passkey-client 0.6.0

Webauthn client in Rust.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90

use passkey_authenticator::{Authenticator, MemoryStore, MockUserValidationMethod};
use passkey_types::{
    ctap2,
    webauthn::{
        AuthenticatorSelectionCriteria, ResidentKeyRequirement, UserVerificationRequirement,
    },
};

use crate::Client;

#[test]
fn map_rk_maps_criteria_to_rk_bool() {
    #[derive(Debug)]
    struct TestCase {
        resident_key: Option<ResidentKeyRequirement>,
        require_resident_key: bool,
        expected_rk: bool,
    }

    let test_cases = vec![
        // require_resident_key fallbacks
        TestCase {
            resident_key: None,
            require_resident_key: false,
            expected_rk: false,
        },
        TestCase {
            resident_key: None,
            require_resident_key: true,
            expected_rk: true,
        },
        // resident_key values
        TestCase {
            resident_key: Some(ResidentKeyRequirement::Discouraged),
            require_resident_key: false,
            expected_rk: false,
        },
        TestCase {
            resident_key: Some(ResidentKeyRequirement::Preferred),
            require_resident_key: false,
            expected_rk: true,
        },
        TestCase {
            resident_key: Some(ResidentKeyRequirement::Required),
            require_resident_key: false,
            expected_rk: true,
        },
        // resident_key overrides require_resident_key
        TestCase {
            resident_key: Some(ResidentKeyRequirement::Discouraged),
            require_resident_key: true,
            expected_rk: false,
        },
    ];

    for test_case in test_cases {
        let criteria = AuthenticatorSelectionCriteria {
            resident_key: test_case.resident_key,
            require_resident_key: test_case.require_resident_key,
            user_verification: UserVerificationRequirement::Discouraged,
            authenticator_attachment: None,
        };
        let auth_info = ctap2::get_info::Response {
            versions: vec![],
            extensions: None,
            aaguid: ctap2::Aaguid::new_empty(),
            options: Some(ctap2::get_info::Options {
                rk: true,
                uv: Some(true),
                up: true,
                plat: true,
                client_pin: None,
                ..Default::default()
            }),
            max_msg_size: None,
            pin_protocols: None,
            transports: None,
            ..Default::default()
        };
        let client = Client::new(Authenticator::new(
            ctap2::Aaguid::new_empty(),
            MemoryStore::new(),
            MockUserValidationMethod::verified_user(0),
        ));

        let result = client.map_rk(&Some(criteria), &auth_info);

        assert_eq!(result, test_case.expected_rk, "{test_case:?}");
    }
}