Class: DiscourseWebauthn::SecurityKeyBaseValidationService

Inherits:
Object
  • Object
show all
Defined in:
lib/webauthn/security_key_base_validation_service.rb

Instance Method Summary collapse

Constructor Details

#initialize(current_user, params, challenge_params) ⇒ SecurityKeyBaseValidationService

Returns a new instance of SecurityKeyBaseValidationService.



5
6
7
8
9
# File 'lib/webauthn/security_key_base_validation_service.rb', line 5

def initialize(current_user, params, challenge_params)
  @current_user = current_user
  @params = params
  @challenge_params = challenge_params
end

Instance Method Details

#validate_challengeObject



16
17
18
19
# File 'lib/webauthn/security_key_base_validation_service.rb', line 16

def validate_challenge
  return if challenge_match?
  raise(ChallengeMismatchError, I18n.t("webauthn.validation.challenge_mismatch_error"))
end

#validate_originObject

Raises:



21
22
23
24
# File 'lib/webauthn/security_key_base_validation_service.rb', line 21

def validate_origin
  return if origin_match?
  raise(InvalidOriginError, I18n.t("webauthn.validation.invalid_origin_error"))
end

#validate_rp_id_hashObject



26
27
28
29
30
31
32
# File 'lib/webauthn/security_key_base_validation_service.rb', line 26

def validate_rp_id_hash
  return if rp_id_hash_match?
  raise(
    InvalidRelyingPartyIdError,
    I18n.t("webauthn.validation.invalid_relying_party_id_error"),
  )
end

#validate_user_verificationObject



34
35
36
37
38
# File 'lib/webauthn/security_key_base_validation_service.rb', line 34

def validate_user_verification
  flags = auth_data[32].unpack("b*")[0].split("")
  return if flags[0] == "1"
  raise(UserVerificationError, I18n.t("webauthn.validation.user_verification_error"))
end

#validate_webauthn_type(type_to_check) ⇒ Object

Raises:



11
12
13
14
# File 'lib/webauthn/security_key_base_validation_service.rb', line 11

def validate_webauthn_type(type_to_check)
  return if client_data["type"] == type_to_check
  raise(InvalidTypeError, I18n.t("webauthn.validation.invalid_type_error"))
end