1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
|
import dotenv from 'dotenv';
dotenv.config();
const { ENABLE_MDS, MDS_API_TOKEN, MDS_TOC_URL, MDS_ROOT_CERT_URL } = process.env;
/**
* Supported environment variables:
*
* @prop `ENABLE_MDS`: Enable support for the FIDO Metadata Service API
* @prop `MDS_API_TOKEN`: FIDO Metadata Service API token (see https://fidoalliance.org/metadata/)
* @prop `MDS_TOC_URL`: Alternative URL to the FIDO Metadata Service TOC endpoint (defaults to
* https://mds2.fidoalliance.org/)
* @prop `MDS_ROOT_CERT_URL`: URL to root certificate for completing certificate chains
*/
export const ENV_VARS = {
ENABLE_MDS: ENABLE_MDS === 'true' ? true : false,
MDS_API_TOKEN: MDS_API_TOKEN || '',
MDS_TOC_URL: MDS_TOC_URL || 'https://mds2.fidoalliance.org/',
MDS_ROOT_CERT_URL: MDS_ROOT_CERT_URL || 'https://mds.fidoalliance.org/Root.cer',
};
type COSEInfo = {
kty: number;
alg: number;
crv?: number;
};
/**
* A mapping of ALG_SIGN hex values (as unsigned shorts) to COSE curve values. Keys should appear as
* values in a metadata statement's `authenticationAlgorithm` property.
*
* From https://fidoalliance.org/specs/fido-v2.0-rd-20180702/fido-registry-v2.0-rd-20180702.html
* FIDO Registry of Predefined Values - 3.6.1 Authentication Algorithms
*/
export const FIDO_METADATA_AUTH_ALG_TO_COSE: { [algKey: number]: COSEInfo } = {
// ALG_SIGN_SECP256R1_ECDSA_SHA256_RAW
1: { kty: 2, alg: -7, crv: 1 },
// ALG_SIGN_RSASSA_PSS_SHA256_RAW
3: { kty: 3, alg: -37 },
// ALG_SIGN_SECP256K1_ECDSA_SHA256_RAW
5: { kty: 2, alg: -7, crv: 8 },
// ALG_SIGN_RSASSA_PSS_SHA384_RAW
10: { kty: 3, alg: -38 },
// ALG_SIGN_RSASSA_PSS_SHA512_RAW
11: { kty: 3, alg: -39 },
// ALG_SIGN_RSASSA_PKCSV15_SHA256_RAW
12: { kty: 3, alg: -257 },
// ALG_SIGN_RSASSA_PKCSV15_SHA384_RAW
13: { kty: 3, alg: -258 },
// ALG_SIGN_RSASSA_PKCSV15_SHA512_RAW
14: { kty: 3, alg: -259 },
// ALG_SIGN_RSASSA_PKCSV15_SHA1_RAW
15: { kty: 3, alg: -65535 },
// ALG_SIGN_SECP384R1_ECDSA_SHA384_RAW
16: { kty: 2, alg: -35, crv: 2 },
// ALG_SIGN_SECP521R1_ECDSA_SHA512_RAW
17: { kty: 2, alg: -36, crv: 3 },
// ALG_SIGN_SECP521R1_ECDSA_SHA512_RAW
18: { kty: 1, alg: -8, crv: 6 },
};
/**
* A map of ATTESTATION hex values (as unsigned shorts). Keys should
* appear as values in a metadata statement's `attestationTypes` property.
*
* From https://fidoalliance.org/specs/fido-v2.0-rd-20180702/fido-registry-v2.0-rd-20180702.html
* FIDO Registry of Predefined Values - 3.6.3 Authenticator Attestation Types
*/
export const FIDO_METADATA_ATTESTATION_TYPES: { [type: string]: string } = {
15879: 'ATTESTATION_BASIC_FULL',
// Self attestation
15880: 'ATTESTATION_BASIC_SURROGATE',
15881: 'ATTESTATION_ECDAA',
15882: 'ATTESTATION_ATTCA',
};
export type FIDO_AUTHENTICATOR_STATUS =
| 'NOT_FIDO_CERTIFIED'
| 'FIDO_CERTIFIED'
| 'USER_VERIFICATION_BYPASS'
| 'ATTESTATION_KEY_COMPROMISE'
| 'USER_KEY_REMOTE_COMPROMISE'
| 'USER_KEY_PHYSICAL_COMPROMISE'
| 'UPDATE_AVAILABLE'
| 'REVOKED'
| 'SELF_ASSERTION_SUBMITTED'
| 'FIDO_CERTIFIED_L1'
| 'FIDO_CERTIFIED_L2'
| 'FIDO_CERTIFIED_L3'
| 'FIDO_CERTIFIED_L4'
| 'FIDO_CERTIFIED_L5';
|
