-
-
Notifications
You must be signed in to change notification settings - Fork 963
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
26 changed files
with
909 additions
and
162 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
8 changes: 8 additions & 0 deletions
8
...estCompleteLogin-flow=mfa-case=can_not_use_security_key_for_passwordless_in_mfa_flow.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,8 @@ | ||
| [ | ||
| { | ||
| "id": 4000008, | ||
| "text": "The provided authentication code is invalid, please try again.", | ||
| "type": "error", | ||
| "context": {} | ||
| } | ||
| ] |
File renamed without changes.
File renamed without changes.
86 changes: 86 additions & 0 deletions
86
...teLogin-flow=passwordless-case=should_fail_if_webauthn_login_is_invalid-type=browser.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,86 @@ | ||
| { | ||
| "type": "browser", | ||
| "ui": { | ||
| "method": "POST", | ||
| "nodes": [ | ||
| { | ||
| "type": "input", | ||
| "group": "default", | ||
| "attributes": { | ||
| "name": "csrf_token", | ||
| "type": "hidden", | ||
| "required": true, | ||
| "disabled": false, | ||
| "node_type": "input" | ||
| }, | ||
| "messages": [], | ||
| "meta": {} | ||
| }, | ||
| { | ||
| "type": "script", | ||
| "group": "webauthn", | ||
| "attributes": { | ||
| "async": true, | ||
| "referrerpolicy": "no-referrer", | ||
| "crossorigin": "anonymous", | ||
| "integrity": "sha512-E3ctShTQEYTkfWrjztRCbP77lN7L0jJC2IOd6j8vqUKslvqhX/Ho3QxlQJIeTI78krzAWUQlDXd9JQ0PZlKhzQ==", | ||
| "type": "text/javascript", | ||
| "node_type": "script" | ||
| }, | ||
| "messages": [], | ||
| "meta": {} | ||
| }, | ||
| { | ||
| "type": "input", | ||
| "group": "webauthn", | ||
| "attributes": { | ||
| "name": "webauthn_login_trigger", | ||
| "type": "button", | ||
| "disabled": false, | ||
| "node_type": "input" | ||
| }, | ||
| "messages": [], | ||
| "meta": { | ||
| "label": { | ||
| "text": "Continue", | ||
| "type": "info" | ||
| } | ||
| } | ||
| }, | ||
| { | ||
| "type": "input", | ||
| "group": "webauthn", | ||
| "attributes": { | ||
| "name": "webauthn_login", | ||
| "type": "hidden", | ||
| "disabled": false, | ||
| "node_type": "input" | ||
| }, | ||
| "messages": [], | ||
| "meta": {} | ||
| }, | ||
| { | ||
| "type": "input", | ||
| "group": "default", | ||
| "attributes": { | ||
| "name": "identifier", | ||
| "type": "hidden", | ||
| "required": true, | ||
| "disabled": false, | ||
| "node_type": "input" | ||
| }, | ||
| "messages": [], | ||
| "meta": {} | ||
| } | ||
| ], | ||
| "messages": [ | ||
| { | ||
| "text": "Prepare your WebAuthn device (e.g. security key, biometrics scanner, ...) and press continue.", | ||
| "type": "info", | ||
| "context": {} | ||
| } | ||
| ] | ||
| }, | ||
| "refresh": false, | ||
| "requested_aal": "aal1" | ||
| } |
86 changes: 86 additions & 0 deletions
86
...mpleteLogin-flow=passwordless-case=should_fail_if_webauthn_login_is_invalid-type=spa.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,86 @@ | ||
| { | ||
| "type": "browser", | ||
| "ui": { | ||
| "method": "POST", | ||
| "nodes": [ | ||
| { | ||
| "type": "input", | ||
| "group": "default", | ||
| "attributes": { | ||
| "name": "csrf_token", | ||
| "type": "hidden", | ||
| "required": true, | ||
| "disabled": false, | ||
| "node_type": "input" | ||
| }, | ||
| "messages": [], | ||
| "meta": {} | ||
| }, | ||
| { | ||
| "type": "script", | ||
| "group": "webauthn", | ||
| "attributes": { | ||
| "async": true, | ||
| "referrerpolicy": "no-referrer", | ||
| "crossorigin": "anonymous", | ||
| "integrity": "sha512-E3ctShTQEYTkfWrjztRCbP77lN7L0jJC2IOd6j8vqUKslvqhX/Ho3QxlQJIeTI78krzAWUQlDXd9JQ0PZlKhzQ==", | ||
| "type": "text/javascript", | ||
| "node_type": "script" | ||
| }, | ||
| "messages": [], | ||
| "meta": {} | ||
| }, | ||
| { | ||
| "type": "input", | ||
| "group": "webauthn", | ||
| "attributes": { | ||
| "name": "webauthn_login_trigger", | ||
| "type": "button", | ||
| "disabled": false, | ||
| "node_type": "input" | ||
| }, | ||
| "messages": [], | ||
| "meta": { | ||
| "label": { | ||
| "text": "Continue", | ||
| "type": "info" | ||
| } | ||
| } | ||
| }, | ||
| { | ||
| "type": "input", | ||
| "group": "webauthn", | ||
| "attributes": { | ||
| "name": "webauthn_login", | ||
| "type": "hidden", | ||
| "disabled": false, | ||
| "node_type": "input" | ||
| }, | ||
| "messages": [], | ||
| "meta": {} | ||
| }, | ||
| { | ||
| "type": "input", | ||
| "group": "default", | ||
| "attributes": { | ||
| "name": "identifier", | ||
| "type": "hidden", | ||
| "required": true, | ||
| "disabled": false, | ||
| "node_type": "input" | ||
| }, | ||
| "messages": [], | ||
| "meta": {} | ||
| } | ||
| ], | ||
| "messages": [ | ||
| { | ||
| "text": "Prepare your WebAuthn device (e.g. security key, biometrics scanner, ...) and press continue.", | ||
| "type": "info", | ||
| "context": {} | ||
| } | ||
| ] | ||
| }, | ||
| "refresh": false, | ||
| "requested_aal": "aal1" | ||
| } |
55 changes: 55 additions & 0 deletions
55
.../webauthn/.snapshots/TestCompleteLogin-flow=passwordless-case=webauthn_button_exists.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,55 @@ | ||
| [ | ||
| { | ||
| "attributes": { | ||
| "disabled": false, | ||
| "name": "identifier", | ||
| "node_type": "input", | ||
| "required": true, | ||
| "type": "text", | ||
| "value": "" | ||
| }, | ||
| "group": "default", | ||
| "messages": [], | ||
| "meta": { | ||
| "label": { | ||
| "id": 1070004, | ||
| "text": "ID", | ||
| "type": "info" | ||
| } | ||
| }, | ||
| "type": "input" | ||
| }, | ||
| { | ||
| "attributes": { | ||
| "disabled": false, | ||
| "name": "method", | ||
| "node_type": "input", | ||
| "type": "submit", | ||
| "value": "webauthn" | ||
| }, | ||
| "group": "webauthn", | ||
| "messages": [], | ||
| "meta": { | ||
| "label": { | ||
| "context": {}, | ||
| "id": 1010001, | ||
| "text": "Sign in with security key", | ||
| "type": "info" | ||
| } | ||
| }, | ||
| "type": "input" | ||
| }, | ||
| { | ||
| "attributes": { | ||
| "disabled": false, | ||
| "name": "csrf_token", | ||
| "node_type": "input", | ||
| "required": true, | ||
| "type": "hidden" | ||
| }, | ||
| "group": "default", | ||
| "messages": [], | ||
| "meta": {}, | ||
| "type": "input" | ||
| } | ||
| ] |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,6 +1,10 @@ | ||
| package webauthn | ||
|
|
||
| import "github.com/ory/jsonschema/v3" | ||
| import ( | ||
| "github.com/ory/jsonschema/v3" | ||
| "github.com/pkg/errors" | ||
| ) | ||
|
|
||
| var ErrNotEnoughCredentials = &jsonschema.ValidationError{ | ||
| Message: "unable to remove this security key because it would lock you out of your account", InstancePtr: "#/webauthn_remove"} | ||
| var ErrNoCredentials = errors.New("required credentials not found") |
File renamed without changes.
11 changes: 11 additions & 0 deletions
11
selfservice/strategy/webauthn/fixtures/login/success/mfa/response.invalid.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,11 @@ | ||
| { | ||
| "id": "OE7fnoAeqaydiBM4-fQsbYMiO-EObq97WYb_c1HuX8Crbsb2777xs-upv7muXE8hOLkm6lQHC1ahegnzw-aIsQ", | ||
| "rawId": "OE7fnoAeqaydiBM4-fQsbYMiO-EObq97WYb_c1HuX8Crbsb2777xs-upv7muXE8hOLkm6lQHC1ahegnzw-aIsQ", | ||
| "type": "public-key", | ||
| "response": { | ||
| "authenticatorData": "SZYN5YgOjGh0NBcPZHZgW4_krrmihjLHmVzzuoMdl2MBAAAACg", | ||
| "clientDataJSON": "eyJ0eXBlIjoid2ViYXV0aG4uZ2V0IiwiY2hhbGxlbmdlIjoiV3paQ1dVTG1hcTV4VEFsQTBZWUhscW91YnFBaGUxQVdkTFJaQ0lCQU1jTSIsIm9yaWdpbiI6Imh0dHA6Ly9sb2NhbGhvc3Q6NDQ1NSIsImNyb3NzT3JpZ2luIjpmYWxzZX0", | ||
| "signature": "MEQCIHtRzzmLJrTPucNIRpPkstxR8oGJEzrm558LFe2jHTesAiAy2SGuBMDkdVdMJU4WJR2qFSpbAHQUvwG--Gv3vK8vDA", | ||
| "userHandle": "AAaaaaaaTD6lazfHs42XPg" | ||
| } | ||
| } |
File renamed without changes.
File renamed without changes.
File renamed without changes.
18 changes: 18 additions & 0 deletions
18
selfservice/strategy/webauthn/fixtures/login/success/mfa/v1/credentials.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,18 @@ | ||
| { | ||
| "credentials": [ | ||
| { | ||
| "id": "OE7fnoAeqaydiBM4+fQsbYMiO+EObq97WYb/c1HuX8Crbsb2777xs+upv7muXE8hOLkm6lQHC1ahegnzw+aIsQ==", | ||
| "public_key": "pQECAyYgASFYIPW2FsD6d/Lc7SU33hMhJUxafOA3JWpsLka8eKO+OPRkIlggkkPt8ocrupQOuvy+8HbQLSLiu899EdchJlWdMPE1tiw=", | ||
| "attestation_type": "none", | ||
| "authenticator": { | ||
| "aaguid": "AAAAAAAAAAAAAAAAAAAAAA==", | ||
| "sign_count": 3, | ||
| "clone_warning": false | ||
| }, | ||
| "display_name": "some-key", | ||
| "added_at": "2021-08-17T10:18:55Z", | ||
| "is_passwordless": false | ||
| } | ||
| ], | ||
| "user_handle": "9dG2o6S7RPeRYfT4d+/prQ==" | ||
| } |
10 changes: 10 additions & 0 deletions
10
selfservice/strategy/webauthn/fixtures/login/success/mfa/v1/internal_context.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,10 @@ | ||
| { | ||
| "webauthn_session_data": { | ||
| "challenge": "WzZCWULmaq5xTAlA0YYHlqoubqAhe1AWdLRZCIBAMcM", | ||
| "user_id": "9dG2o6S7RPeRYfT4d+/prQ==", | ||
| "allowed_credentials": [ | ||
| "OE7fnoAeqaydiBM4+fQsbYMiO+EObq97WYb/c1HuX8Crbsb2777xs+upv7muXE8hOLkm6lQHC1ahegnzw+aIsQ==" | ||
| ], | ||
| "userVerification": "" | ||
| } | ||
| } |
11 changes: 11 additions & 0 deletions
11
selfservice/strategy/webauthn/fixtures/login/success/mfa/v1/response.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,11 @@ | ||
| { | ||
| "id": "OE7fnoAeqaydiBM4-fQsbYMiO-EObq97WYb_c1HuX8Crbsb2777xs-upv7muXE8hOLkm6lQHC1ahegnzw-aIsQ", | ||
| "rawId": "OE7fnoAeqaydiBM4-fQsbYMiO-EObq97WYb_c1HuX8Crbsb2777xs-upv7muXE8hOLkm6lQHC1ahegnzw-aIsQ", | ||
| "type": "public-key", | ||
| "response": { | ||
| "authenticatorData": "SZYN5YgOjGh0NBcPZHZgW4_krrmihjLHmVzzuoMdl2MBAAAACg", | ||
| "clientDataJSON": "eyJ0eXBlIjoid2ViYXV0aG4uZ2V0IiwiY2hhbGxlbmdlIjoiV3paQ1dVTG1hcTV4VEFsQTBZWUhscW91YnFBaGUxQVdkTFJaQ0lCQU1jTSIsIm9yaWdpbiI6Imh0dHA6Ly9sb2NhbGhvc3Q6NDQ1NSIsImNyb3NzT3JpZ2luIjpmYWxzZX0", | ||
| "signature": "MEQCIHtRzzmLJrTPucNIRpPkstxR8oGJEzrm558LFe2jHTesAiAy2SGuBMDkdVdMJU4WJR2qFSpbAHQUvwG--Gv3vK8vDA", | ||
| "userHandle": "" | ||
| } | ||
| } |
18 changes: 18 additions & 0 deletions
18
selfservice/strategy/webauthn/fixtures/login/success/mfa/v1_handle/credentials.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,18 @@ | ||
| { | ||
| "credentials": [ | ||
| { | ||
| "id": "OE7fnoAeqaydiBM4+fQsbYMiO+EObq97WYb/c1HuX8Crbsb2777xs+upv7muXE8hOLkm6lQHC1ahegnzw+aIsQ==", | ||
| "public_key": "pQECAyYgASFYIPW2FsD6d/Lc7SU33hMhJUxafOA3JWpsLka8eKO+OPRkIlggkkPt8ocrupQOuvy+8HbQLSLiu899EdchJlWdMPE1tiw=", | ||
| "attestation_type": "none", | ||
| "authenticator": { | ||
| "aaguid": "AAAAAAAAAAAAAAAAAAAAAA==", | ||
| "sign_count": 3, | ||
| "clone_warning": false | ||
| }, | ||
| "display_name": "some-key", | ||
| "added_at": "2021-08-17T10:18:55Z", | ||
| "is_passwordless": false | ||
| } | ||
| ], | ||
| "user_handle": "RPwiyauuTD6lazfHs42XPg==" | ||
| } |
Oops, something went wrong.