io.vertx.ext.auth.webauthn.impl.attestation

Class AndroidSafetynetAttestation

java.lang.Object

io.vertx.ext.auth.webauthn.impl.attestation.AndroidSafetynetAttestation

All Implemented Interfaces:

Attestation

public class AndroidSafetynetAttestation
extends Object
implements Attestation

Implementation of the "android-safetynet" attestation check.

SafetyNet is a set of Google Play Services API’s, that are helpful for defence against security threats on Android, such as device tampering, bad URLs, malicious apps, and fake user accounts. Main solutions that SafetyNet provides are device attestation, safe browsing, re-captcha and app check APIs.

Author:

Constructor Summary

Constructors

Constructor and Description
AndroidSafetynetAttestation()

Method Summary

Modifier and Type	Method and Description
String	fmt() The unique identifier for the attestation
void	validate(WebAuthnOptions options, MetaData metadata, byte[] clientDataJSON, JsonObject attestation, AuthData authData) The implementation of the Attestation verification.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface io.vertx.ext.auth.webauthn.impl.attestation.Attestation

hash, parseX5c, verifySignature

Constructor Detail

AndroidSafetynetAttestation

public AndroidSafetynetAttestation()

Method Detail

fmt

public String fmt()

Description copied from interface: Attestation

The unique identifier for the attestation

Specified by:

fmt in interface Attestation

Returns:

String

validate

public void validate(WebAuthnOptions options,
                     MetaData metadata,
                     byte[] clientDataJSON,
                     JsonObject attestation,
                     AuthData authData)
              throws AttestationException

Description copied from interface: Attestation

The implementation of the Attestation verification.

Specified by:

validate in interface Attestation

Parameters:

options - the runtime configuration options

metadata - the Metadata holder to perform MDS queries

clientDataJSON - the binary client data json

attestation - the JSON representation of the attestation

authData - the authenticator data

Throws:

AttestationException - if the validation fails