1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
|
<!DOCTYPE html>
<meta charset="utf-8">
<title>Signal unknown credential tests</title>
<meta name="timeout" content="long">
<script src="/resources/testharness.js"></script>
<script src="/resources/testharnessreport.js"></script>
<script src="/resources/testdriver.js"></script>
<script src="/resources/testdriver-vendor.js"></script>
<script src=helpers.js></script>
<body></body>
<script>
"use strict";
const authenticatorOptions = {
protocol: "ctap2_1",
hasResidentKey: true,
isUserVerified: true,
hasUserVerification: true,
};
const userId = Uint8Array.from([1, 2, 3, 4]);
function createDiscoverableCredential() {
return createCredential({
options: {
publicKey: {
authenticatorSelection: {
residentKey: "required",
},
user: {
id: userId,
name: "reimu",
displayName: "Reimu Hakurei",
}
},
},
});
}
virtualAuthenticatorPromiseTest(async t => {
return promise_rejects_dom(t, "SecurityError", PublicKeyCredential.signalUnknownCredential({
rpId: "umbrella-corporation.example.com",
credentialId: base64urlEncode([1, 2, 3, 4]),
}));
}, authenticatorOptions, "signalUnknownCredential fails with SecurityError for invalid RP IDs");
virtualAuthenticatorPromiseTest(async t => {
return promise_rejects_js(t, TypeError, PublicKeyCredential.signalUnknownCredential({
rpId: window.location.hostname,
credentialId: "Not base 64 url",
}));
}, authenticatorOptions, "signalUnknownCredential fails with TypeError for invalid base64url");
virtualAuthenticatorPromiseTest(async t => {
const credential = await createDiscoverableCredential();
await assertCredential(credential);
await PublicKeyCredential.signalUnknownCredential({
rpId: window.location.hostname,
credentialId: base64urlEncode([1, 2, 3, 4]),
});
await assertCredential(credential);
}, authenticatorOptions, "signalUnknownCredential does not remove a credential that does not match the ID");
virtualAuthenticatorPromiseTest(async t => {
const credential = await createDiscoverableCredential();
await assertCredential(credential);
await PublicKeyCredential.signalUnknownCredential({
rpId: window.location.hostname,
credentialId: credential.id,
});
return promise_rejects_dom(t, "NotAllowedError", assertCredential(credential));
}, authenticatorOptions, "signalUnknownCredential removes a credential that matches the ID");
</script>
|
