summaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authorMatthew Miller <matthew@millerti.me>2020-06-12 18:17:03 -0700
committerMatthew Miller <matthew@millerti.me>2020-06-12 18:17:03 -0700
commit1920ee7bafc97b2009b0bbae3175f4a67b6d8dc7 (patch)
tree63bdaf613faf942649eb12a89504bdae0e150a33
parent8202d447f9be8081a3f10a96796ec49663e5f8cb (diff)
Add two more formats
-rw-r--r--packages/server/src/attestation/verifyAttestationResponse.ts4
-rw-r--r--packages/server/src/helpers/decodeAttestationObject.ts2
2 files changed, 6 insertions, 0 deletions
diff --git a/packages/server/src/attestation/verifyAttestationResponse.ts b/packages/server/src/attestation/verifyAttestationResponse.ts
index 5bbcbc8..ea25343 100644
--- a/packages/server/src/attestation/verifyAttestationResponse.ts
+++ b/packages/server/src/attestation/verifyAttestationResponse.ts
@@ -163,6 +163,10 @@ export default function verifyAttestationResponse(options: Options): VerifiedAtt
authData,
clientDataHash,
});
+ } else if (fmt === ATTESTATION_FORMATS.ANDROID_KEY) {
+ throw new Error(`Format "${fmt}" not yet supported`);
+ } else if (fmt === ATTESTATION_FORMATS.TPM) {
+ throw new Error(`Format "${fmt}" not yet supported`);
} else if (fmt === ATTESTATION_FORMATS.NONE) {
// This is the weaker of the attestations, so there's nothing else to really check
verified = true;
diff --git a/packages/server/src/helpers/decodeAttestationObject.ts b/packages/server/src/helpers/decodeAttestationObject.ts
index 34b069b..5a91dd4 100644
--- a/packages/server/src/helpers/decodeAttestationObject.ts
+++ b/packages/server/src/helpers/decodeAttestationObject.ts
@@ -18,6 +18,8 @@ export enum ATTESTATION_FORMATS {
FIDO_U2F = 'fido-u2f',
PACKED = 'packed',
ANDROID_SAFETYNET = 'android-safetynet',
+ ANDROID_KEY = 'android-key',
+ TPM = 'tpm',
NONE = 'none',
}