[EC-598] feat: fully working register and assert flow

apps/browser/src/background/runtime.background.ts

@@ -210,6 +210,8 @@ export default class RuntimeBackground {
         break;
       case "fido2RegisterCredentialRequest":
         return await this.main.fido2Service.createCredential(msg.data);
+      case "fido2GetCredentialRequest":
+        return await this.main.fido2Service.assertCredential(msg.data);
     }
     return undefined;
   }

apps/browser/src/browser/webauthn-utils.ts

@@ -1,5 +1,7 @@
 import { Fido2Utils } from "@bitwarden/common/abstractions/fido2/fido2-utils";
 import {
+  CredentialAssertParams,
+  CredentialAssertResult,
   CredentialRegistrationParams,
   CredentialRegistrationResult,
 } from "@bitwarden/common/abstractions/fido2/fido2.service.abstraction";
@@ -62,4 +64,38 @@ export class WebauthnUtils {
       getClientExtensionResults: () => ({}),
     };
   }
+
+  static mapCredentialRequestOptions(
+    options: CredentialRequestOptions,
+    origin: string
+  ): CredentialAssertParams {
+    const keyOptions = options.publicKey;
+
+    if (keyOptions == undefined) {
+      throw new Error("Public-key options not found");
+    }
+
+    return {
+      origin,
+      allowedCredentialIds:
+        keyOptions.allowCredentials?.map((c) => Fido2Utils.bufferToString(c.id)) ?? [],
+      challenge: Fido2Utils.bufferToString(keyOptions.challenge),
+      rpId: keyOptions.rpId,
+    };
+  }
+
+  static mapCredentialAssertResult(result: CredentialAssertResult): PublicKeyCredential {
+    return {
+      id: result.credentialId,
+      rawId: Fido2Utils.stringToBuffer(result.credentialId),
+      type: "public-key",
+      response: {
+        authenticatorData: Fido2Utils.stringToBuffer(result.authenticatorData),
+        clientDataJSON: Fido2Utils.stringToBuffer(result.clientDataJSON),
+        signature: Fido2Utils.stringToBuffer(result.signature),
+        userHandle: Fido2Utils.stringToBuffer(result.userHandle),
+      } as AuthenticatorAssertionResponse,
+      getClientExtensionResults: () => ({}),
+    };
+  }
 }

apps/browser/src/content/webauthn/content-script.ts

@@ -29,5 +29,22 @@ messenger.addHandler(async (message) => {
     });
   }
 
+  if (message.type === MessageType.CredentialGetRequest) {
+    return new Promise((resolve, reject) => {
+      chrome.runtime.sendMessage(
+        {
+          command: "fido2GetCredentialRequest",
+          data: message.data,
+        },
+        (response) => {
+          resolve({
+            type: MessageType.CredentialGetResponse,
+            result: response,
+          });
+        }
+      );
+    });
+  }
+
   return undefined;
 });

apps/browser/src/content/webauthn/messaging/message.ts

@@ -1,4 +1,6 @@
 import {
+  CredentialAssertParams,
+  CredentialAssertResult,
   CredentialRegistrationParams,
   CredentialRegistrationResult,
 } from "@bitwarden/common/abstractions/fido2/fido2.service.abstraction";
@@ -25,10 +27,12 @@ export type CredentialCreationResponse = {
 
 export type CredentialGetRequest = {
   type: MessageType.CredentialGetRequest;
+  data: CredentialAssertParams;
 };
 
 export type CredentialGetResponse = {
   type: MessageType.CredentialGetResponse;
+  result?: CredentialAssertResult;
 };
 
 export type AbortRequest = {

apps/browser/src/content/webauthn/page-script.ts

@@ -27,5 +27,14 @@ navigator.credentials.create = async (options?: CredentialCreationOptions): Prom
 };
 
 navigator.credentials.get = async (options?: CredentialRequestOptions): Promise<Credential> => {
-  return await browserCredentials.get(options);
+  const response = await messenger.request({
+    type: MessageType.CredentialGetRequest,
+    data: WebauthnUtils.mapCredentialRequestOptions(options, window.location.origin),
+  });
+
+  if (response.type !== MessageType.CredentialGetResponse) {
+    return await browserCredentials.get(options);
+  }
+
+  return WebauthnUtils.mapCredentialAssertResult(response.result);
 };