From 663d5819fb8a41e2b9176a80c8a8cc96cbf59a3d Mon Sep 17 00:00:00 2001
From: Matthew Miller <matthew@millerti.me>
Date: Sat, 4 Jul 2020 15:07:18 -0700
Subject: Pass aaguid into Packed verification

---
 packages/server/src/attestation/verifications/verifyPacked.ts | 3 ++-
 packages/server/src/attestation/verifyAttestationResponse.ts  | 1 +
 2 files changed, 3 insertions(+), 1 deletion(-)

(limited to 'packages/server/src')

diff --git a/packages/server/src/attestation/verifications/verifyPacked.ts b/packages/server/src/attestation/verifications/verifyPacked.ts
index 782c899..a4e230a 100644
--- a/packages/server/src/attestation/verifications/verifyPacked.ts
+++ b/packages/server/src/attestation/verifications/verifyPacked.ts
@@ -21,13 +21,14 @@ type Options = {
   clientDataHash: Buffer;
   authData: Buffer;
   credentialPublicKey: Buffer;
+  aaguid: Buffer;
 };
 
 /**
  * Verify an attestation response with fmt 'packed'
  */
 export default function verifyAttestationPacked(options: Options): boolean {
-  const { attStmt, clientDataHash, authData, credentialPublicKey } = options;
+  const { attStmt, clientDataHash, authData, credentialPublicKey, aaguid } = options;
 
   const { sig, x5c, alg } = attStmt;
 
diff --git a/packages/server/src/attestation/verifyAttestationResponse.ts b/packages/server/src/attestation/verifyAttestationResponse.ts
index 5bfaf47..6e6c87d 100644
--- a/packages/server/src/attestation/verifyAttestationResponse.ts
+++ b/packages/server/src/attestation/verifyAttestationResponse.ts
@@ -163,6 +163,7 @@ export default function verifyAttestationResponse(options: Options): VerifiedAtt
       authData,
       clientDataHash,
       credentialPublicKey,
+      aaguid,
     });
   } else if (fmt === ATTESTATION_FORMATS.ANDROID_SAFETYNET) {
     verified = verifyAndroidSafetynet({
-- 
cgit v1.2.3