AzuraCast/src/Controller/Api/Frontend/Account/WebAuthn/PutRegistrationAction.php

54 lines
1.4 KiB
PHP

<?php
declare(strict_types=1);
namespace App\Controller\Api\Frontend\Account\WebAuthn;
use App\Container\EntityManagerAwareTrait;
use App\Controller\Traits\UsesWebAuthnTrait;
use App\Entity\Api\Status;
use App\Entity\UserPasskey;
use App\Http\Response;
use App\Http\ServerRequest;
use App\Security\WebAuthnPasskey;
use Psr\Http\Message\ResponseInterface;
final class PutRegistrationAction
{
use UsesWebAuthnTrait;
use EntityManagerAwareTrait;
public function __invoke(
ServerRequest $request,
Response $response,
array $params
): ResponseInterface {
$user = $request->getUser();
$webAuthn = $this->getWebAuthn($request);
$parsedBody = $request->getParsedBody();
$challenge = $this->getChallenge($request);
// Turn the submitted data into a raw passkey.
$passkeyRaw = $webAuthn->processCreate(
base64_decode($parsedBody['createResponse']['clientDataJSON'] ?? ''),
base64_decode($parsedBody['createResponse']['attestationObject'] ?? ''),
$challenge
);
$passkey = WebAuthnPasskey::fromWebAuthnObject($passkeyRaw);
$record = new UserPasskey(
$user,
$parsedBody['name'] ?? 'New Passkey',
$passkey
);
$this->em->persist($record);
$this->em->flush();
return $response->withJson(Status::success());
}
}