Update website

admin/phpMyAdmin/js/src/webauthn.js

@@ -0,0 +1,133 @@
+/**
+ * @param {ArrayBuffer} buffer
+ *
+ * @return {string}
+ */
+const arrayBufferToBase64 = buffer => {
+    const bytes = new Uint8Array(buffer);
+    let string = '';
+    for (const byte of bytes) {
+        string += String.fromCharCode(byte);
+    }
+
+    return window.btoa(string);
+};
+
+/**
+ * @param {string} string
+ *
+ * @return {Uint8Array}
+ */
+const base64ToUint8Array = string => {
+    return Uint8Array.from(window.atob(string), char => char.charCodeAt(0));
+};
+
+/**
+ * @param {JQuery<HTMLElement>} $input
+ *
+ * @return {void}
+ */
+const handleCreation = $input => {
+    const $form = $input.parents('form');
+    $form.find('input[type=submit]').hide();
+
+    const creationOptionsJson = $input.attr('data-creation-options');
+    const creationOptions = JSON.parse(creationOptionsJson);
+
+    const publicKey = creationOptions;
+    publicKey.challenge = base64ToUint8Array(creationOptions.challenge);
+    publicKey.user.id = base64ToUint8Array(creationOptions.user.id);
+    if (creationOptions.excludeCredentials) {
+        const excludedCredentials = [];
+        for (let value of creationOptions.excludeCredentials) {
+            let excludedCredential = value;
+            excludedCredential.id = base64ToUint8Array(value.id);
+            excludedCredentials.push(excludedCredential);
+        }
+        publicKey.excludeCredentials = excludedCredentials;
+    }
+
+    // eslint-disable-next-line compat/compat
+    navigator.credentials.create({ publicKey: publicKey })
+        .then((credential) => {
+            const credentialJson = JSON.stringify({
+                id: credential.id,
+                rawId: arrayBufferToBase64(credential.rawId),
+                type: credential.type,
+                response: {
+                    clientDataJSON: arrayBufferToBase64(credential.response.clientDataJSON),
+                    attestationObject: arrayBufferToBase64(credential.response.attestationObject),
+                }
+            });
+            $input.val(credentialJson);
+            $form.trigger('submit');
+        })
+        .catch((error) => Functions.ajaxShowMessage(error, false, 'error'));
+};
+
+/**
+ * @param {JQuery<HTMLElement>} $input
+ *
+ * @return {void}
+ */
+const handleRequest = $input => {
+    const $form = $input.parents('form');
+    $form.find('input[type=submit]').hide();
+
+    const requestOptionsJson = $input.attr('data-request-options');
+    const requestOptions = JSON.parse(requestOptionsJson);
+
+    const publicKey = requestOptions;
+    publicKey.challenge = base64ToUint8Array(requestOptions.challenge);
+    if (requestOptions.allowCredentials) {
+        const allowedCredentials = [];
+        for (let value of requestOptions.allowCredentials) {
+            let allowedCredential = value;
+            allowedCredential.id = base64ToUint8Array(value.id);
+            allowedCredentials.push(allowedCredential);
+        }
+        publicKey.allowCredentials = allowedCredentials;
+    }
+
+    // eslint-disable-next-line compat/compat
+    navigator.credentials.get({ publicKey: publicKey })
+        .then((credential) => {
+            const credentialJson = JSON.stringify({
+                id: credential.id,
+                rawId: arrayBufferToBase64(credential.rawId),
+                type: credential.type,
+                response: {
+                    authenticatorData: arrayBufferToBase64(credential.response.authenticatorData),
+                    clientDataJSON: arrayBufferToBase64(credential.response.clientDataJSON),
+                    signature: arrayBufferToBase64(credential.response.signature),
+                    userHandle: arrayBufferToBase64(credential.response.userHandle),
+                }
+            });
+            $input.val(credentialJson);
+            $form.trigger('submit');
+        })
+        .catch((error) => Functions.ajaxShowMessage(error, false, 'error'));
+};
+
+AJAX.registerOnload('webauthn.js', function () {
+    if (
+        ! navigator.credentials
+        || ! navigator.credentials.create
+        || ! navigator.credentials.get
+        || ! window.PublicKeyCredential
+    ) {
+        Functions.ajaxShowMessage(Messages.webAuthnNotSupported, false, 'error');
+
+        return;
+    }
+
+    const $creationInput = $('#webauthn_creation_response');
+    if ($creationInput.length > 0) {
+        handleCreation($creationInput);
+    }
+
+    const $requestInput = $('#webauthn_request_response');
+    if ($requestInput.length > 0) {
+        handleRequest($requestInput);
+    }
+});