io.vertx.ext.auth.webauthn.impl.metadata

Class MetaData

java.lang.Object

io.vertx.ext.auth.webauthn.impl.metadata.MetaData

public final class MetaData
extends Object

This class will hold the Fido2 Metadata Records.

Field Summary

Fields

Modifier and Type	Field and Description
static int	ALG_SIGN_ED25519_EDDSA_SHA256_RAW
static int	ALG_SIGN_RSASSA_PKCSV15_SHA1_RAW
static int	ALG_SIGN_RSASSA_PKCSV15_SHA256_RAW
static int	ALG_SIGN_RSASSA_PKCSV15_SHA384_RAW
static int	ALG_SIGN_RSASSA_PKCSV15_SHA512_RAW
static int	ALG_SIGN_RSASSA_PSS_SHA256_DER
static int	ALG_SIGN_RSASSA_PSS_SHA256_RAW
static int	ALG_SIGN_RSASSA_PSS_SHA384_RAW
static int	ALG_SIGN_RSASSA_PSS_SHA512_RAW
static int	ALG_SIGN_SECP256K1_ECDSA_SHA256_DER
static int	ALG_SIGN_SECP256K1_ECDSA_SHA256_RAW
static int	ALG_SIGN_SECP256R1_ECDSA_SHA256_DER
static int	ALG_SIGN_SECP256R1_ECDSA_SHA256_RAW A mapping of ALG_SIGN hex values (as unsigned shorts) to COSE curve values.
static int	ALG_SIGN_SECP384R1_ECDSA_SHA384_RAW
static int	ALG_SIGN_SECP521R1_ECDSA_SHA512_RAW
static int	ATTESTATION_ATTCA
static int	ATTESTATION_BASIC_FULL A map of ATTESTATION hex values (as unsigned shorts).
static int	ATTESTATION_BASIC_SURROGATE
static int	ATTESTATION_ECDAA

Constructor Summary

Constructors

Constructor and Description
MetaData(Vertx vertx, WebAuthnOptions options)

Method Summary

Modifier and Type	Method and Description
MetaData	clear()
MetaData	loadMetadata(MetaDataEntry entry)
int	size()
PublicKeyCredential	toJOSEAlg(int fido2AlgSign)
JsonObject	verifyMetadata(String aaguid, PublicKeyCredential alg, List<X509Certificate> x5c)
JsonObject	verifyMetadata(String aaguid, PublicKeyCredential alg, List<X509Certificate> x5c, boolean includesRoot)
JsonObject	verifyMetadata(String aaguid, PublicKeyCredential alg, List<X509Certificate> x5c, X509Certificate rootCert)
JsonObject	verifyMetadata(String aaguid, PublicKeyCredential alg, List<X509Certificate> x5c, X509Certificate rootCert, boolean includesRoot)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

ALG_SIGN_SECP256R1_ECDSA_SHA256_RAW

public static final int ALG_SIGN_SECP256R1_ECDSA_SHA256_RAW

A mapping of ALG_SIGN hex values (as unsigned shorts) to COSE curve values. Keys should appear as values in a metadata statement's `authenticationAlgorithm` property.

From https://fidoalliance.org/specs/fido-v2.0-rd-20180702/fido-registry-v2.0-rd-20180702.html FIDO Registry of Predefined Values - 3.6.1 Authentication Algorithms

See Also:

Constant Field Values

ALG_SIGN_SECP256R1_ECDSA_SHA256_DER

public static final int ALG_SIGN_SECP256R1_ECDSA_SHA256_DER

See Also:

Constant Field Values

ALG_SIGN_RSASSA_PSS_SHA256_RAW

public static final int ALG_SIGN_RSASSA_PSS_SHA256_RAW

See Also:

Constant Field Values

ALG_SIGN_RSASSA_PSS_SHA256_DER

public static final int ALG_SIGN_RSASSA_PSS_SHA256_DER

See Also:

Constant Field Values

ALG_SIGN_SECP256K1_ECDSA_SHA256_RAW

public static final int ALG_SIGN_SECP256K1_ECDSA_SHA256_RAW

See Also:

Constant Field Values

ALG_SIGN_SECP256K1_ECDSA_SHA256_DER

public static final int ALG_SIGN_SECP256K1_ECDSA_SHA256_DER

See Also:

Constant Field Values

ALG_SIGN_RSASSA_PSS_SHA384_RAW

public static final int ALG_SIGN_RSASSA_PSS_SHA384_RAW

See Also:

Constant Field Values

ALG_SIGN_RSASSA_PSS_SHA512_RAW

public static final int ALG_SIGN_RSASSA_PSS_SHA512_RAW

See Also:

Constant Field Values

ALG_SIGN_RSASSA_PKCSV15_SHA256_RAW

public static final int ALG_SIGN_RSASSA_PKCSV15_SHA256_RAW

See Also:

Constant Field Values

ALG_SIGN_RSASSA_PKCSV15_SHA384_RAW

public static final int ALG_SIGN_RSASSA_PKCSV15_SHA384_RAW

See Also:

Constant Field Values

ALG_SIGN_RSASSA_PKCSV15_SHA512_RAW

public static final int ALG_SIGN_RSASSA_PKCSV15_SHA512_RAW

See Also:

Constant Field Values

ALG_SIGN_RSASSA_PKCSV15_SHA1_RAW

public static final int ALG_SIGN_RSASSA_PKCSV15_SHA1_RAW

See Also:

Constant Field Values

ALG_SIGN_SECP384R1_ECDSA_SHA384_RAW

public static final int ALG_SIGN_SECP384R1_ECDSA_SHA384_RAW

See Also:

Constant Field Values

ALG_SIGN_SECP521R1_ECDSA_SHA512_RAW

public static final int ALG_SIGN_SECP521R1_ECDSA_SHA512_RAW

See Also:

Constant Field Values

ALG_SIGN_ED25519_EDDSA_SHA256_RAW

public static final int ALG_SIGN_ED25519_EDDSA_SHA256_RAW

See Also:

Constant Field Values

ATTESTATION_BASIC_FULL

public static final int ATTESTATION_BASIC_FULL

A map of ATTESTATION hex values (as unsigned shorts). Values should appear in a metadata statement's `attestationTypes` property.

From https://fidoalliance.org/specs/fido-v2.0-rd-20180702/fido-registry-v2.0-rd-20180702.html FIDO Registry of Predefined Values - 3.6.3 Authenticator Attestation Types

See Also:

Constant Field Values

ATTESTATION_BASIC_SURROGATE

public static final int ATTESTATION_BASIC_SURROGATE

See Also:

Constant Field Values

ATTESTATION_ECDAA

public static final int ATTESTATION_ECDAA

See Also:

Constant Field Values

ATTESTATION_ATTCA

public static final int ATTESTATION_ATTCA

See Also:

Constant Field Values

Constructor Detail

MetaData

public MetaData(Vertx vertx,
                WebAuthnOptions options)

Method Detail

clear

public MetaData clear()

size

public int size()

toJOSEAlg

public PublicKeyCredential toJOSEAlg(int fido2AlgSign)

verifyMetadata

public JsonObject verifyMetadata(String aaguid,
                                 PublicKeyCredential alg,
                                 List<X509Certificate> x5c)
                          throws MetaDataException,
                                 AttestationException,
                                 NoSuchProviderException,
                                 NoSuchAlgorithmException,
                                 InvalidKeyException,
                                 SignatureException,
                                 CertificateException

Throws:

MetaDataException

AttestationException

NoSuchProviderException

NoSuchAlgorithmException

InvalidKeyException

SignatureException

CertificateException

verifyMetadata

public JsonObject verifyMetadata(String aaguid,
                                 PublicKeyCredential alg,
                                 List<X509Certificate> x5c,
                                 boolean includesRoot)
                          throws MetaDataException,
                                 AttestationException,
                                 NoSuchProviderException,
                                 NoSuchAlgorithmException,
                                 InvalidKeyException,
                                 SignatureException,
                                 CertificateException

Throws:

MetaDataException

AttestationException

NoSuchProviderException

NoSuchAlgorithmException

InvalidKeyException

SignatureException

CertificateException

verifyMetadata

public JsonObject verifyMetadata(String aaguid,
                                 PublicKeyCredential alg,
                                 List<X509Certificate> x5c,
                                 X509Certificate rootCert)
                          throws MetaDataException,
                                 AttestationException,
                                 NoSuchProviderException,
                                 NoSuchAlgorithmException,
                                 InvalidKeyException,
                                 SignatureException,
                                 CertificateException

Throws:

MetaDataException

AttestationException

NoSuchProviderException

NoSuchAlgorithmException

InvalidKeyException

SignatureException

CertificateException

verifyMetadata

public JsonObject verifyMetadata(String aaguid,
                                 PublicKeyCredential alg,
                                 List<X509Certificate> x5c,
                                 X509Certificate rootCert,
                                 boolean includesRoot)
                          throws MetaDataException,
                                 AttestationException,
                                 NoSuchProviderException,
                                 NoSuchAlgorithmException,
                                 InvalidKeyException,
                                 SignatureException,
                                 CertificateException

Throws:

MetaDataException

AttestationException

NoSuchProviderException

NoSuchAlgorithmException

InvalidKeyException

SignatureException

CertificateException

loadMetadata

public MetaData loadMetadata(MetaDataEntry entry)