diff options
author | Matthew Miller <matthew@millerti.me> | 2021-08-18 08:20:52 -0700 |
---|---|---|
committer | Matthew Miller <matthew@millerti.me> | 2021-08-18 08:20:52 -0700 |
commit | 71307744f19f01c009342cd5ff1ccc82f1c5078a (patch) | |
tree | 858e2beeeb531cb465b53d6a87254e549d3d556b | |
parent | d481d1cd57464e5e1e472552f6863ec7f2ac1465 (diff) |
Fix SafetyNet tests
-rw-r--r-- | packages/server/src/attestation/verifications/verifyAndroidSafetyNet.test.ts | 15 |
1 files changed, 14 insertions, 1 deletions
diff --git a/packages/server/src/attestation/verifications/verifyAndroidSafetyNet.test.ts b/packages/server/src/attestation/verifications/verifyAndroidSafetyNet.test.ts index 2568178..6a754d3 100644 --- a/packages/server/src/attestation/verifications/verifyAndroidSafetyNet.test.ts +++ b/packages/server/src/attestation/verifications/verifyAndroidSafetyNet.test.ts @@ -17,6 +17,9 @@ let authData: Buffer; let attStmt: AttestationStatement; let clientDataHash: Buffer; let aaguid: Buffer; +let credentialID: Buffer; +let credentialPublicKey: Buffer; +let rpIdHash: Buffer; beforeEach(() => { const { attestationObject, clientDataJSON } = attestationAndroidSafetyNet.response; @@ -28,6 +31,8 @@ beforeEach(() => { const parsedAuthData = parseAuthenticatorData(authData); aaguid = parsedAuthData.aaguid!; + credentialID = parsedAuthData.credentialID!; + credentialPublicKey = parsedAuthData.credentialPublicKey!; }); /** @@ -42,6 +47,9 @@ test('should verify Android SafetyNet attestation', async () => { verifyTimestampMS: false, aaguid, rootCertificates, + credentialID, + credentialPublicKey, + rpIdHash, }); expect(verified).toEqual(true); @@ -55,6 +63,9 @@ test('should throw error when timestamp is not within one minute of now', async clientDataHash, aaguid, rootCertificates, + credentialID, + credentialPublicKey, + rpIdHash, }), ).rejects.toThrow(/has expired/i); }); @@ -77,6 +88,9 @@ test('should validate response with cert path completed with GlobalSign R1 root verifyTimestampMS: false, aaguid: _aaguid, rootCertificates, + credentialID, + credentialPublicKey, + rpIdHash, }); expect(verified).toEqual(true); @@ -180,7 +194,6 @@ const attestationAndroidSafetyNet = { getClientExtensionResults: () => ({}), type: 'public-key', }; -const attestationAndroidSafetyNetChallenge = '_vVPoE42Dh-wk3bvHmaktiVvEYC-LwBX'; const safetyNetUsingGSR1RootCert = { id: 'AQsMmnEQ8OxpZxijXBMT4tyamgkqC_3hr18_e8KeK8nG69ijcTaXNKX_CRmYiW0fegPE0N_3NVHEaj_kit7LPNM', |