Merge branch 'main' into main

Author: 0xTim

Sources/WebAuthn/Ceremonies/Registration/AttestationConveyancePreference.swift

@@ -15,7 +15,7 @@
 /// Options to specify the Relying Party's preference regarding attestation conveyance during credential generation.
 ///
 /// Currently only supports `none`.
-public enum AttestationConveyancePreference: String, Encodable {
+public enum AttestationConveyancePreference: String, Encodable, Sendable {
     /// Indicates the Relying Party is not interested in authenticator attestation.
     case none
     // case indirect

Sources/WebAuthn/Ceremonies/Registration/AttestationFormat.swift

@@ -12,7 +12,7 @@
 //
 //===----------------------------------------------------------------------===//
 
-public enum AttestationFormat: String, RawRepresentable, Equatable {
+public enum AttestationFormat: String, RawRepresentable, Equatable, Sendable {
     case packed
     case tpm
     case androidKey = "android-key"

Sources/WebAuthn/Ceremonies/Registration/AttestationObject.swift

@@ -14,10 +14,10 @@
 
 import Foundation
 import Crypto
-import SwiftCBOR
+@preconcurrency import SwiftCBOR
 
 /// Contains the cryptographic attestation that a new key pair was created by that authenticator.
-public struct AttestationObject {
+public struct AttestationObject: Sendable {
     let authenticatorData: AuthenticatorData
     let rawAuthenticatorData: [UInt8]
     let format: AttestationFormat

Sources/WebAuthn/Ceremonies/Registration/AuthenticatorAttestationResponse.swift

@@ -18,7 +18,7 @@ import SwiftCBOR
 /// The response from the authenticator device for the creation of a new public key credential.
 ///
 /// When decoding using `Decodable`, `clientDataJSON` and `attestationObject` are decoded from base64url to bytes.
-public struct AuthenticatorAttestationResponse {
+public struct AuthenticatorAttestationResponse: Sendable {
     /// The client data that was passed to the authenticator during the creation ceremony.
     ///
     /// When decoding using `Decodable`, this is decoded from base64url to bytes.

Sources/WebAuthn/Ceremonies/Registration/Credential.swift

@@ -16,7 +16,7 @@ import Foundation
 
 /// After a successful registration ceremony we pass this data back to the relying party. It contains all needed
 /// information about a WebAuthn credential for storage in e.g. a database.
-public struct Credential {
+public struct Credential: Sendable {
     /// Value will always be ``CredentialType/publicKey`` (for now)
     public let type: CredentialType
 

Sources/WebAuthn/Ceremonies/Registration/PublicKeyCredentialCreationOptions.swift

@@ -20,7 +20,7 @@ import Foundation
 /// `Encodable` byte arrays are base64url encoded.
 ///
 /// - SeeAlso: https://www.w3.org/TR/webauthn-2/#dictionary-makecredentialoptions
-public struct PublicKeyCredentialCreationOptions: Encodable {
+public struct PublicKeyCredentialCreationOptions: Encodable, Sendable {
     /// A byte array randomly generated by the Relying Party. Should be at least 16 bytes long to ensure sufficient
     /// entropy.
     ///
@@ -71,7 +71,7 @@ public struct PublicKeyCredentialCreationOptions: Encodable {
 
 // MARK: - Credential parameters
 /// From §5.3 (https://w3c.github.io/TR/webauthn/#dictionary-credential-params)
-public struct PublicKeyCredentialParameters: Equatable, Encodable {
+public struct PublicKeyCredentialParameters: Equatable, Encodable, Sendable {
     /// The type of credential to be created. At the time of writing always ``CredentialType/publicKey``.
     public let type: CredentialType
     /// The cryptographic signature algorithm with which the newly generated credential will be used, and thus also
@@ -104,7 +104,7 @@ extension Array where Element == PublicKeyCredentialParameters {
 /// From §5.4.2 (https://www.w3.org/TR/webauthn/#sctn-rp-credential-params).
 /// The PublicKeyCredentialRelyingPartyEntity dictionary is used to supply additional Relying Party attributes when
 /// creating a new credential.
-public struct PublicKeyCredentialRelyingPartyEntity: Encodable {
+public struct PublicKeyCredentialRelyingPartyEntity: Encodable, Sendable {
     /// A unique identifier for the Relying Party entity.
     public let id: String
 

Sources/WebAuthn/Ceremonies/Registration/RegistrationCredential.swift

@@ -18,7 +18,7 @@ import Crypto
 /// The unprocessed response received from `navigator.credentials.create()`.
 ///
 /// When decoding using `Decodable`, the `rawID` is decoded from base64url to bytes.
-public struct RegistrationCredential {
+public struct RegistrationCredential: Sendable {
     /// The credential ID of the newly created credential.
     public let id: URLEncodedBase64