WebAuthn Authentication

import { createAccount } from 'bakosafe';
 
async function createPasskeyAccount(username: string) {
  const challenge = crypto.randomUUID(); // Generate unique challenge
 
  const account = await createAccount(username, challenge);
 
  // account contains:
  // - id: credential ID
  // - publicKey: public key for verification
  // - address: derived Fuel address
  // - authenticatorData: WebAuthn authenticator data
  // - clientData: client data JSON
  // - credential: raw credential
 
  return account;
}

import { signChallange, parseSignChallangeResponse } from 'bakosafe';
 
async function signWithPasskey(
  credentialId: string,
  challenge: string,
  publicKey: string
) {
  // Request signature from user's passkey
  const response = await signChallange(credentialId, challenge, publicKey);
 
  // Parse the response for use with Bako
  const parsed = await parseSignChallangeResponse(
    publicKey,
    challenge,
    response
  );
 
  // parsed contains:
  // - sig: signature
  // - digest: signed digest
  // - prefix: client data prefix
  // - suffix: client data suffix
  // - authData: authenticator data
 
  return parsed;
}

import { BakoProvider, TypeUser, signChallange } from 'bakosafe';
 
async function authenticateWithWebAuthn(
  credentialId: string,
  publicKey: string,
  address: string
) {
  // Step 1: Setup authentication
  const { code } = await BakoProvider.setup({
    address,
    provider: 'https://mainnet.fuel.network/v1/graphql',
    encoder: TypeUser.WEB_AUTHN
  });
 
  // Step 2: Sign with passkey
  const signResponse = await signChallange(credentialId, code, publicKey);
 
  // Step 3: Authenticate
  const provider = await BakoProvider.authenticate({
    challenge: code,
    signature: signResponse.signature,
    encoder: TypeUser.WEB_AUTHN,
    address,
    serverUrl: 'https://api.bako.global'
  });
 
  return provider;
}

import { splitCLientData } from 'bakosafe';
 
const { prefix, suffix } = splitCLientData(
  clientDataJSON,
  challengeBytes
);

import { formatToWebAuthnCreate } from 'bakosafe';
 
const { sig, digest } = await formatToWebAuthnCreate({
  authenticatorData,
  clientDataJSON,
  signature,
  publicKey
});