webauthn

type AssertionPublicKeyCredential = PublicKeyCredential[AuthenticatorAssertionResponse]

type AttestationObject struct {
	Format               string
	AttestationStatement map[any]any
	AuthenticatorData    *AuthenticatorData
	RawAuthenticatorData []byte
}

type AttestationPublicKeyCredential = PublicKeyCredential[AuthenticatorAttestationResponse]

type AttestedCredentialData struct {
	Aaguid       []byte
	CredentialId []byte
	// PublicKey is the parsed COSE credential public key.
	PublicKey crypto.PublicKey
	// PublicKeyAlgorithm is the alg parameter of the COSE credential public key, or 0 when the
	// key carries none.
	PublicKeyAlgorithm cose.Algorithm
	// RawPublicKey is the CBOR-encoded COSE_Key exactly as carried in the authenticator data.
	RawPublicKey []byte
}

type AuthenticatorAssertionResponse struct {
	ClientDataJson    CollectedClientData
	AuthenticatorData AuthenticatorData
	Signature         []byte
	UserHandle        []byte
}

type AuthenticatorAttestationResponse struct {
	ClientDataJson    CollectedClientData
	AttestationObject *AttestationObject
	Transports        []string
}

type AuthenticatorData struct {
	RpIdHash           []byte
	Flags              byte
	SignCount          uint32
	AttestedCredential *AttestedCredentialData
	Extensions         map[any]any
}

type AuthenticatorResponse interface {
	GetClientDataJson() *CollectedClientData
	GetAuthenticatorData() *AuthenticatorData
}

type AuthenticatorSelection struct {
	AuthenticatorAttachment string `json:"authenticatorAttachment,omitzero"`
	ResidentKey             string `json:"residentKey,omitzero"`
	RequireResidentKey      bool   `json:"requireResidentKey,omitzero"`
}

type CollectedClientData struct {
	Type        string
	Challenge   []byte
	Origin      string
	CrossOrigin bool
	// TopOrigin is not part of the specification, but is sent by clients.
	TopOrigin string
}

type PublicKeyCredential[T AuthenticatorAttestationResponse | AuthenticatorAssertionResponse] struct {
	Id              []byte
	Type            string
	RawId           []byte
	Response        T
	ClientExtension map[string]any
}

type PublicKeyCredentialCreationOptions struct {
	RelyingParty *RelyingParty                  `json:"rp"`
	User         *PublicKeyCredentialUserEntity `json:"user"`

	Challenge        []byte                      `json:"challenge"`
	PubKeyCredParams []*PublicKeyCredentialParam `json:"pubKeyCredParams"`

	Timeout                uint64                           `json:"timeout,omitzero"`
	ExcludeCredentials     []*PublicKeyCredentialDescriptor `json:"excludeCredentials,omitzero"`
	AuthenticatorSelection *AuthenticatorSelection          `json:"authenticatorSelection,omitzero"`
	Attestation            string                           `json:"attestation,omitzero"`
	Extensions             map[string]any                   `json:"extensions,omitzero"`
}

type PublicKeyCredentialDescriptor struct {
	Id         string   `json:"id"`
	Type       string   `json:"type"`
	Transports []string `json:"transports,omitzero"`
}

type PublicKeyCredentialParam struct {
	Type string `json:"type"`
	Alg  int    `json:"alg"`
}

type PublicKeyCredentialRequestOptions struct {
	Challenge          []byte                           `json:"challenge"`
	Timeout            uint64                           `json:"timeout,omitzero"`
	RpId               string                           `json:"rpId,omitzero"`
	AllowedCredentials []*PublicKeyCredentialDescriptor `json:"allowedCredentials,omitzero"`
	UserVerification   string                           `json:"userVerification,omitzero"`
	Extensions         map[string]any                   `json:"extensions,omitzero"`
}

type PublicKeyCredentialUserEntity struct {
	Name        string `json:"name"`
	Id          []byte `json:"id"`
	DisplayName string `json:"displayName"`
}

type RelyingParty struct {
	Name string `json:"name"`
	Id   string `json:"id,omitzero"`
}