diff options
Diffstat (limited to 'packages/server/src')
3 files changed, 7 insertions, 5 deletions
diff --git a/packages/server/src/authentication/verifyAuthenticationResponse.ts b/packages/server/src/authentication/verifyAuthenticationResponse.ts index a816c90..264a2f2 100644 --- a/packages/server/src/authentication/verifyAuthenticationResponse.ts +++ b/packages/server/src/authentication/verifyAuthenticationResponse.ts @@ -206,9 +206,10 @@ export default function verifyAuthenticationResponse( * reported it has been used. **Should be kept in a DB for later reference to help prevent replay * attacks!** * @param authenticationInfo.credentialDeviceType Whether this is a single-device or multi-device - * credential + * credential. **Should be kept in a DB for later reference!** * @param authenticationInfo.credentialBackedUp Whether or not the multi-device credential has been - * backed up. Always `false` for single-device credentials + * backed up. Always `false` for single-device credentials. **Should be kept in a DB for later + * reference!** */ export type VerifiedAuthenticationResponse = { verified: boolean; diff --git a/packages/server/src/helpers/parseAuthenticatorData.ts b/packages/server/src/helpers/parseAuthenticatorData.ts index d4b0646..6bf5b9a 100644 --- a/packages/server/src/helpers/parseAuthenticatorData.ts +++ b/packages/server/src/helpers/parseAuthenticatorData.ts @@ -23,7 +23,7 @@ export default function parseAuthenticatorData(authData: Buffer): ParsedAuthenti const flags = { up: !!(flagsInt & 1 << 0), // User Presence uv: !!(flagsInt & 1 << 2), // User Verified - be: !!(flagsInt & 1 << 3), // Backup Eligible + be: !!(flagsInt & 1 << 3), // Backup Eligibility bs: !!(flagsInt & 1 << 4), // Backup State at: !!(flagsInt & 1 << 6), // Attested Credential Data Present ed: !!(flagsInt & 1 << 7), // Extension Data Present diff --git a/packages/server/src/registration/verifyRegistrationResponse.ts b/packages/server/src/registration/verifyRegistrationResponse.ts index 86a9730..3a20249 100644 --- a/packages/server/src/registration/verifyRegistrationResponse.ts +++ b/packages/server/src/registration/verifyRegistrationResponse.ts @@ -270,9 +270,10 @@ export default async function verifyRegistrationResponse( * @param registrationInfo.attestationObject The raw `response.attestationObject` Buffer returned by * the authenticator * @param registrationInfo.credentialDeviceType Whether this is a single-device or multi-device - * credential + * credential. **Should be kept in a DB for later reference!** * @param registrationInfo.credentialBackedUp Whether or not the multi-device credential has been - * backed up. Always `false` for single-device credentials + * backed up. Always `false` for single-device credentials. **Should be kept in a DB for later + * reference!** */ export type VerifiedRegistrationResponse = { verified: boolean; |