diff options
| -rw-r--r-- | packages/server/src/attestation/verifyAttestationResponse.ts | 4 | ||||
| -rw-r--r-- | packages/server/src/helpers/decodeAttestationObject.ts | 2 |
2 files changed, 6 insertions, 0 deletions
diff --git a/packages/server/src/attestation/verifyAttestationResponse.ts b/packages/server/src/attestation/verifyAttestationResponse.ts index 5bbcbc8..ea25343 100644 --- a/packages/server/src/attestation/verifyAttestationResponse.ts +++ b/packages/server/src/attestation/verifyAttestationResponse.ts @@ -163,6 +163,10 @@ export default function verifyAttestationResponse(options: Options): VerifiedAtt authData, clientDataHash, }); + } else if (fmt === ATTESTATION_FORMATS.ANDROID_KEY) { + throw new Error(`Format "${fmt}" not yet supported`); + } else if (fmt === ATTESTATION_FORMATS.TPM) { + throw new Error(`Format "${fmt}" not yet supported`); } else if (fmt === ATTESTATION_FORMATS.NONE) { // This is the weaker of the attestations, so there's nothing else to really check verified = true; diff --git a/packages/server/src/helpers/decodeAttestationObject.ts b/packages/server/src/helpers/decodeAttestationObject.ts index 34b069b..5a91dd4 100644 --- a/packages/server/src/helpers/decodeAttestationObject.ts +++ b/packages/server/src/helpers/decodeAttestationObject.ts @@ -18,6 +18,8 @@ export enum ATTESTATION_FORMATS { FIDO_U2F = 'fido-u2f', PACKED = 'packed', ANDROID_SAFETYNET = 'android-safetynet', + ANDROID_KEY = 'android-key', + TPM = 'tpm', NONE = 'none', } |