Class: Devise::Strategies::PasskeyAuthenticatable

Inherits:
Authenticatable
  • Object
show all
Includes:
Warden::WebAuthn::StrategyHelpers
Defined in:
lib/devise/passkeys/strategy.rb

Direct Known Subclasses

PasskeyReauthentication

Instance Method Summary collapse

Instance Method Details

#authenticate! ⇒ Object 



24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
 
# File 'lib/devise/passkeys/strategy.rb', line 24

def authenticate!
  passkey = verify_authentication_and_find_stored_credential

  return if passkey.nil?

  resource = mapping.to.find_for_passkey(passkey)

  return fail(:invalid_passkey) unless resource

  if validate(resource)
    remember_me(resource)
    resource.after_passkey_authentication(passkey: passkey)
    record_passkey_use(passkey: passkey)
    success!(resource)
    return
  end

  # In paranoid mode, fail with a generic invalid error
  Devise.paranoid ? fail(:invalid_passkey) : fail(:not_found_in_database)
end

#authentication_challenge_key ⇒ Object 



53
54
55
 
# File 'lib/devise/passkeys/strategy.rb', line 53

def authentication_challenge_key
  "#{mapping.singular}_current_webauthn_authentication_challenge"
end

#credential_finder ⇒ Object 



45
46
47
 
# File 'lib/devise/passkeys/strategy.rb', line 45

def credential_finder
  Devise::Passkeys::PasskeyIssuer::CredentialFinder.new(resource_class: mapping.to)
end

#raw_credential ⇒ Object 



49
50
51
 
# File 'lib/devise/passkeys/strategy.rb', line 49

def raw_credential
  params.dig(mapping.singular, :passkey_credential)
end

#record_passkey_use(passkey:) ⇒ Object 



57
58
59
 
# File 'lib/devise/passkeys/strategy.rb', line 57

def record_passkey_use(passkey:)
  passkey.update_attribute(:last_used_at, Time.current)
end

#store? ⇒ Boolean

Returns:

  • (Boolean) 


11
12
13
 
# File 'lib/devise/passkeys/strategy.rb', line 11

def store?
  super && !mapping.to.skip_session_storage.include?(:passkey_auth)
end

#valid? ⇒ Boolean

Returns:

  • (Boolean) 


15
16
17
18
19
20
21
22
 
# File 'lib/devise/passkeys/strategy.rb', line 15

def valid?
  return true unless parsed_credential.nil?

  # rubocop:disable Lint/UnreachableCode
  fail(:credential_missing_or_could_not_be_parsed)
  false
  # rubocop:enable Lint/UnreachableCode
end