mozilla
/
gecko-dev
зеркало из https://github.com/mozilla/gecko-dev.git
1
0
Форкнуть 0
Код Задачи Пакеты Проекты Релизы Вики Активность
gecko-dev/dom/webauthn/tests/test_webauthn_isplatformaut...

53 строки
1.9 KiB
HTML
Исходник Обычный вид История

Bug 1406456 - WebAuthn WebIDL Updates for WD-07 (part 1) r=keeler,qdot This covers these renames: * In PublicKeyCredentialParameters, algorithm => alg * MakeCredentialOptions => MakePublicKeyCredentialOptions * PublicKeyCredentialEntity => PublicKeyCredentialRpEntity * Attachment => AuthenticatorAttachment It sets a default excludeList and allowList for the make / get options. It adds the method isPlatformAuthenticatorAvailable which is incomplete and not callable, to be completed in Bug 1406468. Adds type PublicKeyCredentialRpEntity. Adds "userId" to AuthenticatorAssertionResponse. Adds "id" as a buffer source to PublicKeyCredentialUserEntity and as a DOMString to PublicKeyCredentialRpEntity, refactoring out the "id" field from the parent PublicKeyCredentialEntity. It also adds a simple enforcement per spec 4.4.3 "User Account Parameters for Credential Generation" that the new user ID buffer, if set, be no more than 64 bytes long. I mostly added it here so I could adjust the tests all at once in this commit. MozReview-Commit-ID: IHUdGVoWocq --HG-- extra : rebase_source : bc1793f74700b2785d2bf2099c0dba068f717a59
2017-10-07 02:10:57 +03:00
<!DOCTYPE html>
<meta charset=utf-8>
<head>
Bug 1406468 - Web Authentication - Implement isUserVerifyingPlatformAuthenticatorAvailable() method r=jcj,smaug Summary: We currently implement no platform authenticators, so this would always resolve to false. For those cases, the spec recommends a resolve timeout on the order of 10 minutes to avoid fingerprinting. A simple solution is thus to never resolve the promise, otherwise we'd have to track every single call to this method along with a promise and timer to resolve it after exactly X minutes. A Relying Party has to deal with a non-response in a timely fashion, so we can keep this as-is (and not resolve) even when we support platform authenticators but they're not available, or a user rejects a website's request to use them. Reviewers: jcj, smaug Reviewed By: jcj, smaug Bug #: 1406468 Differential Revision: https://phabricator.services.mozilla.com/D217
2017-11-14 13:44:46 +03:00
<title>Test for W3C Web Authentication isUserVerifyingPlatformAuthenticatorAvailable</title>
Bug 1406456 - WebAuthn WebIDL Updates for WD-07 (part 1) r=keeler,qdot This covers these renames: * In PublicKeyCredentialParameters, algorithm => alg * MakeCredentialOptions => MakePublicKeyCredentialOptions * PublicKeyCredentialEntity => PublicKeyCredentialRpEntity * Attachment => AuthenticatorAttachment It sets a default excludeList and allowList for the make / get options. It adds the method isPlatformAuthenticatorAvailable which is incomplete and not callable, to be completed in Bug 1406468. Adds type PublicKeyCredentialRpEntity. Adds "userId" to AuthenticatorAssertionResponse. Adds "id" as a buffer source to PublicKeyCredentialUserEntity and as a DOMString to PublicKeyCredentialRpEntity, refactoring out the "id" field from the parent PublicKeyCredentialEntity. It also adds a simple enforcement per spec 4.4.3 "User Account Parameters for Credential Generation" that the new user ID buffer, if set, be no more than 64 bytes long. I mostly added it here so I could adjust the tests all at once in this commit. MozReview-Commit-ID: IHUdGVoWocq --HG-- extra : rebase_source : bc1793f74700b2785d2bf2099c0dba068f717a59
2017-10-07 02:10:57 +03:00
<script type="text/javascript" src="/tests/SimpleTest/SimpleTest.js"></script>
<script type="text/javascript" src="u2futil.js"></script>
<script type="text/javascript" src="pkijs/common.js"></script>
<script type="text/javascript" src="pkijs/asn1.js"></script>
<script type="text/javascript" src="pkijs/x509_schema.js"></script>
<script type="text/javascript" src="pkijs/x509_simpl.js"></script>
<link rel="stylesheet" type="text/css" href="/tests/SimpleTest/test.css" />
</head>
<body>
Bug 1406468 - Web Authentication - Implement isUserVerifyingPlatformAuthenticatorAvailable() method r=jcj,smaug Summary: We currently implement no platform authenticators, so this would always resolve to false. For those cases, the spec recommends a resolve timeout on the order of 10 minutes to avoid fingerprinting. A simple solution is thus to never resolve the promise, otherwise we'd have to track every single call to this method along with a promise and timer to resolve it after exactly X minutes. A Relying Party has to deal with a non-response in a timely fashion, so we can keep this as-is (and not resolve) even when we support platform authenticators but they're not available, or a user rejects a website's request to use them. Reviewers: jcj, smaug Reviewed By: jcj, smaug Bug #: 1406468 Differential Revision: https://phabricator.services.mozilla.com/D217
2017-11-14 13:44:46 +03:00
<h1>Test for W3C Web Authentication isUserVerifyingPlatformAuthenticatorAvailable</h1>
Bug 1406456 - WebAuthn WebIDL Updates for WD-07 (part 1) r=keeler,qdot This covers these renames: * In PublicKeyCredentialParameters, algorithm => alg * MakeCredentialOptions => MakePublicKeyCredentialOptions * PublicKeyCredentialEntity => PublicKeyCredentialRpEntity * Attachment => AuthenticatorAttachment It sets a default excludeList and allowList for the make / get options. It adds the method isPlatformAuthenticatorAvailable which is incomplete and not callable, to be completed in Bug 1406468. Adds type PublicKeyCredentialRpEntity. Adds "userId" to AuthenticatorAssertionResponse. Adds "id" as a buffer source to PublicKeyCredentialUserEntity and as a DOMString to PublicKeyCredentialRpEntity, refactoring out the "id" field from the parent PublicKeyCredentialEntity. It also adds a simple enforcement per spec 4.4.3 "User Account Parameters for Credential Generation" that the new user ID buffer, if set, be no more than 64 bytes long. I mostly added it here so I could adjust the tests all at once in this commit. MozReview-Commit-ID: IHUdGVoWocq --HG-- extra : rebase_source : bc1793f74700b2785d2bf2099c0dba068f717a59
2017-10-07 02:10:57 +03:00
<a target="_blank" href="https://bugzilla.mozilla.org/show_bug.cgi?id=1309284">Mozilla Bug 1309284</a>
<script class="testbody" type="text/javascript">
"use strict";
// Execute the full-scope test
SimpleTest.waitForExplicitFinish();
SpecialPowers.pushPrefEnv({"set": [["security.webauth.webauthn", true],
["security.webauth.webauthn_enable_softtoken", true],
["security.webauth.webauthn_enable_usbtoken", false]]},
function() {
Bug 1406468 - Web Authentication - Implement isUserVerifyingPlatformAuthenticatorAvailable() method r=jcj,smaug Summary: We currently implement no platform authenticators, so this would always resolve to false. For those cases, the spec recommends a resolve timeout on the order of 10 minutes to avoid fingerprinting. A simple solution is thus to never resolve the promise, otherwise we'd have to track every single call to this method along with a promise and timer to resolve it after exactly X minutes. A Relying Party has to deal with a non-response in a timely fashion, so we can keep this as-is (and not resolve) even when we support platform authenticators but they're not available, or a user rejects a website's request to use them. Reviewers: jcj, smaug Reviewed By: jcj, smaug Bug #: 1406468 Differential Revision: https://phabricator.services.mozilla.com/D217
2017-11-14 13:44:46 +03:00
// This test ensures that isUserVerifyingPlatformAuthenticatorAvailable()
// is a callable method, but we currently can't test that it works in an
// automated way. If it resolves to false, per spec, we SHOULD wait
// ~10 minutes before resolving.
let p1 = PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable()
Bug 1406456 - WebAuthn WebIDL Updates for WD-07 (part 1) r=keeler,qdot This covers these renames: * In PublicKeyCredentialParameters, algorithm => alg * MakeCredentialOptions => MakePublicKeyCredentialOptions * PublicKeyCredentialEntity => PublicKeyCredentialRpEntity * Attachment => AuthenticatorAttachment It sets a default excludeList and allowList for the make / get options. It adds the method isPlatformAuthenticatorAvailable which is incomplete and not callable, to be completed in Bug 1406468. Adds type PublicKeyCredentialRpEntity. Adds "userId" to AuthenticatorAssertionResponse. Adds "id" as a buffer source to PublicKeyCredentialUserEntity and as a DOMString to PublicKeyCredentialRpEntity, refactoring out the "id" field from the parent PublicKeyCredentialEntity. It also adds a simple enforcement per spec 4.4.3 "User Account Parameters for Credential Generation" that the new user ID buffer, if set, be no more than 64 bytes long. I mostly added it here so I could adjust the tests all at once in this commit. MozReview-Commit-ID: IHUdGVoWocq --HG-- extra : rebase_source : bc1793f74700b2785d2bf2099c0dba068f717a59
2017-10-07 02:10:57 +03:00
.then(function(aResult) {
Bug 1406468 - Web Authentication - Implement isUserVerifyingPlatformAuthenticatorAvailable() method r=jcj,smaug Summary: We currently implement no platform authenticators, so this would always resolve to false. For those cases, the spec recommends a resolve timeout on the order of 10 minutes to avoid fingerprinting. A simple solution is thus to never resolve the promise, otherwise we'd have to track every single call to this method along with a promise and timer to resolve it after exactly X minutes. A Relying Party has to deal with a non-response in a timely fashion, so we can keep this as-is (and not resolve) even when we support platform authenticators but they're not available, or a user rejects a website's request to use them. Reviewers: jcj, smaug Reviewed By: jcj, smaug Bug #: 1406468 Differential Revision: https://phabricator.services.mozilla.com/D217
2017-11-14 13:44:46 +03:00
ok(false, "We shouldn't get here.");
Bug 1406456 - WebAuthn WebIDL Updates for WD-07 (part 1) r=keeler,qdot This covers these renames: * In PublicKeyCredentialParameters, algorithm => alg * MakeCredentialOptions => MakePublicKeyCredentialOptions * PublicKeyCredentialEntity => PublicKeyCredentialRpEntity * Attachment => AuthenticatorAttachment It sets a default excludeList and allowList for the make / get options. It adds the method isPlatformAuthenticatorAvailable which is incomplete and not callable, to be completed in Bug 1406468. Adds type PublicKeyCredentialRpEntity. Adds "userId" to AuthenticatorAssertionResponse. Adds "id" as a buffer source to PublicKeyCredentialUserEntity and as a DOMString to PublicKeyCredentialRpEntity, refactoring out the "id" field from the parent PublicKeyCredentialEntity. It also adds a simple enforcement per spec 4.4.3 "User Account Parameters for Credential Generation" that the new user ID buffer, if set, be no more than 64 bytes long. I mostly added it here so I could adjust the tests all at once in this commit. MozReview-Commit-ID: IHUdGVoWocq --HG-- extra : rebase_source : bc1793f74700b2785d2bf2099c0dba068f717a59
2017-10-07 02:10:57 +03:00
})
.catch(function(aProblem) {
Bug 1406468 - Web Authentication - Implement isUserVerifyingPlatformAuthenticatorAvailable() method r=jcj,smaug Summary: We currently implement no platform authenticators, so this would always resolve to false. For those cases, the spec recommends a resolve timeout on the order of 10 minutes to avoid fingerprinting. A simple solution is thus to never resolve the promise, otherwise we'd have to track every single call to this method along with a promise and timer to resolve it after exactly X minutes. A Relying Party has to deal with a non-response in a timely fashion, so we can keep this as-is (and not resolve) even when we support platform authenticators but they're not available, or a user rejects a website's request to use them. Reviewers: jcj, smaug Reviewed By: jcj, smaug Bug #: 1406468 Differential Revision: https://phabricator.services.mozilla.com/D217
2017-11-14 13:44:46 +03:00
ok(false, "Problem encountered: " + aProblem);
});
// Finish on the next tick.
let p2 = Promise.resolve();
Promise.race([p1, p2]).then(function() {
ok(true, "isUserVerifyingPlatformAuthenticatorAvailable() is callable");
Bug 1406456 - WebAuthn WebIDL Updates for WD-07 (part 1) r=keeler,qdot This covers these renames: * In PublicKeyCredentialParameters, algorithm => alg * MakeCredentialOptions => MakePublicKeyCredentialOptions * PublicKeyCredentialEntity => PublicKeyCredentialRpEntity * Attachment => AuthenticatorAttachment It sets a default excludeList and allowList for the make / get options. It adds the method isPlatformAuthenticatorAvailable which is incomplete and not callable, to be completed in Bug 1406468. Adds type PublicKeyCredentialRpEntity. Adds "userId" to AuthenticatorAssertionResponse. Adds "id" as a buffer source to PublicKeyCredentialUserEntity and as a DOMString to PublicKeyCredentialRpEntity, refactoring out the "id" field from the parent PublicKeyCredentialEntity. It also adds a simple enforcement per spec 4.4.3 "User Account Parameters for Credential Generation" that the new user ID buffer, if set, be no more than 64 bytes long. I mostly added it here so I could adjust the tests all at once in this commit. MozReview-Commit-ID: IHUdGVoWocq --HG-- extra : rebase_source : bc1793f74700b2785d2bf2099c0dba068f717a59
2017-10-07 02:10:57 +03:00
SimpleTest.finish();
Bug 1406468 - Web Authentication - Implement isUserVerifyingPlatformAuthenticatorAvailable() method r=jcj,smaug Summary: We currently implement no platform authenticators, so this would always resolve to false. For those cases, the spec recommends a resolve timeout on the order of 10 minutes to avoid fingerprinting. A simple solution is thus to never resolve the promise, otherwise we'd have to track every single call to this method along with a promise and timer to resolve it after exactly X minutes. A Relying Party has to deal with a non-response in a timely fashion, so we can keep this as-is (and not resolve) even when we support platform authenticators but they're not available, or a user rejects a website's request to use them. Reviewers: jcj, smaug Reviewed By: jcj, smaug Bug #: 1406468 Differential Revision: https://phabricator.services.mozilla.com/D217
2017-11-14 13:44:46 +03:00
});
Bug 1406456 - WebAuthn WebIDL Updates for WD-07 (part 1) r=keeler,qdot This covers these renames: * In PublicKeyCredentialParameters, algorithm => alg * MakeCredentialOptions => MakePublicKeyCredentialOptions * PublicKeyCredentialEntity => PublicKeyCredentialRpEntity * Attachment => AuthenticatorAttachment It sets a default excludeList and allowList for the make / get options. It adds the method isPlatformAuthenticatorAvailable which is incomplete and not callable, to be completed in Bug 1406468. Adds type PublicKeyCredentialRpEntity. Adds "userId" to AuthenticatorAssertionResponse. Adds "id" as a buffer source to PublicKeyCredentialUserEntity and as a DOMString to PublicKeyCredentialRpEntity, refactoring out the "id" field from the parent PublicKeyCredentialEntity. It also adds a simple enforcement per spec 4.4.3 "User Account Parameters for Credential Generation" that the new user ID buffer, if set, be no more than 64 bytes long. I mostly added it here so I could adjust the tests all at once in this commit. MozReview-Commit-ID: IHUdGVoWocq --HG-- extra : rebase_source : bc1793f74700b2785d2bf2099c0dba068f717a59
2017-10-07 02:10:57 +03:00
});
</script>
</body>
</html>