151 lines
8.3 KiB
Ruby
151 lines
8.3 KiB
Ruby
|
# frozen_string_literal: true
|
|||
|
|
require 'cbor'
|
|||
|
|
require 'cose'
|
|||
|
|
|
|||
|
|
module Webauthn
|
|||
|
|
class SecurityKeyRegistrationService < SecurityKeyBaseValidationService
|
|||
|
|
|
|||
|
|
##
|
|||
|
|
# See https://w3c.github.io/webauthn/#sctn-registering-a-new-credential for
|
|||
|
|
# the registration steps followed here. Memoized methods are called in their
|
|||
|
|
# place in the step flow to make the process clearer.
|
|||
|
|
def register_second_factor_security_key
|
|||
|
|
# 4. Verify that the value of C.type is webauthn.create.
|
|||
|
|
validate_webauthn_type(::Webauthn::ACCEPTABLE_REGISTRATION_TYPE)
|
|||
|
|
|
|||
|
|
# 5. Verify that the value of C.challenge equals the base64url encoding of options.challenge.
|
|||
|
|
validate_challenge
|
|||
|
|
|
|||
|
|
# 6. Verify that the value of C.origin matches the Relying Party's origin.
|
|||
|
|
validate_origin
|
|||
|
|
|
|||
|
|
# 7. Verify that the value of C.tokenBinding.status matches the state of Token Binding for the TLS
|
|||
|
|
# connection over which the assertion was obtained. If Token Binding was used on that TLS connection,
|
|||
|
|
# also verify that C.tokenBinding.id matches the base64url encoding of the Token Binding ID for the connection.
|
|||
|
|
# Not using this right now.
|
|||
|
|
|
|||
|
|
# 8. Let hash be the result of computing a hash over response.clientDataJSON using SHA-256.
|
|||
|
|
client_data_hash
|
|||
|
|
|
|||
|
|
# 9. Perform CBOR decoding on the attestationObject field of the AuthenticatorAttestationResponse
|
|||
|
|
# structure to obtain the attestation statement format fmt, the authenticator data authData,
|
|||
|
|
# and the attestation statement attStmt.
|
|||
|
|
attestation
|
|||
|
|
|
|||
|
|
# 10. Verify that the rpIdHash in authData is the SHA-256 hash of the RP ID expected by the Relying Party.
|
|||
|
|
# check the SHA256 hash of the rpId is the same as the authData bytes 0..31
|
|||
|
|
validate_rp_id_hash
|
|||
|
|
|
|||
|
|
# 11. Verify that the User Present bit of the flags in authData is set.
|
|||
|
|
# https://blog.bigbinary.com/2011/07/20/ruby-pack-unpack.html
|
|||
|
|
#
|
|||
|
|
# bit 0 is the least significant bit - LSB first
|
|||
|
|
#
|
|||
|
|
# 12. If user verification is required for this registration, verify that
|
|||
|
|
# the User Verified bit of the flags in authData is set.
|
|||
|
|
validate_user_verification
|
|||
|
|
|
|||
|
|
# 13. Verify that the "alg" parameter in the credential public key in authData matches the alg
|
|||
|
|
# attribute of one of the items in options.pubKeyCredParams.
|
|||
|
|
# https://w3c.github.io/webauthn/#table-attestedCredentialData
|
|||
|
|
# See https://www.iana.org/assignments/cose/cose.xhtml#algorithms for supported algorithm
|
|||
|
|
# codes, -7 which Discourse uses is ECDSA w/ SHA-256
|
|||
|
|
credential_public_key, credential_public_key_bytes, credential_id = extract_public_key_and_credential_from_attestation(auth_data)
|
|||
|
|
raise(UnsupportedPublicKeyAlgorithmError, I18n.t('webauthn.validation.unsupported_public_key_algorithm_error')) if ::Webauthn::SUPPORTED_ALGORITHMS.exclude?(credential_public_key.alg)
|
|||
|
|
|
|||
|
|
# 14. Verify that the values of the client extension outputs in clientExtensionResults and the authenticator
|
|||
|
|
# extension outputs in the extensions in authData are as expected, considering the client extension input
|
|||
|
|
# values that were given in options.extensions. In particular, any extension identifier values in the
|
|||
|
|
# clientExtensionResults and the extensions in authData MUST also be present as extension identifier values
|
|||
|
|
# in options.extensions, i.e., no extensions are present that were not requested. In the general case, the
|
|||
|
|
# meaning of "are as expected" is specific to the Relying Party and which extensions are in use.
|
|||
|
|
# Not using this right now.
|
|||
|
|
|
|||
|
|
# 15. Determine the attestation statement format by performing a USASCII case-sensitive match on fmt against the
|
|||
|
|
# set of supported WebAuthn Attestation Statement Format Identifier values. An up-to-date list of registered
|
|||
|
|
# WebAuthn Attestation Statement Format Identifier values is maintained in the IANA registry of the same
|
|||
|
|
# name [WebAuthn-Registries].
|
|||
|
|
# 16. Verify that attStmt is a correct attestation statement, conveying a valid attestation signature,
|
|||
|
|
# by using the attestation statement format fmt’s verification procedure given attStmt, authData and hash.
|
|||
|
|
if ::Webauthn::VALID_ATTESTATION_FORMATS.exclude?(attestation['fmt']) || attestation['fmt'] != 'none'
|
|||
|
|
raise(UnsupportedAttestationFormatError, I18n.t('webauthn.validation.unsupported_attestation_format_error'))
|
|||
|
|
end
|
|||
|
|
|
|||
|
|
#==================================================
|
|||
|
|
# ONLY APPLIES IF fmt !== none, this is all to do with
|
|||
|
|
# verifying attestation. May want to come back to this at
|
|||
|
|
# some point for additional security.
|
|||
|
|
#==================================================
|
|||
|
|
#
|
|||
|
|
# 17. If validation is successful, obtain a list of acceptable trust anchors (attestation root certificates or
|
|||
|
|
# ECDAA-Issuer public keys) for that attestation type and attestation statement format fmt, from a trusted
|
|||
|
|
# source or from policy. For example, the FIDO Metadata Service [FIDOMetadataService] provides one way
|
|||
|
|
# to obtain such information, using the aaguid in the attestedCredentialData in authData.
|
|||
|
|
#
|
|||
|
|
# 18. Assess the attestation trustworthiness using the outputs of the verification procedure in step 16, as follows:
|
|||
|
|
# If no attestation was provided, verify that None attestation is acceptable under Relying Party policy.
|
|||
|
|
#==================================================
|
|||
|
|
|
|||
|
|
# 19. Check that the credentialId is not yet registered to any other user. If registration
|
|||
|
|
# is requested for a credential that is already registered to a different user,
|
|||
|
|
# the Relying Party SHOULD fail this registration ceremony, or it MAY decide to accept
|
|||
|
|
# the registration, e.g. while deleting the older registration.
|
|||
|
|
encoded_credential_id = Base64.strict_encode64(credential_id)
|
|||
|
|
endcoded_public_key = Base64.strict_encode64(credential_public_key_bytes)
|
|||
|
|
raise(CredentialIdInUseError, I18n.t('webauthn.validation.credential_id_in_use_error')) if UserSecurityKey.exists?(credential_id: encoded_credential_id)
|
|||
|
|
|
|||
|
|
# 20. If the attestation statement attStmt verified successfully and is found to be trustworthy,
|
|||
|
|
# then register the new credential with the account that was denoted in options.user, by
|
|||
|
|
# associating it with the credentialId and credentialPublicKey in the attestedCredentialData
|
|||
|
|
# in authData, as appropriate for the Relying Party's system.
|
|||
|
|
UserSecurityKey.create(
|
|||
|
|
user: @current_user,
|
|||
|
|
credential_id: encoded_credential_id,
|
|||
|
|
public_key: endcoded_public_key,
|
|||
|
|
name: @params[:name],
|
|||
|
|
factor_type: UserSecurityKey.factor_types[:second_factor]
|
|||
|
|
)
|
|||
|
|
rescue CBOR::UnpackError, CBOR::TypeError, CBOR::MalformedFormatError, CBOR::StackError
|
|||
|
|
raise MalformedAttestationError, I18n.t('webauthn.validation.malformed_attestation_error')
|
|||
|
|
end
|
|||
|
|
|
|||
|
|
private
|
|||
|
|
|
|||
|
|
def attestation
|
|||
|
|
@attestation ||= CBOR.decode(Base64.decode64(@params[:attestation]))
|
|||
|
|
end
|
|||
|
|
|
|||
|
|
def auth_data
|
|||
|
|
@auth_data ||= attestation['authData']
|
|||
|
|
end
|
|||
|
|
|
|||
|
|
def extract_public_key_and_credential_from_attestation(auth_data)
|
|||
|
|
# see https://w3c.github.io/webauthn/#authenticator-data for lengths
|
|||
|
|
# of authdata for extraction
|
|||
|
|
rp_id_length = 32
|
|||
|
|
flags_length = 1
|
|||
|
|
sign_count_length = 4
|
|||
|
|
|
|||
|
|
attested_credential_data_start_position = rp_id_length + flags_length + sign_count_length # 37
|
|||
|
|
attested_credential_data_length = auth_data.size - attested_credential_data_start_position
|
|||
|
|
attested_credential_data = auth_data[
|
|||
|
|
attested_credential_data_start_position..(attested_credential_data_start_position + attested_credential_data_length - 1)
|
|||
|
|
]
|
|||
|
|
|
|||
|
|
# see https://w3c.github.io/webauthn/#attested-credential-data for lengths
|
|||
|
|
# of data for extraction
|
|||
|
|
aa_guid = attested_credential_data[0..15]
|
|||
|
|
credential_id_length = attested_credential_data[16..17].unpack("n*")[0]
|
|||
|
|
credential_id = attested_credential_data[18..(18 + credential_id_length - 1)]
|
|||
|
|
|
|||
|
|
public_key_start_position = 18 + credential_id_length
|
|||
|
|
public_key_bytes = attested_credential_data[
|
|||
|
|
public_key_start_position..(public_key_start_position + attested_credential_data.size - 1)
|
|||
|
|
]
|
|||
|
|
public_key = COSE::Key.deserialize(public_key_bytes)
|
|||
|
|
|
|||
|
|
[public_key, public_key_bytes, credential_id]
|
|||
|
|
end
|
|||
|
|
end
|
|||
|
|
end
|