Add Packed tests for happy and sad paths

packages/server/src/registration/verifications/verifyAttestationPacked.test.ts

@@ -1,4 +1,4 @@
-import { assertEquals } from 'https://deno.land/[email protected]/assert/mod.ts';
+import { assertEquals, assertRejects } from 'https://deno.land/[email protected]/assert/mod.ts';
 
 import { verifyRegistrationResponse } from '../verifyRegistrationResponse.ts';
 
@@ -34,3 +34,75 @@ Deno.test('should verify (broken) Packed response from Chrome virtual authentica
 
  assertEquals(verification.verified, true);
 });
+
+Deno.test(
+ 'should succeed if id-fido-gen-ce-aaguid extension is present and matches AAGUID in auth data',
+ async () => {
+ const verification = await verifyRegistrationResponse({
+ response: {
+ 'id':
+ 'U2FsdGVkX1_vZHKBBUOJpF_B3EuMclEyX-uqywz7QgHmOoaWkoaqm7GRIuc0HGBouOzOb1rov6NnpdP5_NXD8k_6HiEOCNpB5RMw9ZwXGtEPo9sVz9f2M8mV4dJZAa6n',
+ 'rawId':
+ 'U2FsdGVkX1_vZHKBBUOJpF_B3EuMclEyX-uqywz7QgHmOoaWkoaqm7GRIuc0HGBouOzOb1rov6NnpdP5_NXD8k_6HiEOCNpB5RMw9ZwXGtEPo9sVz9f2M8mV4dJZAa6n',
+ 'response': {
+ 'clientDataJSON':
+ 'eyJvcmlnaW4iOiJodHRwczovL3dlYmF1dGhuLmlvIiwiY2hhbGxlbmdlIjoiamszcjFfNUFMZHk3ZDhGOFBEd0FOekt6LW5EN245bDVwN2dnZks1YWEzSXZDaVpHbWt2S29ZR3UtZnJ4bGRZYUZQNC1UbkxRNGRoQWpreldyZE5ieVEiLCJ0eXBlIjoid2ViYXV0aG4uY3JlYXRlIn0',
+ 'attestationObject':
+ 'o2NmbXRmcGFja2VkZ2F0dFN0bXSjY2FsZyZjeDVjgVkB_zCCAfswggGgoAMCAQICEFw-WA37iCeJVBiKwlH-bfwwCgYIKoZIzj0EAwIwLjELMAkGA1UEBhMCVVMxDDAKBgNVBAoMA0lCTTERMA8GA1UEAwwIRklET1RFU1QwIhgPMjAyNDA5MTIxNjE3MTRaGA8yMDUyMDEyODE3MTcxNFowVzELMAkGA1UEBhMCVVMxDDAKBgNVBAoMA0lCTTEiMCAGA1UECwwZQXV0aGVudGljYXRvciBBdHRlc3RhdGlvbjEWMBQGA1UEAwwNUEFDS0VELVNJR05FUjBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABL83SCKq9bAqrbi1sTTV9HxlseMD2MbHYXHGROZGx0CFpHPayDeYqo6dWo4_6-z8_RUHwMvbNIUaxgAC5e3PacejczBxMB0GA1UdDgQWBBRNL7NrNzBPnl6RAyWY9tCL8xBtzDAfBgNVHSMEGDAWgBQX_QoP8NpeXBvZlnioDn4WYG-t8zAMBgNVHRMBAf8EAjAAMCEGCysGAQQBguUcAQEEBBIEEP_Z9JTrc0hEvWhmk4FVf_cwCgYIKoZIzj0EAwIDSQAwRgIhAMN6MkZp5DvxlqtRTIVsok0zxbsW76roUUprQ0lEATbxAiEAmrp7VhF_0RP-CJI9cCwKGKs9jhEVVZmZ5dWpOp6hNnhjc2lnWEcwRQIhAJSxn_AUAyoBZQhlN_PW-R5FsnDJCwZ__vFIZqdI5p6JAiBenN17iGqijwNh_wB-Ka_yUqPMLlIrE4DFW4E6JFXSQGhhdXRoRGF0YVjkdKbqkhPJnC90siSSsyDPQCYqlMGpUKA5fyklC2CEHvBFAAAAAP_Z9JTrc0hEvWhmk4FVf_cAYFNhbHRlZF9f72RygQVDiaRfwdxLjHJRMl_rqssM-0IB5jqGlpKGqpuxkSLnNBxgaLjszm9a6L-jZ6XT-fzVw_JP-h4hDgjaQeUTMPWcFxrRD6PbFc_X9jPJleHSWQGup6UBAgMmIAEhWCAaFLI3Hlb0boERsvlz69qracfxATqaHb6YTkBaVRofXSJYIJe4sLH76hnJInTxVcz5ZA6tfnvBqFWxPTp10H9KkG0_',
+ 'publicKeyAlgorithm': -7,
+ 'publicKey':
+ 'MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEGhSyNx5W9G6BEbL5c-vaq2nH8QE6mh2-mE5AWlUaH12XuLCx--oZySJ08VXM-WQOrX57wahVsT06ddB_SpBtPw',
+ 'authenticatorData':
+ 'dKbqkhPJnC90siSSsyDPQCYqlMGpUKA5fyklC2CEHvBFAAAAAP_Z9JTrc0hEvWhmk4FVf_cAYFNhbHRlZF9f72RygQVDiaRfwdxLjHJRMl_rqssM-0IB5jqGlpKGqpuxkSLnNBxgaLjszm9a6L-jZ6XT-fzVw_JP-h4hDgjaQeUTMPWcFxrRD6PbFc_X9jPJleHSWQGup6UBAgMmIAEhWCAaFLI3Hlb0boERsvlz69qracfxATqaHb6YTkBaVRofXSJYIJe4sLH76hnJInTxVcz5ZA6tfnvBqFWxPTp10H9KkG0_',
+ 'transports': ['internal'],
+ },
+ 'type': 'public-key',
+ 'clientExtensionResults': {},
+ },
+ expectedChallenge:
+ 'jk3r1_5ALdy7d8F8PDwANzKz-nD7n9l5p7ggfK5aa3IvCiZGmkvKoYGu-frxldYaFP4-TnLQ4dhAjkzWrdNbyQ',
+ expectedOrigin: 'https://webauthn.io',
+ expectedRPID: 'webauthn.io',
+ });
+
+ assertEquals(verification.verified, true);
+ },
+);
+
+Deno.test(
+ 'should fail if id-fido-gen-ce-aaguid extension is present and does not match AAGUID in auth data',
+ async () => {
+ // const response = await ;
+ await assertRejects(
+ () =>
+ verifyRegistrationResponse({
+ response: {
+ 'id':
+ 'U2FsdGVkX1_TltrAMvHmwb2E0eCxQwxNxipf9knba5awjus9BXmWXMKFPsDdHF0oILE1KYanoajKcWXD9KVw4dwX-aEyr2CpA-7kKAUchMmuLWSXAxspPHRy58a91BDP',
+ 'rawId':
+ 'U2FsdGVkX1_TltrAMvHmwb2E0eCxQwxNxipf9knba5awjus9BXmWXMKFPsDdHF0oILE1KYanoajKcWXD9KVw4dwX-aEyr2CpA-7kKAUchMmuLWSXAxspPHRy58a91BDP',
+ 'response': {
+ 'clientDataJSON':
+ 'eyJvcmlnaW4iOiJodHRwczovL3dlYmF1dGhuLmlvIiwiY2hhbGxlbmdlIjoicHhPRFZXTzgxUUVvaW40djExLW1ZR05pY2IyWG81NUFBbFJINFhxazIzUW50SkU5ZTlhQkR0YVQ5QzV6UWk1UTdyZUNVMzduMGQ0a255NTZSc0ZtYnciLCJ0eXBlIjoid2ViYXV0aG4uY3JlYXRlIn0',
+ 'attestationObject':
+ 'o2NmbXRmcGFja2VkZ2F0dFN0bXSjY2FsZyZjeDVjgVkB_zCCAfswggGgoAMCAQICEFw-WA37iCeJVBiKwlH-bfwwCgYIKoZIzj0EAwIwLjELMAkGA1UEBhMCVVMxDDAKBgNVBAoMA0lCTTERMA8GA1UEAwwIRklET1RFU1QwIhgPMjAyNDA5MTIxNjE3MTRaGA8yMDUyMDEyODE3MTcxNFowVzELMAkGA1UEBhMCVVMxDDAKBgNVBAoMA0lCTTEiMCAGA1UECwwZQXV0aGVudGljYXRvciBBdHRlc3RhdGlvbjEWMBQGA1UEAwwNUEFDS0VELVNJR05FUjBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABL83SCKq9bAqrbi1sTTV9HxlseMD2MbHYXHGROZGx0CFpHPayDeYqo6dWo4_6-z8_RUHwMvbNIUaxgAC5e3PacejczBxMB0GA1UdDgQWBBRNL7NrNzBPnl6RAyWY9tCL8xBtzDAfBgNVHSMEGDAWgBQX_QoP8NpeXBvZlnioDn4WYG-t8zAMBgNVHRMBAf8EAjAAMCEGCysGAQQBguUcAQEEBBIEEP_Z9JTrc0hEvWhmk4FVf_cwCgYIKoZIzj0EAwIDSQAwRgIhAMN6MkZp5DvxlqtRTIVsok0zxbsW76roUUprQ0lEATbxAiEAmrp7VhF_0RP-CJI9cCwKGKs9jhEVVZmZ5dWpOp6hNnhjc2lnWEYwRAIgCBrwbKfvHiiWHQ2ATt9fJcGVJZGynmm5f77cFRwiU_8CIGg8NgtGtPrx6giI3UMsWByNtAM1UN9vx1EKu90AEc5eaGF1dGhEYXRhWOR0puqSE8mcL3SyJJKzIM9AJiqUwalQoDl_KSULYIQe8EUAAAAAM3vvU7aPQEWMt8r6dI_8DgBgU2FsdGVkX1_TltrAMvHmwb2E0eCxQwxNxipf9knba5awjus9BXmWXMKFPsDdHF0oILE1KYanoajKcWXD9KVw4dwX-aEyr2CpA-7kKAUchMmuLWSXAxspPHRy58a91BDPpQECAyYgASFYIFVEnAtmwsWP0FKQxGwJa2yGzmA8koGNYoJclMQzlsDJIlggwZRIX1gdfh2q_GBdHZgAy5vO7hsL338yuxPevvZgSp8',
+ 'publicKeyAlgorithm': -7,
+ 'publicKey':
+ 'MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEVUScC2bCxY_QUpDEbAlrbIbOYDySgY1iglyUxDOWwMnBlEhfWB1-Har8YF0dmADLm87uGwvffzK7E96-9mBKnw',
+ 'authenticatorData':
+ 'dKbqkhPJnC90siSSsyDPQCYqlMGpUKA5fyklC2CEHvBFAAAAADN771O2j0BFjLfK-nSP_A4AYFNhbHRlZF9f05bawDLx5sG9hNHgsUMMTcYqX_ZJ22uWsI7rPQV5llzChT7A3RxdKCCxNSmGp6GoynFlw_SlcOHcF_mhMq9gqQPu5CgFHITJri1klwMbKTx0cufGvdQQz6UBAgMmIAEhWCBVRJwLZsLFj9BSkMRsCWtshs5gPJKBjWKCXJTEM5bAySJYIMGUSF9YHX4dqvxgXR2YAMubzu4bC99_MrsT3r72YEqf',
+ 'transports': ['internal'],
+ },
+ 'type': 'public-key',
+ 'clientExtensionResults': {},
+ },
+ expectedChallenge:
+ 'pxODVWO81QEoin4v11-mYGNicb2Xo55AAlRH4Xqk23QntJE9e9aBDtaT9C5zQi5Q7reCU37n0d4kny56RsFmbw',
+ expectedOrigin: 'https://webauthn.io',
+ expectedRPID: 'webauthn.io',
+ }),
+ Error,
+ '1.3.6.1.4.1.45724.1.1.4',
+ );
+ },
+);