1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
|
<!DOCTYPE html>
<meta charset="utf-8">
<title>WebAuthn uiMode: 'immediate' Tests</title>
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<script src="/resources/testdriver.js"></script>
<script src="/resources/testdriver-vendor.js"></script>
<script src=helpers.js></script>
<body></body>
<script>
"use strict";
// Test uiMode: 'immediate' with mediation: 'optional' (Success case with Resident Key).
virtualAuthenticatorPromiseTest(async t => {
const credential = await createCredential({
options: {
publicKey: {
authenticatorSelection: {
residentKey: "required",
requireResidentKey: true,
}
}
}
});
await test_driver.bless("activate immediate mode");
const assertion = await navigator.credentials.get({
publicKey: {
challenge: new Uint8Array(16),
rpId: window.location.hostname,
},
uiMode: "immediate",
});
assert_class_string(assertion, "PublicKeyCredential");
}, {
protocol: "ctap2",
hasResidentKey: true,
hasUserVerification: true,
isUserVerified: true,
transport: "internal",
}, "Immediate mediation (optional) with a resident credential");
// Test uiMode: 'immediate' with mediation: 'required' (Success case).
virtualAuthenticatorPromiseTest(async t => {
const credential = await createCredential({
options: {
publicKey: {
authenticatorSelection: {
residentKey: "required",
requireResidentKey: true,
}
}
}
});
await test_driver.bless("activate immediate mode");
const assertion = await navigator.credentials.get({
publicKey: {
challenge: new Uint8Array(16),
rpId: window.location.hostname,
},
uiMode: "immediate",
mediation: "required"
});
assert_class_string(assertion, "PublicKeyCredential");
}, {
protocol: "ctap2",
hasResidentKey: true,
hasUserVerification: true,
isUserVerified: true,
transport: "internal",
}, "Immediate mediation (required) with a resident credential");
// Test uiMode: 'immediate' failure when allowCredentials is provided.
virtualAuthenticatorPromiseTest(async t => {
const credential = await createCredential();
await test_driver.bless("activate immediate mode");
const promise = navigator.credentials.get({
publicKey: {
challenge: new Uint8Array(16),
rpId: window.location.hostname,
allowCredentials: [{
type: "public-key",
id: credential.rawId,
}],
},
uiMode: "immediate",
});
return promise_rejects_dom(t, "NotAllowedError", promise);
}, {
protocol: "ctap2",
hasResidentKey: true,
hasUserVerification: true,
isUserVerified: true,
transport: "internal",
}, "Immediate mediation fails if allowCredentials is not empty");
// Test uiMode: 'immediate' failure without user activation.
virtualAuthenticatorPromiseTest(async t => {
const credential = await createCredential();
const promise = navigator.credentials.get({
publicKey: {
challenge: new Uint8Array(16),
rpId: window.location.hostname,
},
uiMode: "immediate",
});
return promise_rejects_dom(t, "NotAllowedError", promise);
}, {
protocol: "ctap2",
hasResidentKey: true,
hasUserVerification: true,
isUserVerified: true,
transport: "internal",
}, "Immediate mediation fails without user activation");
// Test uiMode: 'immediate' when no credentials are available.
virtualAuthenticatorPromiseTest(async t => {
await test_driver.bless("activate immediate mode");
const promise = navigator.credentials.get({
publicKey: {
challenge: new Uint8Array(16),
rpId: window.location.hostname,
},
uiMode: "immediate",
mediation: "optional"
});
return promise_rejects_dom(t, "NotAllowedError", promise);
}, {
protocol: "ctap2",
hasResidentKey: true,
hasUserVerification: true,
transport: "internal",
}, "Immediate mediation (optional) with no credentials");
// Test uiMode: 'immediate' incompatibility with mediation: 'conditional'.
virtualAuthenticatorPromiseTest(async t => {
const promise = navigator.credentials.get({
publicKey: {
challenge: new Uint8Array(16),
rpId: window.location.hostname,
},
uiMode: "immediate",
mediation: "conditional"
});
return promise_rejects_dom(t, "NotSupportedError", promise);
}, {
protocol: "ctap2",
hasResidentKey: true,
hasUserVerification: true,
transport: "internal",
}, "Immediate mediation is incompatible with conditional mediation");
</script>
|
