Merge branch 'master' into secp256k1-support-new

.changeset/brown-kings-promise.md

@@ -0,0 +1,5 @@
+---
+"@near-js/biometric-ed25519": patch
+---
+
+Add isDeviceSupported method

packages/biometric-ed25519/package.json

@@ -22,6 +22,7 @@
     "asn1-parser": "1.1.8",
     "borsh": "1.0.0",
     "buffer": "6.0.3",
+    "cbor-js": "^0.1.0",
     "fido2-lib": "3.4.1"
   },
   "devDependencies": {

packages/biometric-ed25519/src/fido2.ts

@@ -1,5 +1,6 @@
 import base64 from '@hexagon/base64';
 import { Fido2Lib } from 'fido2-lib';
+import cbor from 'cbor-js';
 
 export class Fido2 {
     f2l: Fido2Lib;
@@ -58,4 +59,12 @@ export class Fido2 {
             status: 'ok',
         };
     }
+
+    async checkAlg(res, exp): Promise<any> {
+        const result = await this.f2l.attestationResult(res, exp);
+        const cosePublicKey = result.authnrData.get('credentialPublicKeyCose');
+        const decodedKey = cbor.decode(cosePublicKey);
+        const algKey = 3; // The key for the "alg" field in COSE
+        return decodedKey[algKey];
+    }
 }

packages/biometric-ed25519/src/index.ts

@@ -68,6 +68,16 @@ export const createKey = async (username: string): Promise<KeyPair> => {
 
             const sanitizedResponse = sanitizeCreateKeyResponse(res);
 
+            const alg = await f2l.checkAlg(sanitizedResponse, {
+                challenge: challengeMakeCred.challenge,
+                origin,
+                factor: 'either'
+            });
+
+            if (+alg === -257) {
+                throw new Error('Unsupported device');
+            }
+
             const result = await f2l.attestation({
                 clientAttestationResponse: sanitizedResponse,
                 origin,
@@ -130,3 +140,13 @@ export const getKeys = async (username: string): Promise<[KeyPair, KeyPair]> =>
 export const isPassKeyAvailable = async (): Promise<boolean> => {
     return window.PublicKeyCredential?.isUserVerifyingPlatformAuthenticatorAvailable?.() || false;
 };
+
+// To check if current device supports biometric ed25519 authentication
+export const isDeviceSupported = async (): Promise<boolean> => {
+    try {
+        await createKey('test-device');
+        return true;
+    } catch (e) {
+        return false;
+    }
+};