zydronium/getnamingo-registry
1
0
Fork 0
mirror of https://github.com/getnamingo/registry.git synced 2025-05-17 18:09:22 +02:00
Code Issues Projects Releases Packages Wiki Activity

More updates about WebAuthn

Browse source
This commit is contained in:
Pinga 2023-11-18 12:40:37 +02:00
parent e7ddc2e997
commit 6466545c90
2 changed files with 40 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

41
cp/app/Controllers/ProfileController.php
View file

@ -5,9 +5,22 @@ namespace App\Controllers;
use Psr\Http\Message\ResponseInterface as Response; use Psr\Http\Message\ResponseInterface as Response;
use Psr\Http\Message\ServerRequestInterface as Request; use Psr\Http\Message\ServerRequestInterface as Request;
use Psr\Container\ContainerInterface; use Psr\Container\ContainerInterface;
use lbuchs\WebAuthn\WebAuthn;
class ProfileController extends Controller class ProfileController extends Controller
{ {
private $webAuthn;
public function __construct() {
$rpName = 'Namingo';
$rpId = envi('APP_DOMAIN');
$this->webAuthn = new Webauthn($rpName, $rpId);
// Additional configuration for Webauthn can go here
// Example: setting the public key credential parameters, user verification level, etc.
}
public function profile(Request $request, Response $response) public function profile(Request $request, Response $response)
{ {
$username = $_SESSION['auth_username']; $username = $_SESSION['auth_username'];
@ -30,9 +43,8 @@ class ProfileController extends Controller
public function getRegistrationChallenge(Request $request, Response $response) public function getRegistrationChallenge(Request $request, Response $response)
{ {
$user = $request->getAttribute('user'); // Assuming you have the user info $username = $_SESSION['auth_username'];
$username = $user->getUsername(); // Replace with your method to get the username $userEmail = $_SESSION['auth_email'];
$userEmail = $user->getEmail(); // Replace with your method to get the user's email
$challenge = $this->webAuthn->prepareChallengeForRegistration($username, $userEmail); $challenge = $this->webAuthn->prepareChallengeForRegistration($username, $userEmail);
$_SESSION['webauthn_challenge'] = $challenge; // Store the challenge in the session $_SESSION['webauthn_challenge'] = $challenge; // Store the challenge in the session
@ -49,8 +61,27 @@ class ProfileController extends Controller
$credential = $this->webAuthn->processCreate($data, $_SESSION['webauthn_challenge']); $credential = $this->webAuthn->processCreate($data, $_SESSION['webauthn_challenge']);
unset($_SESSION['webauthn_challenge']); unset($_SESSION['webauthn_challenge']);
// Store the credential data in the database $db = $this->container->get('db');
// $user->addWebAuthnCredential($credential);
try {
$db->insert(
'users_webauthn',
[
'user_id' => $_SESSION['auth_user_id'],
'credential_id' => $credential->getCredentialId(), // Binary data
'public_key' => $credential->getPublicKey(), // Text data
'attestation_object' => $credential->getAttestationObject(), // Binary data
'sign_count' => $credential->getSignCount() // Integer
]
);
} catch (IntegrityConstraintViolationException $e) {
// Handle the case where the insert operation violates a constraint
// For example, a duplicate credential_id
throw new \Exception('Could not store WebAuthn credentials: ' . $e->getMessage());
} catch (Error $e) {
// Handle other database errors
throw new \Exception('Database error: ' . $e->getMessage());
}
$response->getBody()->write(json_encode(['success' => true])); $response->getBody()->write(json_encode(['success' => true]));
return $response->withHeader('Content-Type', 'application/json'); return $response->withHeader('Content-Type', 'application/json');

3
cp/resources/views/admin/profile/profile.twig
View file

@ -193,8 +193,11 @@ document.addEventListener('DOMContentLoaded', function() {
.then(response => { .then(response => {
if(response.ok) { if(response.ok) {
// Handle successful registration, e.g., update the UI // Handle successful registration, e.g., update the UI
alert('Registration successful!');
window.location.reload();
} else { } else {
// Handle registration error // Handle registration error
alert('Registration failed: ' + (data.error || 'Unknown error'));
} }
}) })
.catch(error => { .catch(error => {