAAE,WAAM,CAAC,SAAS,CAC/B,IAAI,UAAU,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAC1C;wBACI,GAAG,EAAE,IAAI;qBACZ,CACJ;oBACD,UAAU,EACN,OAAO,QAAQ,CAAC,aAAa,KAAK,UAAU;wBACxC,CAAC,CAAE,QAAQ,CAAC,aAAa,EAQnB;wBACN,CAAC,CAAC,SAAS;oBACnB,kBAAkB,EAAE,0BAA0B;oBAC9C,iBAAiB,EAAE,yBAAyB;iBAC/C;gBACD,uBAAuB,EAAE,UAAU,CAAC,GAAG;qBAClC,uBAAwD;gBAC7D,sBAAsB,EAClB,UAAU,CAAC,GAAG,CAAC,yBAAyB,EAAE;gBAC9C,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,IAAoB;aAC5C;YACD,OAAO;SACV;KACJ,CAAC,CAAA;IAEF,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;IAChD,MAAM,EAAE,GAAG,cAAc,EAAE,EAAE,CAAA;IAC7B,MAAM,SAAS,GAAG,cAAc,EAAE,SAAS,CAAA;IAE3C,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC9D,CAAC;IAED,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CACX,+EAA+E,CAClF,CAAA;IACL,CAAC;IAED,OAAO;QACH,OAAO;QACP,EAAE;QACF,SAAS,EAAE,SAAgB;KAC9B,CAAA;AACL,CAAC,CAAA;AAjGY,QAAA,kBAAkB,sBAiG9B"}
+{"version":3,"file":"verifyRegistration.js","sourceRoot":"","sources":["../../../actions/passkeyServer/verifyRegistration.ts"],"names":[],"mappings":";;;AAAA,2BAA2B;AAgBpB,MAAM,kBAAkB,GAAG,KAAK,EACnC,MAKC,EACD,IAAkC,EACG,EAAE;IACvC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;IAEpC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG;SAC1B,QAAuD,CAAA;IAE5D,IAAI,0BAA0B,GAAuB,SAAS,CAAA;IAC9D,IAAI,OAAO,QAAQ,CAAC,qBAAqB,KAAK,UAAU,EAAE,CAAC;QACvD,IAAI,CAAC;YACD,0BAA0B,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAA;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;QAC/D,CAAC;IACL,CAAC;IAED,IAAI,yBAA6C,CAAA;IACjD,IAAI,OAAO,QAAQ,CAAC,oBAAoB,KAAK,UAAU,EAAE,CAAC;QACtD,IAAI,CAAC;YACD,yBAAyB,GAAG,WAAM,CAAC,SAAS,CACxC,IAAI,UAAU,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC,CAClD,CAAA;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;QAC9D,CAAC;IACL,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,OAAO,CACvC;QACI,MAAM,EAAE,wBAAwB;QAChC,MAAM,EAAE;YACJ;gBACI,EAAE,EAAE,UAAU,CAAC,EAAE;gBACjB,KAAK,EAAE,WAAM,CAAC,SAAS,CACnB,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EACpC;oBACI,GAAG,EAAE,KAAK;oBACV,GAAG,EAAE,IAAI;iBACZ,CACJ;gBACD,QAAQ,EAAE;oBACN,cAAc,EAAE,WAAM,CAAC,SAAS,CAC5B,IAAI,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,CAC1C;oBACD,iBAAiB,EAAE,WAAM,CAAC,SAAS,CAC/B,IAAI,UAAU,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAC1C;wBACI,GAAG,EAAE,IAAI;qBACZ,CACJ;oBACD,UAAU,EACN,OAAO,QAAQ,CAAC,aAAa,KAAK,UAAU;wBACxC,CAAC,CAAE,QAAQ,CAAC,aAAa,EAQnB;wBACN,CAAC,CAAC,SAAS;oBACnB,kBAAkB,EAAE,0BAA0B;oBAC9C,iBAAiB,EAAE,yBAAyB;iBAC/C;gBACD,uBAAuB,EAAE,UAAU,CAAC,GAAG;qBAClC,uBAEW;gBAChB,sBAAsB,EAClB,UAAU,CAAC,GAAG,CAAC,yBAAyB,EAAE;gBAC9C,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,IAAoB;aAC5C;YACD,OAAO;SACV;KACJ,EACD;QACI,UAAU,EAAE,CAAC;KAChB,CACJ,CAAA;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;IAChD,MAAM,EAAE,GAAG,cAAc,EAAE,EAAE,CAAA;IAC7B,MAAM,SAAS,GAAG,cAAc,EAAE,SAAS,CAAA;IAE3C,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC9D,CAAC;IAED,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CACX,+EAA+E,CAClF,CAAA;IACL,CAAC;IAED,OAAO;QACH,OAAO;QACP,EAAE;QACF,SAAS,EAAE,SAAgB;KAC9B,CAAA;AACL,CAAC,CAAA;AA3GY,QAAA,kBAAkB,sBA2G9B"}

package/_cjs/clients/decorators/passkeyServer.js

@@ -2,12 +2,16 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.passkeyServerActions = void 0;
 const getCredentials_js_1 = require("../../actions/passkeyServer/getCredentials.js");
+const startAuthentication_js_1 = require("../../actions/passkeyServer/startAuthentication.js");
 const startRegistration_js_1 = require("../../actions/passkeyServer/startRegistration.js");
+const verifyAuthentication_js_1 = require("../../actions/passkeyServer/verifyAuthentication.js");
 const verifyRegistration_js_1 = require("../../actions/passkeyServer/verifyRegistration.js");
 const passkeyServerActions = (client) => ({
     startRegistration: (args) => (0, startRegistration_js_1.startRegistration)(client, args),
     verifyRegistration: (args) => (0, verifyRegistration_js_1.verifyRegistration)(client, args),
-    getCredentials: (args) => (0, getCredentials_js_1.getCredentials)(client, args)
+    getCredentials: (args) => (0, getCredentials_js_1.getCredentials)(client, args),
+    startAuthentication: () => (0, startAuthentication_js_1.startAuthentication)(client),
+    verifyAuthentication: (args) => (0, verifyAuthentication_js_1.verifyAuthentication)(client, args)
 });
 exports.passkeyServerActions = passkeyServerActions;
 //# sourceMappingURL=passkeyServer.js.map

package/_cjs/clients/decorators/passkeyServer.js.map

@@ -1 +1 @@
-{"version":3,"file":"passkeyServer.js","sourceRoot":"","sources":["../../../clients/decorators/passkeyServer.ts"],"names":[],"mappings":";;;AACA,qFAIsD;AACtD,2FAIyD;AACzD,6FAI0D;AAenD,MAAM,oBAAoB,GAAG,CAChC,MAKC,EACmB,EAAE,CAAC,CAAC;IACxB,iBAAiB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,wCAAiB,EAAC,MAAM,EAAE,IAAI,CAAC;IAC5D,kBAAkB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,0CAAkB,EAAC,MAAM,EAAE,IAAI,CAAC;IAC9D,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,kCAAc,EAAC,MAAM,EAAE,IAAI,CAAC;CACzD,CAAC,CAAA;AAXW,QAAA,oBAAoB,wBAW/B"}
+{"version":3,"file":"passkeyServer.js","sourceRoot":"","sources":["../../../clients/decorators/passkeyServer.ts"],"names":[],"mappings":";;;AACA,qFAIsD;AACtD,+FAG2D;AAC3D,2FAIyD;AACzD,iGAI4D;AAC5D,6FAI0D;AAmBnD,MAAM,oBAAoB,GAAG,CAChC,MAKC,EACmB,EAAE,CAAC,CAAC;IACxB,iBAAiB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,wCAAiB,EAAC,MAAM,EAAE,IAAI,CAAC;IAC5D,kBAAkB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,0CAAkB,EAAC,MAAM,EAAE,IAAI,CAAC;IAC9D,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,kCAAc,EAAC,MAAM,EAAE,IAAI,CAAC;IACtD,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAA,4CAAmB,EAAC,MAAM,CAAC;IACtD,oBAAoB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,8CAAoB,EAAC,MAAM,EAAE,IAAI,CAAC;CACrE,CAAC,CAAA;AAbW,QAAA,oBAAoB,wBAa/B"}

package/_esm/actions/passkeyServer/startAuthentication.js

@@ -0,0 +1,15 @@
+import { Base64 } from "ox";
+import { toHex } from "viem";
+export const startAuthentication = async (client) => {
+    const response = await client.request({
+        method: "pks_startAuthentication",
+        params: []
+    });
+    return {
+        challenge: toHex(Base64.toBytes(response.challenge)),
+        rpId: response.rpId,
+        userVerification: response.userVerification,
+        uuid: response.uuid
+    };
+};
+//# sourceMappingURL=startAuthentication.js.map

package/_esm/actions/passkeyServer/startAuthentication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"startAuthentication.js","sourceRoot":"","sources":["../../../actions/passkeyServer/startAuthentication.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAA;AAE3B,OAAO,EAKH,KAAK,EACR,MAAM,MAAM,CAAA;AAOb,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EACpC,MAKC,EACqC,EAAE;IACxC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAClC,MAAM,EAAE,yBAAyB;QACjC,MAAM,EAAE,EAAE;KACb,CAAC,CAAA;IAEF,OAAO;QACH,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,IAAI,EAAE,QAAQ,CAAC,IAAI;KACtB,CAAA;AACL,CAAC,CAAA"}

package/_esm/actions/passkeyServer/verifyAuthentication.js

@@ -0,0 +1,74 @@
+import { Base64 } from "ox";
+export const verifyAuthentication = async (client, args) => {
+    const { raw, uuid } = args;
+    let responseAuthenticatorData;
+    if ("authenticatorData" in raw.response) {
+        responseAuthenticatorData = Base64.fromBytes(new Uint8Array(raw.response.authenticatorData), {
+            url: true
+        });
+    }
+    else {
+        throw new Error("authenticatorData not found in the signature");
+    }
+    let signature;
+    if ("signature" in raw.response) {
+        signature = Base64.fromBytes(new Uint8Array(raw.response.signature), {
+            pad: false,
+            url: true
+        });
+    }
+    else {
+        throw new Error("signature not found in the signature");
+    }
+    let userHandle;
+    if ("userHandle" in raw.response) {
+        userHandle = Base64.fromBytes(new Uint8Array(raw.response.userHandle), {
+            pad: false,
+            url: true
+        });
+    }
+    const serverResponse = await client.request({
+        method: "pks_verifyAuthentication",
+        params: [
+            {
+                id: raw.id,
+                rawId: Base64.fromBytes(new Uint8Array(raw.rawId), {
+                    pad: false,
+                    url: true
+                }),
+                authenticatorAttachment: raw.authenticatorAttachment,
+                response: {
+                    clientDataJSON: Base64.fromBytes(new Uint8Array(raw.response.clientDataJSON), {
+                        pad: false,
+                        url: true
+                    }),
+                    authenticatorData: responseAuthenticatorData,
+                    signature,
+                    userHandle
+                },
+                clientExtensionResults: raw.getClientExtensionResults(),
+                type: raw.type
+            },
+            {
+                uuid
+            }
+        ]
+    }, {
+        retryCount: 0
+    });
+    const success = Boolean(serverResponse?.success);
+    const id = serverResponse?.id;
+    const publicKey = serverResponse?.publicKey;
+    if (typeof id !== "string") {
+        throw new Error("Invalid passkey id returned from server");
+    }
+    if (typeof publicKey !== "string" || !publicKey.startsWith("0x")) {
+        throw new Error("Invalid public key returned from server - must be hex string starting with 0x");
+    }
+    return {
+        success,
+        id,
+        publicKey: publicKey
+    };
+};
+//# sourceMappingURL=verifyAuthentication.js.map

package/_esm/actions/passkeyServer/verifyAuthentication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyAuthentication.js","sourceRoot":"","sources":["../../../actions/passkeyServer/verifyAuthentication.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAqB,MAAM,IAAI,CAAA;AAe9C,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,EACrC,MAKC,EACD,IAAoC,EACG,EAAE;IACzC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,CAAA;IAE1B,IAAI,yBAAiC,CAAA;IAErC,IAAI,mBAAmB,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACtC,yBAAyB,GAAG,MAAM,CAAC,SAAS,CACxC,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,iBAAgC,CAAC,EAC7D;YACI,GAAG,EAAE,IAAI;SACZ,CACJ,CAAA;IACL,CAAC;SAAM,CAAC;QACJ,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IACnE,CAAC;IAED,IAAI,SAAiB,CAAA;IACrB,IAAI,WAAW,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,SAAS,GAAG,MAAM,CAAC,SAAS,CACxB,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAwB,CAAC,EACrD;YACI,GAAG,EAAE,KAAK;YACV,GAAG,EAAE,IAAI;SACZ,CACJ,CAAA;IACL,CAAC;SAAM,CAAC;QACJ,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;IAC3D,CAAC;IAED,IAAI,UAA8B,CAAA;IAClC,IAAI,YAAY,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC/B,UAAU,GAAG,MAAM,CAAC,SAAS,CACzB,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAyB,CAAC,EACtD;YACI,GAAG,EAAE,KAAK;YACV,GAAG,EAAE,IAAI;SACZ,CACJ,CAAA;IACL,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,OAAO,CACvC;QACI,MAAM,EAAE,0BAA0B;QAClC,MAAM,EAAE;YACJ;gBACI,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;oBAC/C,GAAG,EAAE,KAAK;oBACV,GAAG,EAAE,IAAI;iBACZ,CAAC;gBACF,uBAAuB,EAAE,GAAG,CAAC,uBAEb;gBAChB,QAAQ,EAAE;oBACN,cAAc,EAAE,MAAM,CAAC,SAAS,CAC5B,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,EAC3C;wBACI,GAAG,EAAE,KAAK;wBACV,GAAG,EAAE,IAAI;qBACZ,CACJ;oBACD,iBAAiB,EAAE,yBAAyB;oBAC5C,SAAS;oBACT,UAAU;iBACb;gBACD,sBAAsB,EAAE,GAAG,CAAC,yBAAyB,EAAE;gBACvD,IAAI,EAAE,GAAG,CAAC,IAAoB;aACjC;YACD;gBACI,IAAI;aACP;SACJ;KACJ,EACD;QACI,UAAU,EAAE,CAAC;KAChB,CACJ,CAAA;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;IAChD,MAAM,EAAE,GAAG,cAAc,EAAE,EAAE,CAAA;IAC7B,MAAM,SAAS,GAAG,cAAc,EAAE,SAAS,CAAA;IAE3C,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC9D,CAAC;IAED,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CACX,+EAA+E,CAClF,CAAA;IACL,CAAC;IAED,OAAO;QACH,OAAO;QACP,EAAE;QACF,SAAS,EAAE,SAAgB;KAC9B,CAAA;AACL,CAAC,CAAA"}

package/_esm/actions/passkeyServer/verifyRegistration.js

@@ -48,6 +48,8 @@ export const verifyRegistration = async (client, args) => {
             },
             context
         ]
+    }, {
+        retryCount: 0
     });
     const success = Boolean(serverResponse?.success);
     const id = serverResponse?.id;

package/_esm/actions/passkeyServer/verifyRegistration.js.map

@@ -1 +1 @@
-{"version":3,"file":"verifyRegistration.js","sourceRoot":"","sources":["../../../actions/passkeyServer/verifyRegistration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAA;AAgB3B,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACnC,MAKC,EACD,IAAkC,EACG,EAAE;IACvC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;IAEpC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG;SAC1B,QAAuD,CAAA;IAE5D,IAAI,0BAA0B,GAAuB,SAAS,CAAA;IAC9D,IAAI,OAAO,QAAQ,CAAC,qBAAqB,KAAK,UAAU,EAAE,CAAC;QACvD,IAAI,CAAC;YACD,0BAA0B,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAA;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;QAC/D,CAAC;IACL,CAAC;IAED,IAAI,yBAA6C,CAAA;IACjD,IAAI,OAAO,QAAQ,CAAC,oBAAoB,KAAK,UAAU,EAAE,CAAC;QACtD,IAAI,CAAC;YACD,yBAAyB,GAAG,MAAM,CAAC,SAAS,CACxC,IAAI,UAAU,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC,CAClD,CAAA;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;QAC9D,CAAC;IACL,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACxC,MAAM,EAAE,wBAAwB;QAChC,MAAM,EAAE;YACJ;gBACI,EAAE,EAAE,UAAU,CAAC,EAAE;gBACjB,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;oBAC1D,GAAG,EAAE,KAAK;oBACV,GAAG,EAAE,IAAI;iBACZ,CAAC;gBACF,QAAQ,EAAE;oBACN,cAAc,EAAE,MAAM,CAAC,SAAS,CAC5B,IAAI,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,CAC1C;oBACD,iBAAiB,EAAE,MAAM,CAAC,SAAS,CAC/B,IAAI,UAAU,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAC1C;wBACI,GAAG,EAAE,IAAI;qBACZ,CACJ;oBACD,UAAU,EACN,OAAO,QAAQ,CAAC,aAAa,KAAK,UAAU;wBACxC,CAAC,CAAE,QAAQ,CAAC,aAAa,EAQnB;wBACN,CAAC,CAAC,SAAS;oBACnB,kBAAkB,EAAE,0BAA0B;oBAC9C,iBAAiB,EAAE,yBAAyB;iBAC/C;gBACD,uBAAuB,EAAE,UAAU,CAAC,GAAG;qBAClC,uBAAwD;gBAC7D,sBAAsB,EAClB,UAAU,CAAC,GAAG,CAAC,yBAAyB,EAAE;gBAC9C,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,IAAoB;aAC5C;YACD,OAAO;SACV;KACJ,CAAC,CAAA;IAEF,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;IAChD,MAAM,EAAE,GAAG,cAAc,EAAE,EAAE,CAAA;IAC7B,MAAM,SAAS,GAAG,cAAc,EAAE,SAAS,CAAA;IAE3C,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC9D,CAAC;IAED,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CACX,+EAA+E,CAClF,CAAA;IACL,CAAC;IAED,OAAO;QACH,OAAO;QACP,EAAE;QACF,SAAS,EAAE,SAAgB;KAC9B,CAAA;AACL,CAAC,CAAA"}
+{"version":3,"file":"verifyRegistration.js","sourceRoot":"","sources":["../../../actions/passkeyServer/verifyRegistration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAA;AAgB3B,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACnC,MAKC,EACD,IAAkC,EACG,EAAE;IACvC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;IAEpC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG;SAC1B,QAAuD,CAAA;IAE5D,IAAI,0BAA0B,GAAuB,SAAS,CAAA;IAC9D,IAAI,OAAO,QAAQ,CAAC,qBAAqB,KAAK,UAAU,EAAE,CAAC;QACvD,IAAI,CAAC;YACD,0BAA0B,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAA;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;QAC/D,CAAC;IACL,CAAC;IAED,IAAI,yBAA6C,CAAA;IACjD,IAAI,OAAO,QAAQ,CAAC,oBAAoB,KAAK,UAAU,EAAE,CAAC;QACtD,IAAI,CAAC;YACD,yBAAyB,GAAG,MAAM,CAAC,SAAS,CACxC,IAAI,UAAU,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC,CAClD,CAAA;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;QAC9D,CAAC;IACL,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,OAAO,CACvC;QACI,MAAM,EAAE,wBAAwB;QAChC,MAAM,EAAE;YACJ;gBACI,EAAE,EAAE,UAAU,CAAC,EAAE;gBACjB,KAAK,EAAE,MAAM,CAAC,SAAS,CACnB,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EACpC;oBACI,GAAG,EAAE,KAAK;oBACV,GAAG,EAAE,IAAI;iBACZ,CACJ;gBACD,QAAQ,EAAE;oBACN,cAAc,EAAE,MAAM,CAAC,SAAS,CAC5B,IAAI,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,CAC1C;oBACD,iBAAiB,EAAE,MAAM,CAAC,SAAS,CAC/B,IAAI,UAAU,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAC1C;wBACI,GAAG,EAAE,IAAI;qBACZ,CACJ;oBACD,UAAU,EACN,OAAO,QAAQ,CAAC,aAAa,KAAK,UAAU;wBACxC,CAAC,CAAE,QAAQ,CAAC,aAAa,EAQnB;wBACN,CAAC,CAAC,SAAS;oBACnB,kBAAkB,EAAE,0BAA0B;oBAC9C,iBAAiB,EAAE,yBAAyB;iBAC/C;gBACD,uBAAuB,EAAE,UAAU,CAAC,GAAG;qBAClC,uBAEW;gBAChB,sBAAsB,EAClB,UAAU,CAAC,GAAG,CAAC,yBAAyB,EAAE;gBAC9C,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,IAAoB;aAC5C;YACD,OAAO;SACV;KACJ,EACD;QACI,UAAU,EAAE,CAAC;KAChB,CACJ,CAAA;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;IAChD,MAAM,EAAE,GAAG,cAAc,EAAE,EAAE,CAAA;IAC7B,MAAM,SAAS,GAAG,cAAc,EAAE,SAAS,CAAA;IAE3C,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC9D,CAAC;IAED,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CACX,+EAA+E,CAClF,CAAA;IACL,CAAC;IAED,OAAO;QACH,OAAO;QACP,EAAE;QACF,SAAS,EAAE,SAAgB;KAC9B,CAAA;AACL,CAAC,CAAA"}

package/_esm/clients/decorators/passkeyServer.js

@@ -1,9 +1,13 @@
 import { getCredentials } from "../../actions/passkeyServer/getCredentials.js";
+import { startAuthentication } from "../../actions/passkeyServer/startAuthentication.js";
 import { startRegistration } from "../../actions/passkeyServer/startRegistration.js";
+import { verifyAuthentication } from "../../actions/passkeyServer/verifyAuthentication.js";
 import { verifyRegistration } from "../../actions/passkeyServer/verifyRegistration.js";
 export const passkeyServerActions = (client) => ({
     startRegistration: (args) => startRegistration(client, args),
     verifyRegistration: (args) => verifyRegistration(client, args),
-    getCredentials: (args) => getCredentials(client, args)
+    getCredentials: (args) => getCredentials(client, args),
+    startAuthentication: () => startAuthentication(client),
+    verifyAuthentication: (args) => verifyAuthentication(client, args)
 });
 //# sourceMappingURL=passkeyServer.js.map

package/_esm/clients/decorators/passkeyServer.js.map

@@ -1 +1 @@
-{"version":3,"file":"passkeyServer.js","sourceRoot":"","sources":["../../../clients/decorators/passkeyServer.ts"],"names":[],"mappings":"AACA,OAAO,EAGH,cAAc,EACjB,MAAM,+CAA+C,CAAA;AACtD,OAAO,EAGH,iBAAiB,EACpB,MAAM,kDAAkD,CAAA;AACzD,OAAO,EAGH,kBAAkB,EACrB,MAAM,mDAAmD,CAAA;AAe1D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAChC,MAKC,EACmB,EAAE,CAAC,CAAC;IACxB,iBAAiB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC;IAC5D,kBAAkB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC;IAC9D,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC;CACzD,CAAC,CAAA"}
+{"version":3,"file":"passkeyServer.js","sourceRoot":"","sources":["../../../clients/decorators/passkeyServer.ts"],"names":[],"mappings":"AACA,OAAO,EAGH,cAAc,EACjB,MAAM,+CAA+C,CAAA;AACtD,OAAO,EAEH,mBAAmB,EACtB,MAAM,oDAAoD,CAAA;AAC3D,OAAO,EAGH,iBAAiB,EACpB,MAAM,kDAAkD,CAAA;AACzD,OAAO,EAGH,oBAAoB,EACvB,MAAM,qDAAqD,CAAA;AAC5D,OAAO,EAGH,kBAAkB,EACrB,MAAM,mDAAmD,CAAA;AAmB1D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAChC,MAKC,EACmB,EAAE,CAAC,CAAC;IACxB,iBAAiB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC;IAC5D,kBAAkB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC;IAC9D,cAAc,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC;IACtD,mBAAmB,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC;IACtD,oBAAoB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC;CACrE,CAAC,CAAA"}

package/_types/actions/passkeyServer/startAuthentication.d.ts

@@ -0,0 +1,8 @@
+import type { WebAuthnP256 } from "ox";
+import { type Account, type Chain, type Client, type Transport } from "viem";
+import type { PasskeyServerRpcSchema } from "../../types/passkeyServer.js";
+export type StartAuthenticationReturnType = WebAuthnP256.sign.Options & {
+    uuid: string;
+};
+export declare const startAuthentication: (client: Client<Transport, Chain | undefined, Account | undefined, PasskeyServerRpcSchema>) => Promise<StartAuthenticationReturnType>;
+//# sourceMappingURL=startAuthentication.d.ts.map

package/_types/actions/passkeyServer/startAuthentication.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"startAuthentication.d.ts","sourceRoot":"","sources":["../../../actions/passkeyServer/startAuthentication.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,IAAI,CAAA;AACtC,OAAO,EACH,KAAK,OAAO,EACZ,KAAK,KAAK,EACV,KAAK,MAAM,EACX,KAAK,SAAS,EAEjB,MAAM,MAAM,CAAA;AACb,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAA;AAE1E,MAAM,MAAM,6BAA6B,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,GAAG;IACpE,IAAI,EAAE,MAAM,CAAA;CACf,CAAA;AAED,eAAO,MAAM,mBAAmB,GAC5B,QAAQ,MAAM,CACV,SAAS,EACT,KAAK,GAAG,SAAS,EACjB,OAAO,GAAG,SAAS,EACnB,sBAAsB,CACzB,KACF,OAAO,CAAC,6BAA6B,CAYvC,CAAA"}

package/_types/actions/passkeyServer/verifyAuthentication.d.ts

@@ -0,0 +1,13 @@
+import { type WebAuthnP256 } from "ox";
+import type { Account, Chain, Client, Hex, Transport } from "viem";
+import type { PasskeyServerRpcSchema } from "../../types/passkeyServer.js";
+export type VerifyAuthenticationParameters = WebAuthnP256.sign.ReturnType & {
+    uuid: string;
+};
+export type VerifyAuthenticationReturnType = {
+    success: boolean;
+    id: string;
+    publicKey: Hex;
+};
+export declare const verifyAuthentication: (client: Client<Transport, Chain | undefined, Account | undefined, PasskeyServerRpcSchema>, args: VerifyAuthenticationParameters) => Promise<VerifyAuthenticationReturnType>;
+//# sourceMappingURL=verifyAuthentication.d.ts.map

package/_types/actions/passkeyServer/verifyAuthentication.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyAuthentication.d.ts","sourceRoot":"","sources":["../../../actions/passkeyServer/verifyAuthentication.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,YAAY,EAAE,MAAM,IAAI,CAAA;AAE9C,OAAO,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,MAAM,CAAA;AAClE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAA;AAE1E,MAAM,MAAM,8BAA8B,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,GAAG;IACxE,IAAI,EAAE,MAAM,CAAA;CACf,CAAA;AAED,MAAM,MAAM,8BAA8B,GAAG;IACzC,OAAO,EAAE,OAAO,CAAA;IAChB,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,GAAG,CAAA;CACjB,CAAA;AAED,eAAO,MAAM,oBAAoB,GAC7B,QAAQ,MAAM,CACV,SAAS,EACT,KAAK,GAAG,SAAS,EACjB,OAAO,GAAG,SAAS,EACnB,sBAAsB,CACzB,EACD,MAAM,8BAA8B,KACrC,OAAO,CAAC,8BAA8B,CAiGxC,CAAA"}

package/_types/actions/passkeyServer/verifyRegistration.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verifyRegistration.d.ts","sourceRoot":"","sources":["../../../actions/passkeyServer/verifyRegistration.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,MAAM,CAAA;AAClE,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,0BAA0B,CAAA;AAClF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAA;AAE1E,MAAM,MAAM,4BAA4B,GAAG;IACvC,UAAU,EAAE,kCAAkC,CAAA;IAC9C,OAAO,EAAE,OAAO,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,4BAA4B,GAAG;IACvC,OAAO,EAAE,OAAO,CAAA;IAChB,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,GAAG,CAAA;CACjB,CAAA;AAED,eAAO,MAAM,kBAAkB,GAC3B,QAAQ,MAAM,CACV,SAAS,EACT,KAAK,GAAG,SAAS,EACjB,OAAO,GAAG,SAAS,EACnB,sBAAsB,CACzB,EACD,MAAM,4BAA4B,KACnC,OAAO,CAAC,4BAA4B,CAyFtC,CAAA"}
+{"version":3,"file":"verifyRegistration.d.ts","sourceRoot":"","sources":["../../../actions/passkeyServer/verifyRegistration.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,MAAM,CAAA;AAClE,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,0BAA0B,CAAA;AAClF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAA;AAE1E,MAAM,MAAM,4BAA4B,GAAG;IACvC,UAAU,EAAE,kCAAkC,CAAA;IAC9C,OAAO,EAAE,OAAO,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,4BAA4B,GAAG;IACvC,OAAO,EAAE,OAAO,CAAA;IAChB,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,GAAG,CAAA;CACjB,CAAA;AAED,eAAO,MAAM,kBAAkB,GAC3B,QAAQ,MAAM,CACV,SAAS,EACT,KAAK,GAAG,SAAS,EACjB,OAAO,GAAG,SAAS,EACnB,sBAAsB,CACzB,EACD,MAAM,4BAA4B,KACnC,OAAO,CAAC,4BAA4B,CAmGtC,CAAA"}

package/_types/clients/decorators/passkeyServer.d.ts

@@ -1,11 +1,15 @@
 import type { Account, Chain, Client, Transport } from "viem";
 import { type GetCredentialsParameters, type GetCredentialsReturnType } from "../../actions/passkeyServer/getCredentials.js";
+import { type StartAuthenticationReturnType } from "../../actions/passkeyServer/startAuthentication.js";
 import { type StartRegistrationParameters, type StartRegistrationReturnType } from "../../actions/passkeyServer/startRegistration.js";
+import { type VerifyAuthenticationParameters, type VerifyAuthenticationReturnType } from "../../actions/passkeyServer/verifyAuthentication.js";
 import { type VerifyRegistrationParameters, type VerifyRegistrationReturnType } from "../../actions/passkeyServer/verifyRegistration.js";
 import type { PasskeyServerRpcSchema } from "../../types/passkeyServer.js";
 export type PasskeyServerActions = {
     startRegistration: (args: StartRegistrationParameters) => Promise<StartRegistrationReturnType>;
     verifyRegistration: (args: VerifyRegistrationParameters) => Promise<VerifyRegistrationReturnType>;
+    startAuthentication: () => Promise<StartAuthenticationReturnType>;
+    verifyAuthentication: (args: VerifyAuthenticationParameters) => Promise<VerifyAuthenticationReturnType>;
     getCredentials: (args: GetCredentialsParameters) => Promise<GetCredentialsReturnType>;
 };
 export declare const passkeyServerActions: (client: Client<Transport, Chain | undefined, Account | undefined, PasskeyServerRpcSchema>) => PasskeyServerActions;

package/_types/clients/decorators/passkeyServer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"passkeyServer.d.ts","sourceRoot":"","sources":["../../../clients/decorators/passkeyServer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,MAAM,CAAA;AAC7D,OAAO,EACH,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAEhC,MAAM,+CAA+C,CAAA;AACtD,OAAO,EACH,KAAK,2BAA2B,EAChC,KAAK,2BAA2B,EAEnC,MAAM,kDAAkD,CAAA;AACzD,OAAO,EACH,KAAK,4BAA4B,EACjC,KAAK,4BAA4B,EAEpC,MAAM,mDAAmD,CAAA;AAC1D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAA;AAE1E,MAAM,MAAM,oBAAoB,GAAG;IAC/B,iBAAiB,EAAE,CACf,IAAI,EAAE,2BAA2B,KAChC,OAAO,CAAC,2BAA2B,CAAC,CAAA;IACzC,kBAAkB,EAAE,CAChB,IAAI,EAAE,4BAA4B,KACjC,OAAO,CAAC,4BAA4B,CAAC,CAAA;IAC1C,cAAc,EAAE,CACZ,IAAI,EAAE,wBAAwB,KAC7B,OAAO,CAAC,wBAAwB,CAAC,CAAA;CACzC,CAAA;AAED,eAAO,MAAM,oBAAoB,GAC7B,QAAQ,MAAM,CACV,SAAS,EACT,KAAK,GAAG,SAAS,EACjB,OAAO,GAAG,SAAS,EACnB,sBAAsB,CACzB,KACF,oBAID,CAAA"}
+{"version":3,"file":"passkeyServer.d.ts","sourceRoot":"","sources":["../../../clients/decorators/passkeyServer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,MAAM,CAAA;AAC7D,OAAO,EACH,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAEhC,MAAM,+CAA+C,CAAA;AACtD,OAAO,EACH,KAAK,6BAA6B,EAErC,MAAM,oDAAoD,CAAA;AAC3D,OAAO,EACH,KAAK,2BAA2B,EAChC,KAAK,2BAA2B,EAEnC,MAAM,kDAAkD,CAAA;AACzD,OAAO,EACH,KAAK,8BAA8B,EACnC,KAAK,8BAA8B,EAEtC,MAAM,qDAAqD,CAAA;AAC5D,OAAO,EACH,KAAK,4BAA4B,EACjC,KAAK,4BAA4B,EAEpC,MAAM,mDAAmD,CAAA;AAC1D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAA;AAE1E,MAAM,MAAM,oBAAoB,GAAG;IAC/B,iBAAiB,EAAE,CACf,IAAI,EAAE,2BAA2B,KAChC,OAAO,CAAC,2BAA2B,CAAC,CAAA;IACzC,kBAAkB,EAAE,CAChB,IAAI,EAAE,4BAA4B,KACjC,OAAO,CAAC,4BAA4B,CAAC,CAAA;IAC1C,mBAAmB,EAAE,MAAM,OAAO,CAAC,6BAA6B,CAAC,CAAA;IACjE,oBAAoB,EAAE,CAClB,IAAI,EAAE,8BAA8B,KACnC,OAAO,CAAC,8BAA8B,CAAC,CAAA;IAC5C,cAAc,EAAE,CACZ,IAAI,EAAE,wBAAwB,KAC7B,OAAO,CAAC,wBAAwB,CAAC,CAAA;CACzC,CAAA;AAED,eAAO,MAAM,oBAAoB,GAC7B,QAAQ,MAAM,CACV,SAAS,EACT,KAAK,GAAG,SAAS,EACjB,OAAO,GAAG,SAAS,EACnB,sBAAsB,CACzB,KACF,oBAMD,CAAA"}

package/_types/types/passkeyServer.d.ts

@@ -1,5 +1,16 @@
 import type { Hex } from "viem";
 export type PasskeyServerRpcSchema = [
+    {
+        Method: "pks_startAuthentication";
+        Parameters: [];
+        ReturnType: {
+            challenge: string;
+            rpId: string;
+            timeout?: number;
+            userVerification?: "required" | "preferred" | "discouraged";
+            uuid: string;
+        };
+    },
     {
         Method: "pks_startRegistration";
         Parameters: [context: unknown];
@@ -62,6 +73,36 @@ export type PasskeyServerRpcSchema = [
             publicKey: Hex;
         };
     },
+    {
+        Method: "pks_verifyAuthentication";
+        Parameters: [
+            {
+                id: string;
+                rawId: string;
+                response: {
+                    clientDataJSON: string;
+                    authenticatorData: string;
+                    signature: string;
+                    userHandle?: string;
+                };
+                authenticatorAttachment: "cross-platform" | "platform";
+                clientExtensionResults: {
+                    appid?: boolean;
+                    credProps?: {
+                        rk?: boolean;
+                    };
+                    hmacCreateSecret?: boolean;
+                };
+                type: "public-key";
+            },
+            context: unknown
+        ];
+        ReturnType: {
+            success: boolean;
+            id: string;
+            publicKey: Hex;
+        };
+    },
     {
         Method: "pks_getCredentials";
         Parameters: [context: unknown];

package/_types/types/passkeyServer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"passkeyServer.d.ts","sourceRoot":"","sources":["../../types/passkeyServer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAA;AAE/B,MAAM,MAAM,sBAAsB,GAAG;IACjC;QACI,MAAM,EAAE,uBAAuB,CAAA;QAC/B,UAAU,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC9B,UAAU,EAAE;YACR,EAAE,EAAE;gBACA,EAAE,EAAE,MAAM,CAAA;gBACV,IAAI,EAAE,MAAM,CAAA;aACf,CAAA;YACD,IAAI,EAAE;gBACF,EAAE,EAAE,MAAM,CAAA;gBACV,IAAI,EAAE,MAAM,CAAA;gBACZ,WAAW,EAAE,MAAM,CAAA;aACtB,CAAA;YACD,SAAS,EAAE,MAAM,CAAA;YACjB,OAAO,CAAC,EAAE,MAAM,CAAA;YAChB,sBAAsB,CAAC,EAAE;gBACrB,uBAAuB,CAAC,EAAE,UAAU,GAAG,gBAAgB,CAAA;gBACvD,kBAAkB,CAAC,EAAE,OAAO,CAAA;gBAC5B,WAAW,CAAC,EAAE,UAAU,GAAG,WAAW,GAAG,aAAa,CAAA;gBACtD,gBAAgB,CAAC,EAAE,UAAU,GAAG,WAAW,GAAG,aAAa,CAAA;aAC9D,CAAA;YACD,WAAW,EAAE,QAAQ,GAAG,YAAY,GAAG,UAAU,GAAG,MAAM,CAAA;YAC1D,UAAU,CAAC,EAAE;gBACT,KAAK,CAAC,EAAE,MAAM,CAAA;gBACd,SAAS,CAAC,EAAE,OAAO,CAAA;gBACnB,gBAAgB,CAAC,EAAE,OAAO,CAAA;gBAC1B,YAAY,CAAC,EAAE,OAAO,CAAA;aACzB,CAAA;SACJ,CAAA;KACJ;IACD;QACI,MAAM,EAAE,wBAAwB,CAAA;QAChC,UAAU,EAAE;YACR;gBACI,EAAE,EAAE,MAAM,CAAA;gBACV,KAAK,EAAE,MAAM,CAAA;gBACb,QAAQ,EAAE;oBACN,cAAc,EAAE,MAAM,CAAA;oBACtB,iBAAiB,EAAE,MAAM,CAAA;oBACzB,iBAAiB,CAAC,EAAE,MAAM,CAAA;oBAC1B,UAAU,CAAC,EAAE,CACP,KAAK,GACL,OAAO,GACP,QAAQ,GACR,UAAU,GACV,KAAK,GACL,YAAY,GACZ,KAAK,CACV,EAAE,CAAA;oBACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;oBAC3B,aAAa,CAAC,EAAE,MAAM,CAAA;iBACzB,CAAA;gBACD,uBAAuB,EAAE,gBAAgB,GAAG,UAAU,CAAA;gBACtD,sBAAsB,EAAE;oBACpB,KAAK,CAAC,EAAE,OAAO,CAAA;oBACf,SAAS,CAAC,EAAE;wBACR,EAAE,CAAC,EAAE,OAAO,CAAA;qBACf,CAAA;oBACD,gBAAgB,CAAC,EAAE,OAAO,CAAA;iBAC7B,CAAA;gBACD,IAAI,EAAE,YAAY,CAAA;aACrB;YACD,OAAO,EAAE,OAAO;SACnB,CAAA;QACD,UAAU,EAAE;YACR,OAAO,EAAE,OAAO,CAAA;YAChB,EAAE,EAAE,MAAM,CAAA;YACV,SAAS,EAAE,GAAG,CAAA;SACjB,CAAA;KACJ;IACD;QACI,MAAM,EAAE,oBAAoB,CAAA;QAC5B,UAAU,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC9B,UAAU,EAAE;YACR,EAAE,EAAE,MAAM,CAAA;YACV,SAAS,EAAE,GAAG,CAAA;SACjB,EAAE,CAAA;KACN;CACJ,CAAA"}
+{"version":3,"file":"passkeyServer.d.ts","sourceRoot":"","sources":["../../types/passkeyServer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAA;AAE/B,MAAM,MAAM,sBAAsB,GAAG;IACjC;QACI,MAAM,EAAE,yBAAyB,CAAA;QACjC,UAAU,EAAE,EAAE,CAAA;QACd,UAAU,EAAE;YACR,SAAS,EAAE,MAAM,CAAA;YACjB,IAAI,EAAE,MAAM,CAAA;YACZ,OAAO,CAAC,EAAE,MAAM,CAAA;YAChB,gBAAgB,CAAC,EAAE,UAAU,GAAG,WAAW,GAAG,aAAa,CAAA;YAC3D,IAAI,EAAE,MAAM,CAAA;SACf,CAAA;KACJ;IACD;QACI,MAAM,EAAE,uBAAuB,CAAA;QAC/B,UAAU,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC9B,UAAU,EAAE;YACR,EAAE,EAAE;gBACA,EAAE,EAAE,MAAM,CAAA;gBACV,IAAI,EAAE,MAAM,CAAA;aACf,CAAA;YACD,IAAI,EAAE;gBACF,EAAE,EAAE,MAAM,CAAA;gBACV,IAAI,EAAE,MAAM,CAAA;gBACZ,WAAW,EAAE,MAAM,CAAA;aACtB,CAAA;YACD,SAAS,EAAE,MAAM,CAAA;YACjB,OAAO,CAAC,EAAE,MAAM,CAAA;YAChB,sBAAsB,CAAC,EAAE;gBACrB,uBAAuB,CAAC,EAAE,UAAU,GAAG,gBAAgB,CAAA;gBACvD,kBAAkB,CAAC,EAAE,OAAO,CAAA;gBAC5B,WAAW,CAAC,EAAE,UAAU,GAAG,WAAW,GAAG,aAAa,CAAA;gBACtD,gBAAgB,CAAC,EAAE,UAAU,GAAG,WAAW,GAAG,aAAa,CAAA;aAC9D,CAAA;YACD,WAAW,EAAE,QAAQ,GAAG,YAAY,GAAG,UAAU,GAAG,MAAM,CAAA;YAC1D,UAAU,CAAC,EAAE;gBACT,KAAK,CAAC,EAAE,MAAM,CAAA;gBACd,SAAS,CAAC,EAAE,OAAO,CAAA;gBACnB,gBAAgB,CAAC,EAAE,OAAO,CAAA;gBAC1B,YAAY,CAAC,EAAE,OAAO,CAAA;aACzB,CAAA;SACJ,CAAA;KACJ;IACD;QACI,MAAM,EAAE,wBAAwB,CAAA;QAChC,UAAU,EAAE;YACR;gBACI,EAAE,EAAE,MAAM,CAAA;gBACV,KAAK,EAAE,MAAM,CAAA;gBACb,QAAQ,EAAE;oBACN,cAAc,EAAE,MAAM,CAAA;oBACtB,iBAAiB,EAAE,MAAM,CAAA;oBACzB,iBAAiB,CAAC,EAAE,MAAM,CAAA;oBAC1B,UAAU,CAAC,EAAE,CACP,KAAK,GACL,OAAO,GACP,QAAQ,GACR,UAAU,GACV,KAAK,GACL,YAAY,GACZ,KAAK,CACV,EAAE,CAAA;oBACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;oBAC3B,aAAa,CAAC,EAAE,MAAM,CAAA;iBACzB,CAAA;gBACD,uBAAuB,EAAE,gBAAgB,GAAG,UAAU,CAAA;gBACtD,sBAAsB,EAAE;oBACpB,KAAK,CAAC,EAAE,OAAO,CAAA;oBACf,SAAS,CAAC,EAAE;wBACR,EAAE,CAAC,EAAE,OAAO,CAAA;qBACf,CAAA;oBACD,gBAAgB,CAAC,EAAE,OAAO,CAAA;iBAC7B,CAAA;gBACD,IAAI,EAAE,YAAY,CAAA;aACrB;YACD,OAAO,EAAE,OAAO;SACnB,CAAA;QACD,UAAU,EAAE;YACR,OAAO,EAAE,OAAO,CAAA;YAChB,EAAE,EAAE,MAAM,CAAA;YACV,SAAS,EAAE,GAAG,CAAA;SACjB,CAAA;KACJ;IACD;QACI,MAAM,EAAE,0BAA0B,CAAA;QAClC,UAAU,EAAE;YACR;gBACI,EAAE,EAAE,MAAM,CAAA;gBACV,KAAK,EAAE,MAAM,CAAA;gBACb,QAAQ,EAAE;oBACN,cAAc,EAAE,MAAM,CAAA;oBACtB,iBAAiB,EAAE,MAAM,CAAA;oBACzB,SAAS,EAAE,MAAM,CAAA;oBACjB,UAAU,CAAC,EAAE,MAAM,CAAA;iBACtB,CAAA;gBACD,uBAAuB,EAAE,gBAAgB,GAAG,UAAU,CAAA;gBACtD,sBAAsB,EAAE;oBACpB,KAAK,CAAC,EAAE,OAAO,CAAA;oBACf,SAAS,CAAC,EAAE;wBACR,EAAE,CAAC,EAAE,OAAO,CAAA;qBACf,CAAA;oBACD,gBAAgB,CAAC,EAAE,OAAO,CAAA;iBAC7B,CAAA;gBACD,IAAI,EAAE,YAAY,CAAA;aACrB;YACD,OAAO,EAAE,OAAO;SACnB,CAAA;QACD,UAAU,EAAE;YACR,OAAO,EAAE,OAAO,CAAA;YAChB,EAAE,EAAE,MAAM,CAAA;YACV,SAAS,EAAE,GAAG,CAAA;SACjB,CAAA;KACJ;IACD;QACI,MAAM,EAAE,oBAAoB,CAAA;QAC5B,UAAU,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC9B,UAAU,EAAE;YACR,EAAE,EAAE,MAAM,CAAA;YACV,SAAS,EAAE,GAAG,CAAA;SACjB,EAAE,CAAA;KACN;CACJ,CAAA"}

package/actions/passkeyServer/startAuthentication.ts

@@ -0,0 +1,35 @@
+import { Base64 } from "ox"
+import type { WebAuthnP256 } from "ox"
+import {
+    type Account,
+    type Chain,
+    type Client,
+    type Transport,
+    toHex
+} from "viem"
+import type { PasskeyServerRpcSchema } from "../../types/passkeyServer.js"
+
+export type StartAuthenticationReturnType = WebAuthnP256.sign.Options & {
+    uuid: string
+}
+
+export const startAuthentication = async (
+    client: Client<
+        Transport,
+        Chain | undefined,
+        Account | undefined,
+        PasskeyServerRpcSchema
+    >
+): Promise<StartAuthenticationReturnType> => {
+    const response = await client.request({
+        method: "pks_startAuthentication",
+        params: []
+    })
+
+    return {
+        challenge: toHex(Base64.toBytes(response.challenge)),
+        rpId: response.rpId,
+        userVerification: response.userVerification,
+        uuid: response.uuid
+    }
+}

package/actions/passkeyServer/verifyAuthentication.ts

@@ -0,0 +1,121 @@
+import { Base64, type WebAuthnP256 } from "ox"
+// import { Base64 } from "ox"
+import type { Account, Chain, Client, Hex, Transport } from "viem"
+import type { PasskeyServerRpcSchema } from "../../types/passkeyServer.js"
+
+export type VerifyAuthenticationParameters = WebAuthnP256.sign.ReturnType & {
+    uuid: string
+}
+
+export type VerifyAuthenticationReturnType = {
+    success: boolean
+    id: string
+    publicKey: Hex
+}
+
+export const verifyAuthentication = async (
+    client: Client<
+        Transport,
+        Chain | undefined,
+        Account | undefined,
+        PasskeyServerRpcSchema
+    >,
+    args: VerifyAuthenticationParameters
+): Promise<VerifyAuthenticationReturnType> => {
+    const { raw, uuid } = args
+
+    let responseAuthenticatorData: string
+
+    if ("authenticatorData" in raw.response) {
+        responseAuthenticatorData = Base64.fromBytes(
+            new Uint8Array(raw.response.authenticatorData as ArrayBuffer),
+            {
+                url: true
+            }
+        )
+    } else {
+        throw new Error("authenticatorData not found in the signature")
+    }
+
+    let signature: string
+    if ("signature" in raw.response) {
+        signature = Base64.fromBytes(
+            new Uint8Array(raw.response.signature as ArrayBuffer),
+            {
+                pad: false,
+                url: true
+            }
+        )
+    } else {
+        throw new Error("signature not found in the signature")
+    }
+
+    let userHandle: string | undefined
+    if ("userHandle" in raw.response) {
+        userHandle = Base64.fromBytes(
+            new Uint8Array(raw.response.userHandle as ArrayBuffer),
+            {
+                pad: false,
+                url: true
+            }
+        )
+    }
+
+    const serverResponse = await client.request(
+        {
+            method: "pks_verifyAuthentication",
+            params: [
+                {
+                    id: raw.id,
+                    rawId: Base64.fromBytes(new Uint8Array(raw.rawId), {
+                        pad: false,
+                        url: true
+                    }),
+                    authenticatorAttachment: raw.authenticatorAttachment as
+                        | "cross-platform"
+                        | "platform",
+                    response: {
+                        clientDataJSON: Base64.fromBytes(
+                            new Uint8Array(raw.response.clientDataJSON),
+                            {
+                                pad: false,
+                                url: true
+                            }
+                        ),
+                        authenticatorData: responseAuthenticatorData,
+                        signature,
+                        userHandle
+                    },
+                    clientExtensionResults: raw.getClientExtensionResults(),
+                    type: raw.type as "public-key"
+                },
+                {
+                    uuid
+                }
+            ]
+        },
+        {
+            retryCount: 0
+        }
+    )
+
+    const success = Boolean(serverResponse?.success)
+    const id = serverResponse?.id
+    const publicKey = serverResponse?.publicKey
+
+    if (typeof id !== "string") {
+        throw new Error("Invalid passkey id returned from server")
+    }
+
+    if (typeof publicKey !== "string" || !publicKey.startsWith("0x")) {
+        throw new Error(
+            "Invalid public key returned from server - must be hex string starting with 0x"
+        )
+    }
+
+    return {
+        success,
+        id,
+        publicKey: publicKey as Hex
+    }
+}

package/actions/passkeyServer/verifyRegistration.ts

@@ -48,49 +48,59 @@ export const verifyRegistration = async (
         }
     }
 
-    const serverResponse = await client.request({
-        method: "pks_verifyRegistration",
-        params: [
-            {
-                id: credential.id,
-                rawId: Base64.fromBytes(new Uint8Array(credential.raw.rawId), {
-                    pad: false,
-                    url: true
-                }),
-                response: {
-                    clientDataJSON: Base64.fromBytes(
-                        new Uint8Array(response.clientDataJSON)
-                    ),
-                    attestationObject: Base64.fromBytes(
-                        new Uint8Array(response.attestationObject),
+    const serverResponse = await client.request(
+        {
+            method: "pks_verifyRegistration",
+            params: [
+                {
+                    id: credential.id,
+                    rawId: Base64.fromBytes(
+                        new Uint8Array(credential.raw.rawId),
                         {
+                            pad: false,
                             url: true
                         }
                     ),
-                    transports:
-                        typeof response.getTransports === "function"
-                            ? (response.getTransports() as (
-                                  | "ble"
-                                  | "cable"
-                                  | "hybrid"
-                                  | "internal"
-                                  | "nfc"
-                                  | "smart-card"
-                                  | "usb"
-                              )[])
-                            : undefined,
-                    publicKeyAlgorithm: responsePublicKeyAlgorithm,
-                    authenticatorData: responseAuthenticatorData
+                    response: {
+                        clientDataJSON: Base64.fromBytes(
+                            new Uint8Array(response.clientDataJSON)
+                        ),
+                        attestationObject: Base64.fromBytes(
+                            new Uint8Array(response.attestationObject),
+                            {
+                                url: true
+                            }
+                        ),
+                        transports:
+                            typeof response.getTransports === "function"
+                                ? (response.getTransports() as (
+                                      | "ble"
+                                      | "cable"
+                                      | "hybrid"
+                                      | "internal"
+                                      | "nfc"
+                                      | "smart-card"
+                                      | "usb"
+                                  )[])
+                                : undefined,
+                        publicKeyAlgorithm: responsePublicKeyAlgorithm,
+                        authenticatorData: responseAuthenticatorData
+                    },
+                    authenticatorAttachment: credential.raw
+                        .authenticatorAttachment as
+                        | "cross-platform"
+                        | "platform",
+                    clientExtensionResults:
+                        credential.raw.getClientExtensionResults(),
+                    type: credential.raw.type as "public-key"
                 },
-                authenticatorAttachment: credential.raw
-                    .authenticatorAttachment as "cross-platform" | "platform",
-                clientExtensionResults:
-                    credential.raw.getClientExtensionResults(),
-                type: credential.raw.type as "public-key"
-            },
-            context
-        ]
-    })
+                context
+            ]
+        },
+        {
+            retryCount: 0
+        }
+    )
 
     const success = Boolean(serverResponse?.success)
     const id = serverResponse?.id

package/clients/decorators/passkeyServer.ts

@@ -4,11 +4,20 @@ import {
     type GetCredentialsReturnType,
     getCredentials
 } from "../../actions/passkeyServer/getCredentials.js"
+import {
+    type StartAuthenticationReturnType,
+    startAuthentication
+} from "../../actions/passkeyServer/startAuthentication.js"
 import {
     type StartRegistrationParameters,
     type StartRegistrationReturnType,
     startRegistration
 } from "../../actions/passkeyServer/startRegistration.js"
+import {
+    type VerifyAuthenticationParameters,
+    type VerifyAuthenticationReturnType,
+    verifyAuthentication
+} from "../../actions/passkeyServer/verifyAuthentication.js"
 import {
     type VerifyRegistrationParameters,
     type VerifyRegistrationReturnType,
@@ -23,6 +32,10 @@ export type PasskeyServerActions = {
     verifyRegistration: (
         args: VerifyRegistrationParameters
     ) => Promise<VerifyRegistrationReturnType>
+    startAuthentication: () => Promise<StartAuthenticationReturnType>
+    verifyAuthentication: (
+        args: VerifyAuthenticationParameters
+    ) => Promise<VerifyAuthenticationReturnType>
     getCredentials: (
         args: GetCredentialsParameters
     ) => Promise<GetCredentialsReturnType>
@@ -38,5 +51,7 @@ export const passkeyServerActions = (
 ): PasskeyServerActions => ({
     startRegistration: (args) => startRegistration(client, args),
     verifyRegistration: (args) => verifyRegistration(client, args),
-    getCredentials: (args) => getCredentials(client, args)
+    getCredentials: (args) => getCredentials(client, args),
+    startAuthentication: () => startAuthentication(client),
+    verifyAuthentication: (args) => verifyAuthentication(client, args)
 })

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "permissionless",
-    "version": "0.2.39",
+    "version": "0.2.40",
     "author": "Pimlico",
     "homepage": "https://docs.pimlico.io/permissionless",
     "repository": "github:pimlicolabs/permissionless.js",

package/types/passkeyServer.ts

@@ -1,6 +1,17 @@
 import type { Hex } from "viem"
 
 export type PasskeyServerRpcSchema = [
+    {
+        Method: "pks_startAuthentication"
+        Parameters: []
+        ReturnType: {
+            challenge: string
+            rpId: string
+            timeout?: number
+            userVerification?: "required" | "preferred" | "discouraged"
+            uuid: string
+        }
+    },
     {
         Method: "pks_startRegistration"
         Parameters: [context: unknown]
@@ -71,6 +82,36 @@ export type PasskeyServerRpcSchema = [
             publicKey: Hex
         }
     },
+    {
+        Method: "pks_verifyAuthentication"
+        Parameters: [
+            {
+                id: string
+                rawId: string
+                response: {
+                    clientDataJSON: string
+                    authenticatorData: string
+                    signature: string
+                    userHandle?: string
+                }
+                authenticatorAttachment: "cross-platform" | "platform"
+                clientExtensionResults: {
+                    appid?: boolean
+                    credProps?: {
+                        rk?: boolean
+                    }
+                    hmacCreateSecret?: boolean
+                }
+                type: "public-key"
+            },
+            context: unknown
+        ]
+        ReturnType: {
+            success: boolean
+            id: string
+            publicKey: Hex
+        }
+    },
     {
         Method: "pks_getCredentials"
         Parameters: [context: unknown]