/* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
#ifndef mozilla_dom_WebAuthnService_h_
#define mozilla_dom_WebAuthnService_h_
#include "AuthrsBridge_ffi.h"
#include "WebAuthnArgs.h"
#include "mozilla/StaticPrefs_security.h"
#include "mozilla/dom/WebAuthnPromiseHolder.h"
#include "nsIWebAuthnService.h"
#ifdef MOZ_WIDGET_ANDROID
# include
"AndroidWebAuthnService.h"
#endif
#ifdef XP_MACOSX
# include
"MacOSWebAuthnService.h"
#endif
#ifdef XP_WIN
# include
"WinWebAuthnService.h"
#endif
namespace mozilla::dom {
already_AddRefed<nsIWebAuthnService> NewWebAuthnService();
class WebAuthnService final :
public nsIWebAuthnService {
public:
NS_DECL_THREADSAFE_ISUPPORTS
NS_DECL_NSIWEBAUTHNSERVICE
WebAuthnService() {
(
void)authrs_service_constructor(getter_AddRefs(mAuthrsService));
#if defined(XP_WIN)
if (WinWebAuthnService::AreWebAuthNApisAvailable()) {
mPlatformService =
new WinWebAuthnService();
}
else {
mPlatformService = mAuthrsService;
}
#elif defined(MOZ_WIDGET_ANDROID)
mPlatformService =
new AndroidWebAuthnService();
#elif defined(XP_MACOSX)
if (__builtin_available(macos
13.
3, *)) {
mPlatformService = NewMacOSWebAuthnServiceIfAvailable();
}
if (!mPlatformService) {
mPlatformService = mAuthrsService;
}
#else
mPlatformService = mAuthrsService;
#endif
}
private:
~WebAuthnService() =
default;
struct TransactionState {
nsCOMPtr<nsIWebAuthnService> service;
uint64_t transactionId;
Maybe<nsCOMPtr<nsIWebAuthnRegisterPromise>> parentRegisterPromise;
Maybe<nsCOMPtr<nsIWebAuthnRegisterResult>> registerResult;
MozPromiseRequestHolder<WebAuthnRegisterPromise> childRegisterRequest;
};
struct ConditionalGet {
uint64_t transactionId;
uint64_t browsingContextId;
nsCOMPtr<nsIWebAuthnSignArgs> signArgs;
nsCOMPtr<nsIWebAuthnSignPromise> signPromise;
};
// Main thread only:
// The current modal operation.
Maybe<TransactionState> mActiveTransaction;
// Pending conditional (autofill) GetAssertion requests, at most one per
// tab.
nsTArray<ConditionalGet> mConditionalGets;
void ShowAttestationConsentPrompt(
const nsString& aOrigin,
uint64_t aTransactionId,
uint64_t aBrowsingContextId);
void RejectActiveRegisterPromise();
void ResetActiveTransaction();
Maybe<ConditionalGet> TakeConditionalByTid(uint64_t aTransactionId);
nsresult DispatchConditionalGetAssertion(
const ConditionalGet& aPending,
nsIWebAuthnSignArgs* aArgs);
nsIWebAuthnService* DefaultService() {
if (StaticPrefs::security_webauth_webauthn_enable_softtoken()) {
return mAuthrsService;
}
return mPlatformService;
}
// Returns the authrs_bridge service. This is the default service on some
// platforms, and it is used as a fallback to workaround platform specific
// bugs on others. It is also used for all commands related to the WebDriver
// Virtual Authenticator extension.
nsIWebAuthnService* AuthrsService() {
return mAuthrsService; }
// Returns the service backing the current active transaction. The caller is
// responsible for ensuring that there is an active transaction.
nsIWebAuthnService* ActiveService() {
MOZ_ASSERT(NS_IsMainThread());
MOZ_ASSERT(mActiveTransaction.isSome());
return mActiveTransaction.ref().service;
}
nsCOMPtr<nsIWebAuthnService> mAuthrsService;
nsCOMPtr<nsIWebAuthnService> mPlatformService;
};
}
// namespace mozilla::dom
#endif // mozilla_dom_WebAuthnService_h_
