summaryrefslogtreecommitdiffhomepage
path: root/packages/server/src
AgeCommit message (Collapse)Author
2020-07-08Remove extraneous logging from MetadataServiceMatthew Miller
2020-07-08Update isCertRevoked to use asn1-schemaMatthew Miller
AAAAAGH THIS IS SO MUCH BETTER!
2020-07-08Check cache before downloading CRLMatthew Miller
2020-07-08Add in cert revocation check when validating pathMatthew Miller
2020-07-08Start MetadataService in “disabled” stateMatthew Miller
2020-07-07Update MetadataService to support hybrid MDSMatthew Miller
2020-07-07Throw errors when TOC cert path or sig are invalidMatthew Miller
2020-07-07Throw error if metadata hash doesn’t matchMatthew Miller
2020-07-07Throw error when unlisted aaguid is encounteredMatthew Miller
2020-07-07Check status report for AAGUID on get statementMatthew Miller
2020-07-07Fix metadata statement hash comparisonMatthew Miller
2020-07-07Fix error parsing statements with intl charactersMatthew Miller
2020-07-07Move isCertRevoked into separate helperMatthew Miller
Also handle cases where cert doesn’t provide CDP URIs
2020-07-07Add revocation check to validateCertificatePathMatthew Miller
2020-07-07Fix issue with potential cache missMatthew Miller
2020-07-07Add caching to CRL revocation checksMatthew Miller
2020-07-07Make validateCertificatePath asyncMatthew Miller
2020-07-07Add initial method to test for cert revocationMatthew Miller
2020-07-07Relocate asn1js module declarationMatthew Miller
2020-07-07Update verifyAssertionRespones to pass conformanceMatthew Miller
2020-07-05Add various checks to assertion verifierMatthew Miller
2020-07-05Add new isBase64URLString helperMatthew Miller
2020-07-05Fix import path in verifyAndroidKeyMatthew Miller
2020-07-05Remove last console output from MetadataServiceMatthew Miller
2020-07-05Add support for metadata in verifyTPMMatthew Miller
2020-07-05Make verifyTPM asyncMatthew Miller
2020-07-04Remove console logging from cert path validatorMatthew Miller
2020-07-04Get rid of “clean” MetadataService stateMatthew Miller
getStatement() is already capable of returning `undefined` when a statement doesn’t exist for a given aaguid. This means there’s nothing preventing us from using the service without initializing it. By making the service always ready to query for statements by aaguid, it becomes possible to use this library without initializing MetadataService at all if there’s no interest in the additional level of security.
2020-07-04Add metadata verification to AndroidKeyMatthew Miller
2020-07-04Make verifyAndroidKey asyncMatthew Miller
2020-07-04Improve error output in verifyAndroidSafetyNetMatthew Miller
2020-07-04Improve error namespacing in verifyPackedMatthew Miller
2020-07-04Check intermediate certs for temporal validityMatthew Miller
2020-07-04Error on full attestation if only self is validMatthew Miller
2020-07-04Add FIDO attestation type constantsMatthew Miller
2020-07-04Refactor SafetyNet logic for metadata verifier algMatthew Miller
2020-07-04Update SafetyNet with new metadata verifierMatthew Miller
2020-07-04Update packed with new metadata verifierMatthew Miller
2020-07-04Add method for verifying attestation with metadataMatthew Miller
2020-07-04Add metadata cert path validation to SafetyNetMatthew Miller
2020-07-04Make verifyAndroidSafetynet asyncMatthew Miller
2020-07-04Update packed to support metadataMatthew Miller
2020-07-04Fix bug with enforcing alg be a numberMatthew Miller
2020-07-04Make verifyPacked asynchronousMatthew Miller
2020-07-04Mark service ready after loading test statementsMatthew Miller
2020-07-04Convert verifyAttestationResponse to asyncMatthew Miller
2020-07-04Pass aaguid into Packed verificationMatthew Miller
2020-07-04Add new metadata auth algorithm constantsMatthew Miller
2020-07-04Block getting statements during TOC refreshMatthew Miller
2020-07-04Add basic service state to MetadataServiceMatthew Miller