mirror of
https://github.com/hanzoai/sign.git
synced 2026-10-21 01:21:51 +00:00
zooqueen
fb4e3df0e3
The product is branded Hanzo eSign (esign.hanzo.ai, repo hanzoai/esign). Rename all workspace packages @hanzo/sign-* → @hanzo/esign-* (1052 files) and align docker/Dockerfile turbo --scope/--filter to the actual remix package name @hanzo/esign (was a pre-existing mismatch with -remix that broke the build). Protected deps (@hanzo/insights, @hanzo/logo) untouched.
79 lines
2.1 KiB
TypeScript
79 lines
2.1 KiB
TypeScript
import type { Passkey } from '@prisma/client';
|
|
import { generateAuthenticationOptions } from '@simplewebauthn/server';
|
|
import type { AuthenticatorTransportFuture } from '@simplewebauthn/server';
|
|
import { isoBase64URL } from '@simplewebauthn/server/helpers';
|
|
import { DateTime } from 'luxon';
|
|
|
|
import { prisma } from '@hanzo/esign-prisma';
|
|
|
|
import { AppError, AppErrorCode } from '../../errors/app-error';
|
|
import { getAuthenticatorOptions } from '../../utils/authenticator';
|
|
|
|
type CreatePasskeyAuthenticationOptions = {
|
|
userId: number;
|
|
|
|
/**
|
|
* The ID of the passkey to request authentication for.
|
|
*
|
|
* If not set, we allow the browser client to handle choosing.
|
|
*/
|
|
preferredPasskeyId?: string;
|
|
};
|
|
|
|
export const createPasskeyAuthenticationOptions = async ({
|
|
userId,
|
|
preferredPasskeyId,
|
|
}: CreatePasskeyAuthenticationOptions) => {
|
|
const { rpId, timeout } = getAuthenticatorOptions();
|
|
|
|
let preferredPasskey: Pick<Passkey, 'credentialId' | 'transports'> | null = null;
|
|
|
|
if (preferredPasskeyId) {
|
|
preferredPasskey = await prisma.passkey.findFirst({
|
|
where: {
|
|
userId,
|
|
id: preferredPasskeyId,
|
|
},
|
|
select: {
|
|
credentialId: true,
|
|
transports: true,
|
|
},
|
|
});
|
|
|
|
if (!preferredPasskey) {
|
|
throw new AppError(AppErrorCode.NOT_FOUND, {
|
|
message: 'Requested passkey not found',
|
|
});
|
|
}
|
|
}
|
|
|
|
const options = await generateAuthenticationOptions({
|
|
rpID: rpId,
|
|
userVerification: 'preferred',
|
|
timeout,
|
|
allowCredentials: preferredPasskey
|
|
? [
|
|
{
|
|
id: isoBase64URL.fromBuffer(preferredPasskey.credentialId),
|
|
// eslint-disable-next-line @typescript-eslint/consistent-type-assertions
|
|
transports: preferredPasskey.transports as AuthenticatorTransportFuture[],
|
|
},
|
|
]
|
|
: undefined,
|
|
});
|
|
|
|
const { secondaryId } = await prisma.verificationToken.create({
|
|
data: {
|
|
userId,
|
|
token: options.challenge,
|
|
expires: DateTime.now().plus({ minutes: 2 }).toJSDate(),
|
|
identifier: 'PASSKEY_CHALLENGE',
|
|
},
|
|
});
|
|
|
|
return {
|
|
tokenReference: secondaryId,
|
|
options,
|
|
};
|
|
};
|