load('oxdefaultadmin'); $userEntity = $user->d3GetWebauthnUserEntity(); Registry::getSession()->setVariable(self::SESSION_USERENTITY, $userEntity); $credentialSourceRepository = new PublicKeyCredentials(); $credentialSources = $credentialSourceRepository->findAllForUserEntity($userEntity); $excludeCredentials = array_map(function (PublicKeyCredentialSource $credential) { return $credential->getPublicKeyCredentialDescriptor(); }, $credentialSources); $server = $this->getServer(); $publicKeyCredentialCreationOptions = $server->generatePublicKeyCredentialCreationOptions( $userEntity, PublicKeyCredentialCreationOptions::ATTESTATION_CONVEYANCE_PREFERENCE_NONE, $excludeCredentials ); Registry::getSession()->setVariable(self::SESSION_CREATIONS_OPTIONS, $publicKeyCredentialCreationOptions); return json_encode($publicKeyCredentialCreationOptions); } /** * @return Server */ public function getServer() { $rpEntity = new PublicKeyCredentialRpEntity( Registry::getConfig()->getActiveShop()->getFieldData('oxname'), preg_replace('/(^www\.)(.*)/mi', '$2', $_SERVER['HTTP_HOST']) ); return new Server($rpEntity, new PublicKeyCredentials()); } public function saveAuthn(string $credential) { try { $psr17Factory = new Psr17Factory(); $creator = new ServerRequestCreator( $psr17Factory, $psr17Factory, $psr17Factory, $psr17Factory ); $serverRequest = $creator->fromGlobals(); $publicKeyCredentialSource = $this->getServer()->loadAndCheckAttestationResponse( html_entity_decode($credential), Registry::getSession()->getVariable(self::SESSION_CREATIONS_OPTIONS), $serverRequest ); dumpvar($publicKeyCredentialSource); dumpvar(serialize($publicKeyCredentialSource)); dumpvar(unserialize(serialize($publicKeyCredentialSource))); echo "

---

"; dumpvar(bin2hex(serialize($publicKeyCredentialSource))); dumpvar(unserialize(hex2bin(bin2hex(serialize($publicKeyCredentialSource))))); $pkCredential = oxNew(PublicKeyCredentials::class); $pkCredential->saveCredentialSource($publicKeyCredentialSource); } catch (\Exception $e) { dumpvar($e->getMessage()); dumpvar($e); die(); } } }