|
| 1 | +import AuthenticationServices |
| 2 | +import Foundation |
| 3 | + |
| 4 | +@available(iOS 16.6, *) |
| 5 | +@objc(PasskeyModule) |
| 6 | +class PasskeyModule: NSObject { |
| 7 | + |
| 8 | + @objc static func requiresMainQueueSetup() -> Bool { |
| 9 | + return true |
| 10 | + } |
| 11 | + |
| 12 | + @objc func createPasskey(_ requestJson: String, resolve: @escaping RCTPromiseResolveBlock, reject: @escaping RCTPromiseRejectBlock) { |
| 13 | + guard #available(iOS 16.6, *) else { |
| 14 | + reject("PASSKEY_NOT_AVAILABLE", "Passkeys require iOS 16.6 or later", nil) |
| 15 | + return |
| 16 | + } |
| 17 | + |
| 18 | + guard let data = requestJson.data(using: .utf8), |
| 19 | + let json = try? JSONSerialization.jsonObject(with: data) as? [String: Any] else { |
| 20 | + reject("PASSKEY_FAILED", "Invalid request JSON", nil) |
| 21 | + return |
| 22 | + } |
| 23 | + |
| 24 | + guard let rp = json["rp"] as? [String: Any], |
| 25 | + let rpId = rp["id"] as? String, |
| 26 | + let challengeStr = json["challenge"] as? String, |
| 27 | + let challengeData = Data(base64URLEncoded: challengeStr), |
| 28 | + let user = json["user"] as? [String: Any], |
| 29 | + let userName = user["name"] as? String, |
| 30 | + let userIdStr = user["id"] as? String, |
| 31 | + let userId = Data(base64URLEncoded: userIdStr) else { |
| 32 | + reject("PASSKEY_FAILED", "Missing required fields: rp.id, challenge, user.id, user.name", nil) |
| 33 | + return |
| 34 | + } |
| 35 | + |
| 36 | + let provider = ASAuthorizationPlatformPublicKeyCredentialProvider(relyingPartyIdentifier: rpId) |
| 37 | + let request = provider.createCredentialRegistrationRequest(challenge: challengeData, name: userName, userID: userId) |
| 38 | + |
| 39 | + let delegate = AuthorizationDelegate { credential in |
| 40 | + guard let registration = credential as? ASAuthorizationPlatformPublicKeyCredentialRegistration else { |
| 41 | + reject("PASSKEY_FAILED", "Unexpected credential type", nil) |
| 42 | + return |
| 43 | + } |
| 44 | + let result: [String: Any] = [ |
| 45 | + "id": registration.credentialID.base64URLEncodedString(), |
| 46 | + "rawId": registration.credentialID.base64URLEncodedString(), |
| 47 | + "type": "public-key", |
| 48 | + "response": [ |
| 49 | + "clientDataJSON": registration.rawClientDataJSON.base64URLEncodedString(), |
| 50 | + "attestationObject": (registration.rawAttestationObject ?? Data()).base64URLEncodedString() |
| 51 | + ], |
| 52 | + "authenticatorAttachment": "platform" |
| 53 | + ] |
| 54 | + if let jsonData = try? JSONSerialization.data(withJSONObject: result), |
| 55 | + let jsonString = String(data: jsonData, encoding: .utf8) { |
| 56 | + resolve(jsonString) |
| 57 | + } else { |
| 58 | + reject("PASSKEY_FAILED", "Failed to serialize credential response", nil) |
| 59 | + } |
| 60 | + } onError: { error in |
| 61 | + if let authError = error as? ASAuthorizationError, authError.code == .canceled { |
| 62 | + reject("USER_CANCELLED", "User cancelled passkey creation", error) |
| 63 | + } else { |
| 64 | + reject("PASSKEY_FAILED", error.localizedDescription, error) |
| 65 | + } |
| 66 | + } |
| 67 | + |
| 68 | + let controller = ASAuthorizationController(authorizationRequests: [request]) |
| 69 | + controller.delegate = delegate |
| 70 | + controller.presentationContextProvider = delegate |
| 71 | + objc_setAssociatedObject(controller, "delegate", delegate, .OBJC_ASSOCIATION_RETAIN_NONATOMIC) |
| 72 | + controller.performRequests() |
| 73 | + } |
| 74 | + |
| 75 | + @objc func getPasskey(_ requestJson: String, resolve: @escaping RCTPromiseResolveBlock, reject: @escaping RCTPromiseRejectBlock) { |
| 76 | + guard #available(iOS 16.6, *) else { |
| 77 | + reject("PASSKEY_NOT_AVAILABLE", "Passkeys require iOS 16.6 or later", nil) |
| 78 | + return |
| 79 | + } |
| 80 | + |
| 81 | + guard let data = requestJson.data(using: .utf8), |
| 82 | + let json = try? JSONSerialization.jsonObject(with: data) as? [String: Any] else { |
| 83 | + reject("PASSKEY_FAILED", "Invalid request JSON", nil) |
| 84 | + return |
| 85 | + } |
| 86 | + |
| 87 | + guard let challengeStr = json["challenge"] as? String, |
| 88 | + let challengeData = Data(base64URLEncoded: challengeStr) else { |
| 89 | + reject("PASSKEY_FAILED", "Missing required 'challenge' field", nil) |
| 90 | + return |
| 91 | + } |
| 92 | + |
| 93 | + let rpId = json["rpId"] as? String ?? "" |
| 94 | + let provider = ASAuthorizationPlatformPublicKeyCredentialProvider(relyingPartyIdentifier: rpId) |
| 95 | + let assertionRequest = provider.createCredentialAssertionRequest(challenge: challengeData) |
| 96 | + |
| 97 | + if let allowCredentials = json["allowCredentials"] as? [[String: Any]] { |
| 98 | + assertionRequest.allowedCredentials = allowCredentials.compactMap { cred in |
| 99 | + guard let idStr = cred["id"] as? String, |
| 100 | + let idData = Data(base64URLEncoded: idStr) else { return nil } |
| 101 | + return ASAuthorizationPlatformPublicKeyCredentialDescriptor(credentialID: idData) |
| 102 | + } |
| 103 | + } |
| 104 | + |
| 105 | + let delegate = AuthorizationDelegate { credential in |
| 106 | + guard let assertion = credential as? ASAuthorizationPlatformPublicKeyCredentialAssertion else { |
| 107 | + reject("PASSKEY_FAILED", "Unexpected credential type", nil) |
| 108 | + return |
| 109 | + } |
| 110 | + var response: [String: Any] = [ |
| 111 | + "clientDataJSON": assertion.rawClientDataJSON.base64URLEncodedString(), |
| 112 | + "authenticatorData": assertion.rawAuthenticatorData.base64URLEncodedString(), |
| 113 | + "signature": assertion.signature.base64URLEncodedString() |
| 114 | + ] |
| 115 | + if let userHandle = assertion.userID { |
| 116 | + response["userHandle"] = userHandle.base64URLEncodedString() |
| 117 | + } |
| 118 | + let result: [String: Any] = [ |
| 119 | + "id": assertion.credentialID.base64URLEncodedString(), |
| 120 | + "rawId": assertion.credentialID.base64URLEncodedString(), |
| 121 | + "type": "public-key", |
| 122 | + "response": response, |
| 123 | + "authenticatorAttachment": "platform" |
| 124 | + ] |
| 125 | + if let jsonData = try? JSONSerialization.data(withJSONObject: result), |
| 126 | + let jsonString = String(data: jsonData, encoding: .utf8) { |
| 127 | + resolve(jsonString) |
| 128 | + } else { |
| 129 | + reject("PASSKEY_FAILED", "Failed to serialize credential response", nil) |
| 130 | + } |
| 131 | + } onError: { error in |
| 132 | + if let authError = error as? ASAuthorizationError, authError.code == .canceled { |
| 133 | + reject("USER_CANCELLED", "User cancelled passkey assertion", error) |
| 134 | + } else { |
| 135 | + reject("PASSKEY_FAILED", error.localizedDescription, error) |
| 136 | + } |
| 137 | + } |
| 138 | + |
| 139 | + let controller = ASAuthorizationController(authorizationRequests: [assertionRequest]) |
| 140 | + controller.delegate = delegate |
| 141 | + controller.presentationContextProvider = delegate |
| 142 | + objc_setAssociatedObject(controller, "delegate", delegate, .OBJC_ASSOCIATION_RETAIN_NONATOMIC) |
| 143 | + controller.performRequests() |
| 144 | + } |
| 145 | +} |
| 146 | + |
| 147 | +// MARK: - Authorization Delegate |
| 148 | + |
| 149 | +@available(iOS 16.6, *) |
| 150 | +private class AuthorizationDelegate: NSObject, ASAuthorizationControllerDelegate, ASAuthorizationControllerPresentationContextProviding { |
| 151 | + private let onSuccess: (ASAuthorizationCredential) -> Void |
| 152 | + private let onError: (Error) -> Void |
| 153 | + |
| 154 | + init(onSuccess: @escaping (ASAuthorizationCredential) -> Void, onError: @escaping (Error) -> Void) { |
| 155 | + self.onSuccess = onSuccess |
| 156 | + self.onError = onError |
| 157 | + super.init() |
| 158 | + } |
| 159 | + |
| 160 | + func authorizationController(controller: ASAuthorizationController, didCompleteWithAuthorization authorization: ASAuthorization) { |
| 161 | + onSuccess(authorization.credential) |
| 162 | + } |
| 163 | + |
| 164 | + func authorizationController(controller: ASAuthorizationController, didCompleteWithError error: Error) { |
| 165 | + onError(error) |
| 166 | + } |
| 167 | + |
| 168 | + func presentationAnchor(for controller: ASAuthorizationController) -> ASPresentationAnchor { |
| 169 | + return UIApplication.shared.connectedScenes |
| 170 | + .compactMap { $0 as? UIWindowScene } |
| 171 | + .flatMap { $0.windows } |
| 172 | + .first { $0.isKeyWindow } ?? ASPresentationAnchor() |
| 173 | + } |
| 174 | +} |
| 175 | + |
| 176 | +// MARK: - Data Base64URL Extensions |
| 177 | + |
| 178 | +private extension Data { |
| 179 | + init?(base64URLEncoded string: String) { |
| 180 | + var base64 = string |
| 181 | + .replacingOccurrences(of: "-", with: "+") |
| 182 | + .replacingOccurrences(of: "_", with: "/") |
| 183 | + let remainder = base64.count % 4 |
| 184 | + if remainder > 0 { |
| 185 | + base64.append(String(repeating: "=", count: 4 - remainder)) |
| 186 | + } |
| 187 | + self.init(base64Encoded: base64) |
| 188 | + } |
| 189 | + |
| 190 | + func base64URLEncodedString() -> String { |
| 191 | + return self.base64EncodedString() |
| 192 | + .replacingOccurrences(of: "+", with: "-") |
| 193 | + .replacingOccurrences(of: "/", with: "_") |
| 194 | + .replacingOccurrences(of: "=", with: "") |
| 195 | + } |
| 196 | +} |
0 commit comments