[PM-5731] feat: add new credential confirmaiton

src/Core/Abstractions/IFido2UserInterface.cs

@@ -34,6 +34,37 @@ namespace Bit.Core.Abstractions
         public bool UserVerified { get; set; }
     }
 
+    public struct Fido2ConfirmNewCredentialParams
+    {
+        ///<summary>
+        /// The name of the credential.
+        ///</summary>
+        public string CredentialName { get; set; }
+
+        ///<summary>
+        /// The name of the user.
+        ///</summary>
+        public string UserName { get; set; }
+
+        /// <summary>
+        /// Whether or not the user must be verified before completing the operation.
+        /// </summary>
+        public bool UserVerification { get; set; }
+    }
+
+    public struct Fido2ConfirmNewCredentialResult
+    {
+        /// <summary>
+        /// The name of the user.
+        /// </summary>
+        public string CipherId { get; set; }
+
+        /// <summary>
+        /// Whether or not the user was verified.
+        /// </summary>
+        public bool UserVerified { get; set; }
+    }
+
     public interface IFido2UserInterface
     {
         /// <summary>
@@ -49,5 +80,12 @@ namespace Bit.Core.Abstractions
         /// <param name="existingCipherIds">The IDs of the excluded credentials.</param>
         /// <returns>When user has confirmed the message</returns>
         Task InformExcludedCredential(string[] existingCipherIds);
+
+        /// <summary>
+        /// Ask the user to confirm the creation of a new credential.
+        /// </summary>
+        /// <param name="confirmNewCredentialParams">The parameters to use when asking the user to confirm the creation of a new credential.</param>
+        /// <returns>The ID of the cipher where the new credential should be saved.</returns>
+        Task<Fido2ConfirmNewCredentialResult> ConfirmNewCredentialAsync(Fido2ConfirmNewCredentialParams confirmNewCredentialParams);
     }
 }

src/Core/Services/Fido2AuthenticatorService.cs

@@ -48,7 +48,20 @@ namespace Bit.Core.Services
                 throw new NotAllowedError();
             }
 
-            throw new NotImplementedException();
+            var response = await _userInterface.ConfirmNewCredentialAsync(new Fido2ConfirmNewCredentialParams {
+                CredentialName = makeCredentialParams.RpEntity.Name,
+                UserName = makeCredentialParams.UserEntity.Name,
+                UserVerification = makeCredentialParams.RequireUserVerification
+            });
+
+            return new Fido2AuthenticatorMakeCredentialResult
+            {
+                CredentialId = GuidToRawFormat(Guid.NewGuid().ToString()),
+                AttestationObject = Array.Empty<byte>(),
+                AuthData = Array.Empty<byte>(),
+                PublicKey = Array.Empty<byte>(),
+                PublicKeyAlgorithm = (int) Fido2AlgorithmIdentifier.ES256,
+            };
         }
         
         public async Task<Fido2AuthenticatorGetAssertionResult> GetAssertionAsync(Fido2AuthenticatorGetAssertionParams assertionParams)

src/Core/Utilities/Fido2/Fido2AuthenticatorMakeCredentialParams.cs

@@ -2,44 +2,44 @@ namespace Bit.Core.Utilities.Fido2
 {
     public class Fido2AuthenticatorMakeCredentialParams
     {
-        ///<summary>
-        /// The caller’s RP ID, as determined by the user agent and the client. */
-        ///</summary>
-        public string RpId { get; set; }
+        /// <summary>
+        /// The Relying Party's PublicKeyCredentialRpEntity.
+        /// </summary>
+        public PublicKeyCredentialRpEntity RpEntity { get; set; }
 
-        ///<summary>
-        /// The Relying Party's PublicKeyCredentialRpEntity. */
-        ///</summary>
+        /// <summary>
+        /// The Relying Party's PublicKeyCredentialRpEntity.
+        /// </summary>
         public PublicKeyCredentialUserEntity UserEntity { get; set; }
 
-        ///<summary>
-        /// The hash of the serialized client data, provided by the client. */
-        ///</summary>
+        /// <summary>
+        /// The hash of the serialized client data, provided by the client.
+        /// </summary>
         public byte[] Hash { get; set; }
 
-        ///<summary>
-        /// A sequence of pairs of PublicKeyCredentialType and public key algorithms (COSEAlgorithmIdentifier) requested by the Relying Party. This sequence is ordered from most preferred to least preferred. The authenticator makes a best-effort to create the most preferred credential that it can. */
-        ///</summary>
+        /// <summary>
+        /// A sequence of pairs of PublicKeyCredentialType and public key algorithms (COSEAlgorithmIdentifier) requested by the Relying Party. This sequence is ordered from most preferred to least preferred. The authenticator makes a best-effort to create the most preferred credential that it can.
+        /// </summary>
         public PublicKeyCredentialAlgorithmDescriptor[] CredTypesAndPubKeyAlgs { get; set; }
 
-        ///<summary>
+        /// <summary>
         ///An OPTIONAL list of PublicKeyCredentialDescriptor objects provided by the Relying Party with the intention that, if any of these are known to the authenticator, it SHOULD NOT create a new credential. excludeCredentialDescriptorList contains a list of known credentials.
-        ///</summary>
+        /// </summary>
         public PublicKeyCredentialDescriptor[] ExcludeCredentialDescriptorList { get; set; }
 
-        ///<summary>
+        /// <summary>
         /// The effective resident key requirement for credential creation, a Boolean value determined by the client. Resident is synonymous with discoverable. */
-        ///</summary>
+        /// </summary>
         public bool RequireResidentKey { get; set; }
 
-        ///<summary>
-        /// The effective user verification requirement for assertion, a Boolean value provided by the client. */
-        ///</summary>
+        /// <summary>
+        /// The effective user verification requirement for assertion, a Boolean value provided by the client.
+        /// </summary>
         public bool RequireUserVerification { get; set; }
         
-        ///<summary>
-        /// CTAP2 authenticators support setting this to false, but we only support the WebAuthn authenticator model which does not have that option. */
-        ///</summary>
+        /// <summary>
+        /// CTAP2 authenticators support setting this to false, but we only support the WebAuthn authenticator model which does not have that option.
+        /// </summary>
         // public bool RequireUserPresence { get; set; } // Always required
 
         /// <summary>

src/Core/Utilities/Fido2/PublicKeyCredentialRpEntity.cs

@@ -0,0 +1,9 @@
+namespace Bit.Core.Utilities.Fido2 
+{
+    public class PublicKeyCredentialRpEntity 
+    {
+        public string Id { get; set; }
+
+        public string Name { get; set; }
+    }
+}