io.vertx.ext.auth.webauthn.impl.attestation

Class AndroidKeyAttestation

java.lang.Object

io.vertx.ext.auth.webauthn.impl.attestation.AndroidKeyAttestation

All Implemented Interfaces:

Attestation

public class AndroidKeyAttestation
extends Object
implements Attestation

Implementation of the "android-key" attestation check.

Android KeyStore is a key management container, that defends key material from extraction. Depending on the device, it can be either software or hardware backed.

For example if authenticator required to be FIPS/CC/PCI/FIDO compliant, then it needs to be running on the device with FIPS/CC/PCI/FIDO compliant hardware, and it can be found getting KeyStore attestation.

Author:

Constructor Summary

Constructors

Constructor and Description
AndroidKeyAttestation()

Method Summary

Modifier and Type	Method and Description
String	fmt() The unique identifier for the attestation
void	validate(WebAuthnOptions options, MetaData metadata, byte[] clientDataJSON, JsonObject attestation, AuthData authData) The implementation of the Attestation verification.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface io.vertx.ext.auth.webauthn.impl.attestation.Attestation

hash, parseX5c, verifySignature

Constructor Detail

AndroidKeyAttestation

public AndroidKeyAttestation()

Method Detail

fmt

public String fmt()

Description copied from interface: Attestation

The unique identifier for the attestation

Specified by:

fmt in interface Attestation

Returns:

String

validate

public void validate(WebAuthnOptions options,
                     MetaData metadata,
                     byte[] clientDataJSON,
                     JsonObject attestation,
                     AuthData authData)
              throws AttestationException

Description copied from interface: Attestation

The implementation of the Attestation verification.

Specified by:

validate in interface Attestation

Parameters:

options - the runtime configuration options

metadata - the Metadata holder to perform MDS queries

clientDataJSON - the binary client data json

attestation - the JSON representation of the attestation

authData - the authenticator data

Throws:

AttestationException - if the validation fails