fix: 后端修复通行证公钥存取问题

This commit is contained in:
2025-12-18 22:41:18 +08:00
parent 15bf790095
commit eddc4b1b76

View File

@@ -5,7 +5,7 @@ import { Repository } from "typeorm";
import { User } from "src/user/entities/user.entity"; import { User } from "src/user/entities/user.entity";
import { randomBytes } from 'crypto'; import { randomBytes } from 'crypto';
import { generateAuthenticationOptions, GenerateAuthenticationOptionsOpts, generateRegistrationOptions, GenerateRegistrationOptionsOpts, VerifiedAuthenticationResponse, VerifiedRegistrationResponse, verifyAuthenticationResponse, verifyRegistrationResponse } from "@simplewebauthn/server"; import { generateAuthenticationOptions, GenerateAuthenticationOptionsOpts, generateRegistrationOptions, GenerateRegistrationOptionsOpts, VerifiedAuthenticationResponse, VerifiedRegistrationResponse, verifyAuthenticationResponse, verifyRegistrationResponse } from "@simplewebauthn/server";
import { isoBase64URL } from '@simplewebauthn/server/helpers';
interface ChallengeEntry { interface ChallengeEntry {
value: string; value: string;
@@ -156,7 +156,7 @@ export class PasskeyService implements OnModuleDestroy {
user: { userId } as User, user: { userId } as User,
name: name || '新的通行证', name: name || '新的通行证',
credentialId: credential.id, credentialId: credential.id,
publicKey: credential.publicKey.toString(), publicKey: isoBase64URL.fromBuffer(credential.publicKey),
signCount: credential.counter, signCount: credential.counter,
verified: true, verified: true,
}); });
@@ -169,8 +169,6 @@ export class PasskeyService implements OnModuleDestroy {
async getAuthenticationOptions(sessionId: string) { async getAuthenticationOptions(sessionId: string) {
const challenge = this.generateChallenge(); const challenge = this.generateChallenge();
authenticationChallenges.set(sessionId, challenge);
const opts: GenerateAuthenticationOptionsOpts = { const opts: GenerateAuthenticationOptionsOpts = {
rpID: this.rpID, rpID: this.rpID,
challenge, challenge,
@@ -178,7 +176,9 @@ export class PasskeyService implements OnModuleDestroy {
userVerification: 'preferred', userVerification: 'preferred',
}; };
return generateAuthenticationOptions(opts); const options = await generateAuthenticationOptions(opts);
authenticationChallenges.set(sessionId, options.challenge);
return options;
} }
async login(sessionId: string, credentialResponse: any): Promise<User> { async login(sessionId: string, credentialResponse: any): Promise<User> {
@@ -206,7 +206,7 @@ export class PasskeyService implements OnModuleDestroy {
expectedRPID: this.rpID, expectedRPID: this.rpID,
credential: { credential: {
id: passkey.credentialId, id: passkey.credentialId,
publicKey: Buffer.from(passkey.publicKey), publicKey: isoBase64URL.toBuffer(passkey.publicKey),
counter: passkey.signCount, counter: passkey.signCount,
}, },
requireUserVerification: false, requireUserVerification: false,