1 files changed, 68 insertions, 0 deletions
diff --git a/src/attestation/verifyAttestationResponse.ts b/src/attestation/verifyAttestationResponse.ts
new file mode 100644
index 0000000..6beae85
--- /dev/null
+++ b/src/attestation/verifyAttestationResponse.ts
@@ -0,0 +1,68 @@
+import decodeAttestationObject from '@helpers/decodeAttestationObject';
+import decodeClientDataJSON from '@helpers/decodeClientDataJSON';
+import { ATTESTATION_FORMATS, EncodedAuthenticatorAttestationResponse } from '@types';
+
+import verifyFIDOU2F from './verifications/verifyFIDOU2F';
+
+/**
+ * Verify that the user has legitimately completed the registration process
+ * @param response
+ * @param expectedOrigin Expected URL of website attestation should have occurred on
+ */
+export default function verifyAttestationResponse(
+  response: EncodedAuthenticatorAttestationResponse,
+  expectedOrigin: string,
+) {
+  const { base64AttestationObject, base64ClientDataJSON } = response;
+  const attestationObject = decodeAttestationObject(base64AttestationObject);
+  const clientDataJSON = decodeClientDataJSON(base64ClientDataJSON);
+
+  console.debug('decoded attestationObject:', attestationObject);
+  console.debug('decoded clientDataJSON:', clientDataJSON);
+
+  const { type, origin } = clientDataJSON;
+
+  // Check that the origin is our site
+  if (origin !== expectedOrigin) {
+    console.error('client origin did not equal our origin');
+    console.debug('Expected Origin:', expectedOrigin);
+    console.debug('attestation\'s origin:', origin);
+    throw new Error('Attestation origin was an unexpected value');
+  }
+
+  // Make sure we're handling an attestation
+  if (type !== 'webauthn.create') {
+    console.error('type did not equal "webauthn.create"');
+    console.debug('attestation\'s type:', type);
+    throw new Error('Attestation type was an unexpected value');
+  }
+
+  const { fmt } = attestationObject;
+
+  /**
+   * Verification can only be performed when attestation = 'direct'
+   */
+  if (fmt === ATTESTATION_FORMATS.FIDO_U2F) {
+    console.log('Decoding FIDO-U2F attestation');
+    return verifyFIDOU2F(attestationObject, base64ClientDataJSON);
+  }
+
+  // if (fmt === ATTESTATION_FORMATS.PACKED) {
+  //   console.log('Decoding Packed attestation');
+  //   return WebauthnService.verifyAttestationPacked(decodedAttestation, clientDataJSON);
+  // }
+
+  // if (fmt === ATTESTATION_FORMATS.ANDROID_SAFETYNET) {
+  //   console.log('Decoding Android Safetynet attestation');
+  //   return WebauthnService.verifyAttestationAndroidSafetynet(decodedAttestation, clientDataJSON);
+  // }
+
+  // if (fmt === ATTESTATION_FORMATS.NONE) {
+  //   console.log('Decoding None attestation');
+  //   return WebauthnService.verifyAttestationNone(decodedAttestation, decodedClientDataJSON);
+  // }
+
+  const reason = `Unsupported Attestation Format: ${fmt}`;
+  console.error(reason);
+  return { verified: false, reason };
+}