WebSVN – Moodle – Diff – /lib/webauthn/src/WebAuthn.php

     private $_rpIdHash;
     private $_challenge;
     private $_signatureCounter;
     private $_caFiles;
     private $_formats;
+    private $_androidKeyHashes;
     /**
      * Initialize a new WebAuthn server
      * @param string $rpName the relying party name
             $this->_caFiles[] = \realpath($path);
+        }
+    }
+    /**
+     * add key hashes for android verification
+     * @param array<string> $hashes
+     * @return void
+     */
+    public function addAndroidKeyHashes($hashes) {
+        if (!\is_array($this->_androidKeyHashes)) {
+            $this->_androidKeyHashes = [];
+        }
+        foreach ($hashes as $hash) {
+            if (is_string($hash)) {
+                $this->_androidKeyHashes[] = $hash;
+            }
+        }
+    }
     /**
      * Returns the generated challenge to save for later validation
      * @return ByteBuffer
      */
     public function getChallenge() {
         $data->signatureCounter = $this->_signatureCounter;
         $data->AAGUID = $attestationObject->getAuthenticatorData()->getAAGUID();
         $data->rootValid = $rootValid;
         $data->userPresent = $userPresent;
         $data->userVerified = $userVerified;
+    	$data->isBackupEligible = $attestationObject->getAuthenticatorData()->getIsBackupEligible();
+        $data->isBackedUp = $attestationObject->getAuthenticatorData()->getIsBackup();
         return $data;
+    }
      * @param string $origin
      * @return boolean
      * @throws WebAuthnException
      */
     private function _checkOrigin($origin) {
+        if (str_starts_with($origin, 'android:apk-key-hash:')) {
+            return $this->_checkAndroidKeyHashes($origin);
+        }
         // https://www.w3.org/TR/webauthn/#rp-id
         // The origin's scheme must be https
         if ($this->_rpId !== 'localhost' && \parse_url($origin, PHP_URL_SCHEME) !== 'https') {
         // domain suffix of the origin's effective domain.
         return \preg_match('/' . \preg_quote($this->_rpId) . '$/i', $host) === 1;
+    }
+    /**
+     * checks if the origin value contains a known android key hash
+     * @param string $origin
+     * @return boolean
+     */
+    private function _checkAndroidKeyHashes($origin) {
+        $parts = explode('android:apk-key-hash:', $origin);
+        if (count($parts) !== 2) {
+            return false;
+        }
+        return in_array($parts[1], $this->_androidKeyHashes, true);
+    }
     /**
      * generates a new challange
      * @param int $length
      * @return string
      * @throws WebAuthnException

Proyectos de Subversion Moodle

(root)/lib/webauthn/src/WebAuthn.php – Rev 1 → 1441