Skip to content

Commit c3de0c8

Browse files
committed
use existing clientData verify method
1 parent df6ac35 commit c3de0c8

File tree

1 file changed

+5
-4
lines changed

1 file changed

+5
-4
lines changed

Sources/WebAuthn/WebAuthnManager.swift

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -131,7 +131,6 @@ public struct WebAuthnManager {
131131
requireUserVerification: Bool = false
132132
) throws -> VerifiedAuthentication {
133133
let expectedRpID = config.relyingPartyID
134-
let expectedOrigin = config.relyingPartyOrigin
135134
guard credential.type == "public-key" else { throw WebAuthnError.badRequestData }
136135

137136
let response = credential.response
@@ -140,9 +139,11 @@ public struct WebAuthnManager {
140139
throw WebAuthnError.badRequestData
141140
}
142141
let clientData = try JSONDecoder().decode(CollectedClientData.self, from: clientDataData)
143-
guard clientData.type == .assert else { throw WebAuthnError.badRequestData }
144-
guard expectedChallenge == clientData.challenge else { throw WebAuthnError.badRequestData }
145-
guard expectedOrigin == clientData.origin else { throw WebAuthnError.badRequestData }
142+
try clientData.verify(
143+
storedChallenge: expectedChallenge,
144+
ceremonyType: .assert,
145+
relyingPartyOrigin: config.relyingPartyOrigin
146+
)
146147
// TODO: - Verify token binding
147148

148149
guard let authenticatorDataBytes = response.authenticatorData.base64URLDecodedData else {

0 commit comments

Comments
 (0)