device/fido/u2f_sign.h

// Copyright 2017 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef DEVICE_FIDO_U2F_SIGN_H_
#define DEVICE_FIDO_U2F_SIGN_H_

#include <memory>
#include <string>
#include <vector>

#include "base/containers/flat_set.h"
#include "base/optional.h"
#include "device/fido/sign_response_data.h"
#include "device/fido/u2f_request.h"
#include "device/fido/u2f_transport_protocol.h"

namespace service_manager {
class Connector;
}

namespace device {

class U2fSign : public U2fRequest {
 public:
  using SignResponseCallback =
      base::OnceCallback<void(U2fReturnCode status_code,
                              base::Optional<SignResponseData> response_data)>;

  static std::unique_ptr<U2fRequest> TrySign(
      service_manager::Connector* connector,
      const base::flat_set<U2fTransportProtocol>& protocols,
      std::vector<std::vector<uint8_t>> registered_keys,
      std::vector<uint8_t> challenge_digest,
      std::vector<uint8_t> application_parameter,
      base::Optional<std::vector<uint8_t>> alt_application_parameter,
      SignResponseCallback completion_callback);

  U2fSign(service_manager::Connector* connector,
          const base::flat_set<U2fTransportProtocol>& protocols,
          std::vector<std::vector<uint8_t>> registered_keys,
          std::vector<uint8_t> challenge_digest,
          std::vector<uint8_t> application_parameter,
          base::Optional<std::vector<uint8_t>> alt_application_parameter,
          SignResponseCallback completion_callback);
  ~U2fSign() override;

 private:
  FRIEND_TEST_ALL_PREFIXES(U2fSignTest, TestCreateSignApduCommand);

  // Enumerates the two types of |application_parameter| values used: the
  // "primary" value is the hash of the relying party ID[1] and is always
  // provided. The "alternative" value is the hash of a U2F AppID, specified in
  // an extension[2], for compatibility with keys that were registered with the
  // old API.
  //
  // [1] https://w3c.github.io/webauthn/#rp-id
  // [2] https://w3c.github.io/webauthn/#sctn-appid-extension
  enum class ApplicationParameterType {
    kPrimary,
    kAlternative,
  };

  void TryDevice() override;
  void OnTryDevice(std::vector<std::vector<uint8_t>>::const_iterator it,
                   ApplicationParameterType application_parameter_type,
                   U2fReturnCode return_code,
                   const std::vector<uint8_t>& response_data);

  base::Optional<std::vector<uint8_t>> alt_application_parameter_;
  SignResponseCallback completion_callback_;

  base::WeakPtrFactory<U2fSign> weak_factory_;
};

}  // namespace device

#endif  // DEVICE_FIDO_U2F_SIGN_H_