True passkey implement
This commit is contained in:
qingjie.du
140
platform_impl/test-passkey.ts
Normal file
140
platform_impl/test-passkey.ts
Normal file
@@ -0,0 +1,140 @@
|
||||
/**
|
||||
* End-to-end test for Passkey authentication against amiPro FIDO2 server.
|
||||
*
|
||||
* Tests:
|
||||
* 1. AmiProFIDO2Client connectivity
|
||||
* 2. PasskeyPlatformService flow
|
||||
* 3. PasskeyServer interactive ceremony (opens browser)
|
||||
*
|
||||
* Usage: npx tsx test-passkey.ts [register|authenticate]
|
||||
*/
|
||||
|
||||
import { AmiProFIDO2Client } from './src/passkey/amipro-fido2-client.js';
|
||||
import { PasskeyPlatformService } from './src/passkey/platform-service.js';
|
||||
import { PasskeyServer } from './src/passkey/passkey-server.js';
|
||||
|
||||
const FIDO2_SERVER_URL = 'https://fido2.epk.amipro.me';
|
||||
const RP_ID = 'a2a-demo.mcplet.ai';
|
||||
const TEST_USER = 'a2a-test-user';
|
||||
|
||||
async function testAmiProClient() {
|
||||
console.log('\n=== Test 1: AmiProFIDO2Client Connectivity ===\n');
|
||||
|
||||
const client = new AmiProFIDO2Client(FIDO2_SERVER_URL, RP_ID);
|
||||
|
||||
// Test attestation options (registration)
|
||||
console.log('[1a] Getting attestation options...');
|
||||
try {
|
||||
const attOpts = await client.getAttestationOptions(TEST_USER, 'A2A Test User');
|
||||
console.log(' status:', attOpts.status);
|
||||
if (attOpts.status !== 'failed') {
|
||||
console.log(' challenge:', attOpts.challenge?.substring(0, 30) + '...');
|
||||
console.log(' rp:', JSON.stringify(attOpts.rp));
|
||||
console.log(' user.id:', attOpts.user?.id?.substring(0, 20) + '...');
|
||||
console.log(' pubKeyCredParams:', JSON.stringify(attOpts.pubKeyCredParams));
|
||||
console.log(' timeout:', attOpts.timeout);
|
||||
} else {
|
||||
console.log(' errorMessage:', attOpts.errorMessage);
|
||||
}
|
||||
} catch (err) {
|
||||
console.error(' ERROR:', (err as Error).message);
|
||||
}
|
||||
|
||||
// Test assertion options (authentication)
|
||||
console.log('\n[1b] Getting assertion options...');
|
||||
try {
|
||||
const assertOpts = await client.getAssertionOptions(TEST_USER);
|
||||
console.log(' status:', assertOpts.status);
|
||||
if (assertOpts.status === 'ok') {
|
||||
console.log(' challenge:', assertOpts.challenge?.substring(0, 30) + '...');
|
||||
console.log(' rpId:', assertOpts.rpId);
|
||||
console.log(' timeout:', assertOpts.timeout);
|
||||
console.log(' allowCredentials:', assertOpts.allowCredentials?.length, 'entries');
|
||||
console.log(' userVerification:', assertOpts.userVerification);
|
||||
} else {
|
||||
console.log(' errorMessage:', assertOpts.errorMessage);
|
||||
console.log(' (Expected: user not registered yet)');
|
||||
}
|
||||
} catch (err) {
|
||||
console.error(' ERROR:', (err as Error).message);
|
||||
}
|
||||
}
|
||||
|
||||
async function testPlatformService() {
|
||||
console.log('\n=== Test 2: PasskeyPlatformService ===\n');
|
||||
|
||||
const service = new PasskeyPlatformService(RP_ID, FIDO2_SERVER_URL);
|
||||
|
||||
// Test get attestation options
|
||||
console.log('[2a] Getting attestation options via service...');
|
||||
const attResult = await service.getAttestationOptions(TEST_USER, 'A2A Test User');
|
||||
console.log(' success:', attResult.success);
|
||||
if (attResult.success) {
|
||||
console.log(' challenge present:', !!attResult.options?.challenge);
|
||||
console.log(' rp:', JSON.stringify(attResult.options?.rp));
|
||||
} else {
|
||||
console.log(' error:', attResult.error);
|
||||
}
|
||||
|
||||
// Test get assertion options
|
||||
console.log('\n[2b] Getting assertion options via service...');
|
||||
const assertResult = await service.getAssertionOptions(TEST_USER);
|
||||
console.log(' success:', assertResult.success);
|
||||
if (assertResult.success) {
|
||||
console.log(' challenge present:', !!assertResult.options?.challenge);
|
||||
console.log(' allowCredentials:', assertResult.options?.allowCredentials?.length, 'entries');
|
||||
} else {
|
||||
console.log(' error:', assertResult.error);
|
||||
console.log(' (Expected if user not registered yet)');
|
||||
}
|
||||
}
|
||||
|
||||
async function testInteractiveCeremony(username?: string) {
|
||||
console.log(`\n=== Test 3: Interactive Passkey Ceremony ===\n`);
|
||||
console.log(`Opens a browser page that auto-detects register vs authenticate.`);
|
||||
console.log(`rpId: ${RP_ID}, FIDO2 server: ${FIDO2_SERVER_URL}`);
|
||||
if (username) console.log(`Pre-filled username: ${username}`);
|
||||
console.log();
|
||||
|
||||
const server = new PasskeyServer(RP_ID, FIDO2_SERVER_URL, 180_000);
|
||||
|
||||
try {
|
||||
const payload = await server.startCeremony(
|
||||
`この操作には Passkey 認証が必要です`,
|
||||
username,
|
||||
);
|
||||
|
||||
console.log('\n Ceremony succeeded!');
|
||||
console.log(' type:', payload.type);
|
||||
console.log(' challenge:', payload.challenge?.substring(0, 30) + '...');
|
||||
console.log(' session:', (payload as any).session);
|
||||
console.log(' username:', (payload as any).username);
|
||||
} catch (err) {
|
||||
console.error('\n Ceremony failed:', (err as Error).message);
|
||||
}
|
||||
}
|
||||
|
||||
// ─── Main ──────────────────────────────────────────────────────────────
|
||||
|
||||
const arg = process.argv[2];
|
||||
|
||||
await testAmiProClient();
|
||||
await testPlatformService();
|
||||
|
||||
if (arg === 'test') {
|
||||
// Interactive test: opens browser with unified flow
|
||||
// Pass a username to pre-fill, or omit to let user enter it
|
||||
const username = process.argv[3] || undefined;
|
||||
await testInteractiveCeremony(username);
|
||||
} else if (arg === 'new') {
|
||||
// Test with a brand new user (no pre-fill)
|
||||
await testInteractiveCeremony();
|
||||
} else {
|
||||
console.log('\n=== Interactive test skipped ===');
|
||||
console.log('Usage:');
|
||||
console.log(' npx tsx test-passkey.ts test [username] — unified flow (auto register+auth)');
|
||||
console.log(' npx tsx test-passkey.ts new — new user (empty username field)');
|
||||
}
|
||||
|
||||
console.log('\nDone.');
|
||||
process.exit(0);
|
||||
Reference in New Issue
Block a user