WebAuthn#

This domain allows configuring virtual authenticators to test the WebAuthn API.

This CDP domain is experimental.

Types#

Generally, you do not need to instantiate CDP types yourself. Instead, the API creates objects for you as return values from commands, and then you can use those objects as arguments to other commands.

class AuthenticatorId[source]#
class AuthenticatorProtocol(value, names=None, *, module=None, qualname=None, type=None, start=1, boundary=None)[source]#
U2F = 'u2f'#
CTAP2 = 'ctap2'#
class Ctap2Version(value, names=None, *, module=None, qualname=None, type=None, start=1, boundary=None)[source]#
CTAP2_0 = 'ctap2_0'#
CTAP2_1 = 'ctap2_1'#
class AuthenticatorTransport(value, names=None, *, module=None, qualname=None, type=None, start=1, boundary=None)[source]#
USB = 'usb'#
NFC = 'nfc'#
BLE = 'ble'#
CABLE = 'cable'#
INTERNAL = 'internal'#
class VirtualAuthenticatorOptions(protocol, transport, ctap2_version=None, has_resident_key=None, has_user_verification=None, has_large_blob=None, has_cred_blob=None, has_min_pin_length=None, has_prf=None, automatic_presence_simulation=None, is_user_verified=None, default_backup_eligibility=None, default_backup_state=None)[source]#
protocol: AuthenticatorProtocol#
transport: AuthenticatorTransport#
ctap2_version: Optional[Ctap2Version] = None#

Defaults to ctap2_0. Ignored if protocol == u2f.

has_resident_key: Optional[bool] = None#

Defaults to false.

has_user_verification: Optional[bool] = None#

Defaults to false.

has_large_blob: Optional[bool] = None#

If set to true, the authenticator will support the largeBlob extension. https://w3c.github.io/webauthn#largeBlob Defaults to false.

has_cred_blob: Optional[bool] = None#

If set to true, the authenticator will support the credBlob extension. https://fidoalliance.org/specs/fido-v2.1-rd-20201208/fido-client-to-authenticator-protocol-v2.1-rd-20201208.html#sctn-credBlob-extension Defaults to false.

has_min_pin_length: Optional[bool] = None#

If set to true, the authenticator will support the minPinLength extension. https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-20210615.html#sctn-minpinlength-extension Defaults to false.

has_prf: Optional[bool] = None#

If set to true, the authenticator will support the prf extension. https://w3c.github.io/webauthn/#prf-extension Defaults to false.

automatic_presence_simulation: Optional[bool] = None#

If set to true, tests of user presence will succeed immediately. Otherwise, they will not be resolved. Defaults to true.

is_user_verified: Optional[bool] = None#

Sets whether User Verification succeeds or fails for an authenticator. Defaults to false.

default_backup_eligibility: Optional[bool] = None#

Credentials created by this authenticator will have the backup eligibility (BE) flag set to this value. Defaults to false. https://w3c.github.io/webauthn/#sctn-credential-backup

default_backup_state: Optional[bool] = None#

Credentials created by this authenticator will have the backup state (BS) flag set to this value. Defaults to false. https://w3c.github.io/webauthn/#sctn-credential-backup

class Credential(credential_id, is_resident_credential, private_key, sign_count, rp_id=None, user_handle=None, large_blob=None, backup_eligibility=None, backup_state=None)[source]#
credential_id: str#
is_resident_credential: bool#
private_key: str#

The ECDSA P-256 private key in PKCS#8 format. (Encoded as a base64 string when passed over JSON)

sign_count: int#

Signature counter. This is incremented by one for each successful assertion. See https://w3c.github.io/webauthn/#signature-counter

rp_id: Optional[str] = None#

Relying Party ID the credential is scoped to. Must be set when adding a credential.

user_handle: Optional[str] = None#

An opaque byte sequence with a maximum size of 64 bytes mapping the credential to a specific user. (Encoded as a base64 string when passed over JSON)

large_blob: Optional[str] = None#

The large blob associated with the credential. See https://w3c.github.io/webauthn/#sctn-large-blob-extension (Encoded as a base64 string when passed over JSON)

backup_eligibility: Optional[bool] = None#

Assertions returned by this credential will have the backup eligibility (BE) flag set to this value. Defaults to the authenticator’s defaultBackupEligibility value.

backup_state: Optional[bool] = None#

Assertions returned by this credential will have the backup state (BS) flag set to this value. Defaults to the authenticator’s defaultBackupState value.

Commands#

Each command is a generator function. The return type Generator[x, y, z] indicates that the generator yields arguments of type x, it must be resumed with an argument of type y, and it returns type z. In this library, types x and y are the same for all commands, and z is the return type you should pay attention to. For more information, see Getting Started: Commands.

add_credential(authenticator_id, credential)[source]#

Adds the credential to the specified authenticator.

Parameters:
Return type:

Generator[Dict[str, Any], Dict[str, Any], None]

add_virtual_authenticator(options)[source]#

Creates and adds a virtual authenticator.

Parameters:

options (VirtualAuthenticatorOptions) –

Return type:

Generator[Dict[str, Any], Dict[str, Any], AuthenticatorId]

Returns:

clear_credentials(authenticator_id)[source]#

Clears all the credentials from the specified device.

Parameters:

authenticator_id (AuthenticatorId) –

Return type:

Generator[Dict[str, Any], Dict[str, Any], None]

disable()[source]#

Disable the WebAuthn domain.

Return type:

Generator[Dict[str, Any], Dict[str, Any], None]

enable(enable_ui=None)[source]#

Enable the WebAuthn domain and start intercepting credential storage and retrieval with a virtual authenticator.

Parameters:

enable_ui (Optional[bool]) – (Optional) Whether to enable the WebAuthn user interface. Enabling the UI is recommended for debugging and demo purposes, as it is closer to the real experience. Disabling the UI is recommended for automated testing. Supported at the embedder’s discretion if UI is available. Defaults to false.

Return type:

Generator[Dict[str, Any], Dict[str, Any], None]

get_credential(authenticator_id, credential_id)[source]#

Returns a single credential stored in the given virtual authenticator that matches the credential ID.

Parameters:
Return type:

Generator[Dict[str, Any], Dict[str, Any], Credential]

Returns:

get_credentials(authenticator_id)[source]#

Returns all the credentials stored in the given virtual authenticator.

Parameters:

authenticator_id (AuthenticatorId) –

Return type:

Generator[Dict[str, Any], Dict[str, Any], List[Credential]]

Returns:

remove_credential(authenticator_id, credential_id)[source]#

Removes a credential from the authenticator.

Parameters:
Return type:

Generator[Dict[str, Any], Dict[str, Any], None]

remove_virtual_authenticator(authenticator_id)[source]#

Removes the given authenticator.

Parameters:

authenticator_id (AuthenticatorId) –

Return type:

Generator[Dict[str, Any], Dict[str, Any], None]

set_automatic_presence_simulation(authenticator_id, enabled)[source]#

Sets whether tests of user presence will succeed immediately (if true) or fail to resolve (if false) for an authenticator. The default is true.

Parameters:
Return type:

Generator[Dict[str, Any], Dict[str, Any], None]

set_credential_properties(authenticator_id, credential_id, backup_eligibility=None, backup_state=None)[source]#

Allows setting credential properties. https://w3c.github.io/webauthn/#sctn-automation-set-credential-properties

Parameters:
Return type:

Generator[Dict[str, Any], Dict[str, Any], None]

set_response_override_bits(authenticator_id, is_bogus_signature=None, is_bad_uv=None, is_bad_up=None)[source]#

Resets parameters isBogusSignature, isBadUV, isBadUP to false if they are not present.

Parameters:

  • authenticator_id (AuthenticatorId) –

  • is_bogus_signature (Optional[bool]) – (Optional) If isBogusSignature is set, overrides the signature in the authenticator response to be zero. Defaults to false.

  • is_bad_uv (Optional[bool]) – (Optional) If isBadUV is set, overrides the UV bit in the flags in the authenticator response to be zero. Defaults to false.

  • is_bad_up (Optional[bool]) – (Optional) If isBadUP is set, overrides the UP bit in the flags in the authenticator response to be zero. Defaults to false.

Return type:

Generator[Dict[str, Any], Dict[str, Any], None]

set_user_verified(authenticator_id, is_user_verified)[source]#

Sets whether User Verification succeeds or fails for an authenticator. The default is true.

Parameters:
Return type:

Generator[Dict[str, Any], Dict[str, Any], None]

Events#

Generally, you do not need to instantiate CDP events yourself. Instead, the API creates events for you and then you use the event’s attributes.

class CredentialAdded(authenticator_id, credential)[source]#

Triggered when a credential is added to an authenticator.

authenticator_id: AuthenticatorId#
credential: Credential#
class CredentialAsserted(authenticator_id, credential)[source]#

Triggered when a credential is used in a webauthn assertion.

authenticator_id: AuthenticatorId#
credential: Credential#