passkey-authenticator 0.6.0

A webauthn authenticator supporting passkeys.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69

//! # Passkey Authenticator
//!
//! [![github]](https://github.com/1Password/passkey-rs/tree/main/passkey-authenticator)
//! [![version]](https://crates.io/crates/passkey-authenticator)
//! [![documentation]](https://docs.rs/passkey-authenticator/)
//!
//! This crate defines an [`Authenticator`] type along with a basic implementation of the [CTAP 2.0]
//! specification. The [`Authenticator`] struct is designed in such a way that storage and user
//! interaction are defined through traits, allowing only the parts that vary between vendors,
//! but keeping the specification compliant implementation regardless of vendor. This is why the
//! [`Ctap2Api`] trait is sealed, to prevent external implementations.
//!
//! ## Why RustCrypto?
//!
//! For targeting WASM, yes there are other cryptographic libraries out there that allow targeting
//! WASM, but none of them are as easy to compile to wasm than the pure rust implementations of the
//! [RustCrypto] libraries. Now this does come with limitations, so there are plans to provide a
//! similar backing trait to "plug-in" the desired cryptography from a vendor. Work is ongoing for this.
//!
//! [github]: https://img.shields.io/badge/GitHub-1Password%2Fpasskey--rs%2Fpasskey--authenticator-informational?logo=github&style=flat
//! [version]: https://img.shields.io/crates/v/passkey-authenticator?logo=rust&style=flat
//! [documentation]: https://img.shields.io/docsrs/passkey-authenticator/latest?logo=docs.rs&style=flat
//! [CTAP 2.0]: https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html
//! [RustCrypto]: https://github.com/RustCrypto

mod authenticator;
mod credential_store;
mod ctap2;
mod passkey;
mod user_validation;

#[cfg(all(feature = "linux", target_os = "linux"))]
pub mod linux;

use passkey_crypto::{CoseKey, PublicKeyT};

pub use self::{
    authenticator::{Authenticator, CredentialIdLength, extensions},
    credential_store::{CredentialStore, DiscoverabilitySupport, MemoryStore, StoreInfo},
    ctap2::Ctap2Api,
    passkey::PasskeyAccessor,
    user_validation::{UiHint, UserCheck, UserValidationMethod},
};

#[cfg(any(test, feature = "testable"))]
pub use self::user_validation::MockUserValidationMethod;

/// A COSE key pair, containing both the public and private keys.
pub struct CoseKeyPair {
    /// The public key.
    pub public: CoseKey,
    /// The private key.
    pub private: CoseKey,
}

impl CoseKeyPair {
    /// Create a new COSE key pair from a secret key and algorithm.
    pub fn from_secret_key<SK: passkey_crypto::SecretKeyT>(private_key: &SK) -> Self {
        let public_key = private_key.public_key();

        Self {
            public: public_key.to_cose_key(),
            private: private_key.to_cose_key(),
        }
    }
}

#[cfg(test)]
mod tests;