summaryrefslogtreecommitdiffhomepage
path: root/packages/server/src
AgeCommit message (Collapse)Author
2020-11-26chore: remove dom lib reference from server packageJonathan Stewmon
The dom lib is incompatible with node, which can result in inaccurate type checking. Packages which reference types provided by a lib require package consumers to either include the lib or use skipLibCheck which disables all type declaration checks. So instead of referencing the dom lib, define the types needed by the server package locally and import them where needed.
2020-11-18chore(deps): update cbor and wrap decodeFirstSync with recoveryJonathan Stewmon
Since cbor 5.1, decodeFirstSync behaves consistently with the async method, which throws an error if there are extra bytes after the first object. see: https://github.com/hildjj/node-cbor/commit/dc4f76445c42dc45dd5750ee53851159622795de
2020-11-18chore(deps): bump jsrsasign to the latest versionJonathan Stewmon
The return type of getExtAuthorityKeyIdentifier changed in version 9. `kid` is now an object with a `hex` property.
2020-10-27chore: Remove unnecessary @preferred tagGerrit Birkeland
2020-10-19Add unit test for rpIDMatthew Miller
2020-10-19Add rpID argumentMatthew Miller
2020-10-12Update OctetString values to access new `.buffer`Matthew Miller
2020-10-07Merge pull request #58 from ↵Matthew Miller
MasterKale/feature/improve-browser-credential-selection feature/improve-browser-credential-selection
2020-10-07Remove some console loggingMatthew Miller
2020-10-07Brute force nonce extraction from cert extensionMatthew Miller
2020-10-07Implement verificationMatthew Miller
As described here: https://github.com/w3c/webauthn/pull/1491
2020-10-06Add test for Apple verificationMatthew Miller
2020-10-05Update testsMatthew Miller
2020-10-05Remove old option from generateAssertionOptionsMatthew Miller
2020-10-05Use raw `allowCredentials` for assertion optsMatthew Miller
Support per-credential transports instead of assuming that all allowable credentials use a single list of transports.
2020-10-05Use raw `excludeCredentials` for attestation optsMatthew Miller
In trying to simplify things I’d inadvertently painted myself into a corner. Credentials should be stored with the transports they support. It’ll make this project more secure to support specifying different transports per credential, instead of assuming that all credentials a user registered use the same transports.
2020-09-12Update verifyAttestationResponse to handle appleMatthew Miller
2020-09-12Add verifyApple methodMatthew Miller
2020-09-09Fix unit testsMatthew Miller
2020-09-09Rename serviceName to rpNameMatthew Miller
2020-09-09Clarify in test that any TPM assertion will doMatthew Miller
2020-09-09Upgrade existing assertion test public keysMatthew Miller
2020-09-09Remove backwards compatibility codeMatthew Miller
I wrote a simple script to convert existing “old format” authenticator public keys to a newer format.
2020-09-09Explicitly cast cbor encode output to BufferMatthew Miller
2020-09-09Add new tests for both tcgAtTpm structuresMatthew Miller
2020-09-09Leave a note on both tcgAtTpm structuresMatthew Miller
2020-09-08Improve retrieval of TcgAtTpm valuesMatthew Miller
2020-09-08Add attestation test for None type w/RSA keyMatthew Miller
2020-09-08Remove console loggingMatthew Miller
2020-09-08Try to gracefully support existing public keysMatthew Miller
2020-09-08Skip broken test for nowMatthew Miller
2020-09-08Convert public key to PEM during assertionMatthew Miller
2020-09-08Remove unused importMatthew Miller
2020-09-08Return entire public key from attestationMatthew Miller
This should be what actually fixes the ASN.1 tag issue I was trying to fix. This might be a breaking change…
2020-09-07Clean up convertCOSEtoPKCSMatthew Miller
2020-09-07Add method to convert public key to PEMMatthew Miller
2020-09-07Remove JSDocs from convertX509CertToPEMMatthew Miller
2020-09-07Clarify variable name in verifyFIDOU2FMatthew Miller
2020-09-07Simplify convertX509CertToPEM logicMatthew Miller
2020-09-07Rename method for converting X.509 certs to PEMMatthew Miller
2020-09-01Replace TPM unit tests with real TPM attestationsMatthew Miller
Thanks to https://github.com/abergs/fido2-net-lib/ for their legitimate TPM responses.
2020-08-29Add real TPM assertion testMatthew Miller
2020-08-29Add real TPM attestation testMatthew Miller
2020-08-09Update unit testsMatthew Miller
2020-08-09Add default authenticator selection optionsMatthew Miller
2020-07-31Update rationale for filtering certain ID’sMatthew Miller
2020-07-31Update wording on new testMatthew Miller
2020-07-31Add test for supporting custom atte algorithm ID’sMatthew Miller
2020-07-31Stop filtering custom algorithm ID’sMatthew Miller
2020-07-31Fix issue with TPM verificationsMatthew Miller