136 lines
4.6 KiB
TypeScript
136 lines
4.6 KiB
TypeScript
import $ from 'jquery';
|
|
import { AJAX } from './modules/ajax.ts';
|
|
import { ajaxShowMessage } from './modules/ajax-message.ts';
|
|
|
|
/**
|
|
* @param {ArrayBuffer} buffer
|
|
*
|
|
* @return {string}
|
|
*/
|
|
const arrayBufferToBase64 = buffer => {
|
|
const bytes = new Uint8Array(buffer);
|
|
let string = '';
|
|
for (const byte of bytes) {
|
|
string += String.fromCharCode(byte);
|
|
}
|
|
|
|
return window.btoa(string);
|
|
};
|
|
|
|
/**
|
|
* @param {string} string
|
|
*
|
|
* @return {Uint8Array}
|
|
*/
|
|
const base64ToUint8Array = string => {
|
|
return Uint8Array.from(window.atob(string), char => char.charCodeAt(0));
|
|
};
|
|
|
|
/**
|
|
* @param {JQuery<HTMLElement>} $input
|
|
*/
|
|
const handleCreation = ($input): void => {
|
|
const $form = $input.parents('form');
|
|
$form.find('input[type=submit]').hide();
|
|
|
|
const creationOptionsJson = $input.attr('data-creation-options');
|
|
const creationOptions = JSON.parse(creationOptionsJson);
|
|
|
|
const publicKey = creationOptions;
|
|
publicKey.challenge = base64ToUint8Array(creationOptions.challenge);
|
|
publicKey.user.id = base64ToUint8Array(creationOptions.user.id);
|
|
if (creationOptions.excludeCredentials) {
|
|
const excludedCredentials = [];
|
|
for (let value of creationOptions.excludeCredentials) {
|
|
let excludedCredential = value;
|
|
excludedCredential.id = base64ToUint8Array(value.id);
|
|
excludedCredentials.push(excludedCredential);
|
|
}
|
|
|
|
publicKey.excludeCredentials = excludedCredentials;
|
|
}
|
|
|
|
// eslint-disable-next-line compat/compat
|
|
navigator.credentials.create({ publicKey: publicKey })
|
|
.then((credential: PublicKeyCredential) => {
|
|
const credentialJson = JSON.stringify({
|
|
id: credential.id,
|
|
rawId: arrayBufferToBase64(credential.rawId),
|
|
type: credential.type,
|
|
response: {
|
|
clientDataJSON: arrayBufferToBase64(credential.response.clientDataJSON),
|
|
attestationObject: arrayBufferToBase64((credential.response as AuthenticatorAttestationResponse).attestationObject),
|
|
}
|
|
});
|
|
$input.val(credentialJson);
|
|
$form.trigger('submit');
|
|
})
|
|
.catch((error) => ajaxShowMessage(error, false, 'error'));
|
|
};
|
|
|
|
/**
|
|
* @param {JQuery<HTMLElement>} $input
|
|
*/
|
|
const handleRequest = ($input): void => {
|
|
const $form = $input.parents('form');
|
|
$form.find('input[type=submit]').hide();
|
|
|
|
const requestOptionsJson = $input.attr('data-request-options');
|
|
const requestOptions = JSON.parse(requestOptionsJson);
|
|
|
|
const publicKey = requestOptions;
|
|
publicKey.challenge = base64ToUint8Array(requestOptions.challenge);
|
|
if (requestOptions.allowCredentials) {
|
|
const allowedCredentials = [];
|
|
for (let value of requestOptions.allowCredentials) {
|
|
let allowedCredential = value;
|
|
allowedCredential.id = base64ToUint8Array(value.id);
|
|
allowedCredentials.push(allowedCredential);
|
|
}
|
|
|
|
publicKey.allowCredentials = allowedCredentials;
|
|
}
|
|
|
|
// eslint-disable-next-line compat/compat
|
|
navigator.credentials.get({ publicKey: publicKey })
|
|
.then((credential: PublicKeyCredential) => {
|
|
const credentialJson = JSON.stringify({
|
|
id: credential.id,
|
|
rawId: arrayBufferToBase64(credential.rawId),
|
|
type: credential.type,
|
|
response: {
|
|
authenticatorData: arrayBufferToBase64((credential.response as AuthenticatorAssertionResponse).authenticatorData),
|
|
clientDataJSON: arrayBufferToBase64(credential.response.clientDataJSON),
|
|
signature: arrayBufferToBase64((credential.response as AuthenticatorAssertionResponse).signature),
|
|
userHandle: arrayBufferToBase64((credential.response as AuthenticatorAssertionResponse).userHandle),
|
|
}
|
|
});
|
|
$input.val(credentialJson);
|
|
$form.trigger('submit');
|
|
})
|
|
.catch((error) => ajaxShowMessage(error, false, 'error'));
|
|
};
|
|
|
|
AJAX.registerOnload('webauthn.js', function () {
|
|
if (
|
|
! navigator.credentials
|
|
|| ! navigator.credentials.create
|
|
|| ! navigator.credentials.get
|
|
|| ! window.PublicKeyCredential
|
|
) {
|
|
ajaxShowMessage(window.Messages.webAuthnNotSupported, false, 'error');
|
|
|
|
return;
|
|
}
|
|
|
|
const $creationInput = $('#webauthn_creation_response');
|
|
if ($creationInput.length > 0) {
|
|
handleCreation($creationInput);
|
|
}
|
|
|
|
const $requestInput = $('#webauthn_request_response');
|
|
if ($requestInput.length > 0) {
|
|
handleRequest($requestInput);
|
|
}
|
|
});
|
