feat: adding fingerprints to sessions (#109)

* feat: adding fingerprints to sessions

* Update utilities.ts

* Update bundlesize.config.js

* Update utilities.ts

packages/auth-provider/bundlesize.config.js

@@ -9,7 +9,7 @@ export default {
 		 */
 		{
 			path: "dist/index.js",
-			limit: "15 kb",
+			limit: "21 kb",
 		},
 	],
 };

packages/auth-provider/package.json

@@ -14,9 +14,7 @@
 	"type": "module",
 	"main": "dist/index.js",
 	"types": "dist/index.d.ts",
-	"files": [
-		"dist"
-	],
+	"files": ["dist"],
 	"scripts": {
 		"build:check": "tsc",
 		"build:js": "vite build",
@@ -45,6 +43,7 @@
 	},
 	"dependencies": {
 		"@simplewebauthn/browser": "10.0.0",
+		"@thumbmarkjs/thumbmarkjs": "0.14.8",
 		"@versini/auth-common": "workspace:../auth-common",
 		"@versini/ui-hooks": "4.0.1",
 		"jose": "5.6.3",

packages/auth-provider/src/common/utilities.ts

@@ -1,3 +1,4 @@
+import { getFingerprint } from "@thumbmarkjs/thumbmarkjs";
 import {
 	API_TYPE,
 	AUTH_TYPES,
@@ -94,6 +95,7 @@ export type AuthenticateUserProps = {
 	code?: string;
 	code_verifier?: string;
 	domain: string;
+	fingerprint: string;
 };
 export const authenticateUser = async ({
 	username,
@@ -105,6 +107,7 @@ export const authenticateUser = async ({
 	code,
 	code_verifier,
 	domain,
+	fingerprint,
 }: AuthenticateUserProps) => {
 	try {
 		const response = await serviceCall({
@@ -119,6 +122,7 @@ export const authenticateUser = async ({
 				code,
 				code_verifier,
 				domain,
+				fingerprint,
 			},
 		});
 		const jwt = await verifyAndExtractToken(response.data.idToken);
@@ -289,13 +293,15 @@ const GRAPHQL_QUERIES = {
 		$id: String!,
 		$authentication: AuthenticationOptionsInput!,
 		$nonce: String!,
-		$domain: String) {
+		$domain: String,
+		$fingerprint: String) {
 		verifyPasskeyAuthentication(
 			clientId: $clientId,
 			id: $id,
 			authentication: $authentication,
 			nonce: $nonce,
-			domain: $domain) {
+			domain: $domain,
+			fingerprint: $fingerprint) {
 				status,
 				idToken,
 				accessToken,
@@ -369,3 +375,17 @@ export const graphQLCall = async ({
 		return { status: 500, data: [] };
 	}
 };
+
+export const getCustomFingerprint = async () => {
+	try {
+		const res = await getFingerprint();
+		if (typeof res === "string") {
+			return res;
+		} else if (res.hash && typeof res.hash === "string") {
+			return res.hash;
+		}
+		return "";
+	} catch (_error) {
+		return "";
+	}
+};

packages/auth-provider/src/components/AuthProvider/AuthProvider.tsx

@@ -2,6 +2,7 @@ import {
 	startAuthentication,
 	startRegistration,
 } from "@simplewebauthn/browser";
+
 import {
 	AUTH_TYPES,
 	JWT,
@@ -27,6 +28,7 @@ import type { AuthProviderProps, LoginType } from "../../common/types";
 import {
 	SERVICE_TYPES,
 	authenticateUser,
+	getCustomFingerprint,
 	getPreAuthCode,
 	graphQLCall,
 	logoutUser,
@@ -176,6 +178,7 @@ export const AuthProvider = ({
 					code: preResponse.code,
 					code_verifier,
 					domain,
+					fingerprint: await getCustomFingerprint(),
 				});
 				if (response.status) {
 					setIdToken(response.idToken);
@@ -207,6 +210,7 @@ export const AuthProvider = ({
 			nonce: _nonce,
 			type,
 			domain,
+			fingerprint: await getCustomFingerprint(),
 		});
 		if (response.status) {
 			setIdToken(response.idToken);
@@ -352,6 +356,7 @@ export const AuthProvider = ({
 						authentication,
 						nonce: _nonce,
 						domain,
+						fingerprint: await getCustomFingerprint(),
 					},
 				});