forked from GithubBackups/healthchecks
ca3afa33f9
This has dual purpose: * if user has both WebAuthn and TOTP set up, they can choose between the two as equal options. * we initiate WebAuthn flow only after an explicit user action (button press). This may help with authentication failures on recent MacOS, iOS and iPadOS versions [1] [1] https://support.yubico.com/hc/en-us/articles/360022004600-No-reaction-when-using-WebAuthn-on-macOS-iOS-and-iPadOS
37 lines
1.4 KiB
JavaScript
37 lines
1.4 KiB
JavaScript
$(function() {
|
|
var form = document.getElementById("login-tfa-form");
|
|
var optionsBytes = Uint8Array.from(atob(form.dataset.options), c => c.charCodeAt(0));
|
|
// cbor.js expects ArrayBuffer as input when decoding
|
|
var options = CBOR.decode(optionsBytes.buffer);
|
|
|
|
function b64(arraybuffer) {
|
|
return btoa(String.fromCharCode.apply(null, new Uint8Array(arraybuffer)));
|
|
}
|
|
|
|
function authenticate() {
|
|
$("#pick-method").addClass("hide");
|
|
$("#waiting").removeClass("hide");
|
|
$("#error").addClass("hide");
|
|
|
|
navigator.credentials.get(options).then(function(assertion) {
|
|
$("#credential_id").val(b64(assertion.rawId));
|
|
$("#authenticator_data").val(b64(assertion.response.authenticatorData));
|
|
$("#client_data_json").val(b64(assertion.response.clientDataJSON));
|
|
$("#signature").val(b64(assertion.response.signature));
|
|
|
|
// Show the success message and save button
|
|
$("#waiting").addClass("hide");
|
|
$("#success").removeClass("hide");
|
|
form.submit()
|
|
}).catch(function(err) {
|
|
// Show the error message
|
|
$("#waiting").addClass("hide");
|
|
$("#error-text").text(err);
|
|
$("#error").removeClass("hide");
|
|
});
|
|
}
|
|
|
|
$("#use-key-btn").click(authenticate);
|
|
$("#retry").click(authenticate);
|
|
});
|