File: browser_bound_key_store.h

package info (click to toggle)
chromium 139.0.7258.127-2
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid
  • size: 6,122,156 kB
  • sloc: cpp: 35,100,771; ansic: 7,163,530; javascript: 4,103,002; python: 1,436,920; asm: 946,517; xml: 746,709; pascal: 187,653; perl: 88,691; sh: 88,436; objc: 79,953; sql: 51,488; cs: 44,583; fortran: 24,137; makefile: 22,147; tcl: 15,277; php: 13,980; yacc: 8,984; ruby: 7,485; awk: 3,720; lisp: 3,096; lex: 1,327; ada: 727; jsp: 228; sed: 36
file content (60 lines) | stat: -rw-r--r-- 2,248 bytes parent folder | download | duplicates (3)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
// Copyright 2024 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef COMPONENTS_PAYMENTS_CONTENT_BROWSER_BINDING_BROWSER_BOUND_KEY_STORE_H_
#define COMPONENTS_PAYMENTS_CONTENT_BROWSER_BINDING_BROWSER_BOUND_KEY_STORE_H_

#include <memory>
#include <vector>

#include "base/memory/ref_counted.h"
#include "base/memory/scoped_refptr.h"
#include "device/fido/public_key_credential_params.h"

namespace payments {

class BrowserBoundKey;
class BrowserBoundKeyStore;

// Get a platform specific instance of the BrowserBoundKeyStore. This function
// has per-platform implementations.
scoped_refptr<BrowserBoundKeyStore> GetBrowserBoundKeyStoreInstance();

// An interface for creating storing and retrieving browser bound keys.
class BrowserBoundKeyStore : public base::RefCounted<BrowserBoundKeyStore> {
 public:
  using CredentialInfoList =
      std::vector<device::PublicKeyCredentialParams::CredentialInfo>;
  BrowserBoundKeyStore() = default;
  BrowserBoundKeyStore(const BrowserBoundKeyStore&) = delete;
  BrowserBoundKeyStore& operator=(const BrowserBoundKeyStore&) = delete;

  // Get (or create if not present) a browser bound key for the given
  // credential_id.
  // `allowed_credentials` is a vector of COSE Algorithm identifiers that
  // restricts the algorithms of the browser bound key when creating a new key.
  virtual std::unique_ptr<BrowserBoundKey>
  GetOrCreateBrowserBoundKeyForCredentialId(
      const std::vector<uint8_t>& credential_id,
      const CredentialInfoList& allowed_credentials) = 0;

  // Deletes the browser bound key, given its identifier.
  // `bbk_id` is the identifier of the BrowserBoundKey. Use `std::move()` when
  // appropriate to avoid copying the `bbk_id` vector.
  virtual void DeleteBrowserBoundKey(std::vector<uint8_t> bbk_id) = 0;

  // Returns whether hardware keys are supported by this implementation on the
  // current device.
  virtual bool GetDeviceSupportsHardwareKeys() = 0;

 protected:
  virtual ~BrowserBoundKeyStore() = default;

 private:
  friend base::RefCounted<BrowserBoundKeyStore>;
};

}  // namespace payments

#endif  // COMPONENTS_PAYMENTS_CONTENT_BROWSER_BINDING_BROWSER_BOUND_KEY_STORE_H_