feat: WebAuthN support

lib/build/recipe/accountlinking/recipe.js

@@ -38,10 +38,15 @@ class Recipe extends recipeModule_1.default {
             if (user.isPrimaryUser) {
                 return user;
             }
-            // then, we try and find a primary user based on the email / phone number / third party ID.
+            // then, we try and find a primary user based on the email / phone number / third party ID / credentialId.
             let users = await this.recipeInterfaceImpl.listUsersByAccountInfo({
                 tenantId,
-                accountInfo: user.loginMethods[0],
+                accountInfo: Object.assign(Object.assign({}, user.loginMethods[0]), {
+                    // we don't need to list by (webauthn) credentialId because we are looking for
+                    // a user to link to the current recipe user, but any search using the credentialId
+                    // of the current user "will identify the same user" which is the current one.
+                    webauthn: undefined,
+                }),
                 doUnionOfAccountInfo: true,
                 userContext,
             });
@@ -87,7 +92,12 @@ class Recipe extends recipeModule_1.default {
             // then, we try and find matching users based on the email / phone number / third party ID.
             let users = await this.recipeInterfaceImpl.listUsersByAccountInfo({
                 tenantId,
-                accountInfo: user.loginMethods[0],
+                accountInfo: Object.assign(Object.assign({}, user.loginMethods[0]), {
+                    // we don't need to list by (webauthn) credentialId because we are looking for
+                    // a user to link to the current recipe user, but any search using the credentialId
+                    // of the current user "will identify the same user" which is the current one.
+                    webauthn: undefined,
+                }),
                 doUnionOfAccountInfo: true,
                 userContext,
             });
@@ -172,7 +182,12 @@ class Recipe extends recipeModule_1.default {
             // primary user.
             let users = await this.recipeInterfaceImpl.listUsersByAccountInfo({
                 tenantId,
-                accountInfo,
+                accountInfo: Object.assign(Object.assign({}, accountInfo), {
+                    // we don't need to list by (webauthn) credentialId because we are looking for
+                    // a user to link to the current recipe user, but any search using the credentialId
+                    // of the current user "will identify the same user" which is the current one.
+                    webauthn: undefined,
+                }),
                 doUnionOfAccountInfo: true,
                 userContext,
             });

lib/build/recipe/accountlinking/types.d.ts

@@ -163,7 +163,7 @@ export declare type RecipeInterface = {
     getUser: (input: { userId: string; userContext: UserContext }) => Promise<User | undefined>;
     listUsersByAccountInfo: (input: {
         tenantId: string;
-        accountInfo: AccountInfo;
+        accountInfo: AccountInfoInput;
         doUnionOfAccountInfo: boolean;
         userContext: UserContext;
     }) => Promise<User[]>;
@@ -182,9 +182,17 @@ export declare type AccountInfo = {
         id: string;
         userId: string;
     };
+    webauthn?: {
+        credentialIds: string[];
+    };
+};
+export declare type AccountInfoInput = Omit<AccountInfo, "webauthn"> & {
+    webauthn?: {
+        credentialId: string;
+    };
 };
 export declare type AccountInfoWithRecipeId = {
-    recipeId: "emailpassword" | "thirdparty" | "passwordless";
+    recipeId: "emailpassword" | "thirdparty" | "passwordless" | "webauthn";
 } & AccountInfo;
 export declare type RecipeLevelUser = {
     tenantIds: string[];

lib/build/recipe/multifactorauth/index.d.ts

@@ -9,6 +9,7 @@ export default class Wrapper {
     static MultiFactorAuthClaim: import("./multiFactorAuthClaim").MultiFactorAuthClaimClass;
     static FactorIds: {
         EMAILPASSWORD: string;
+        WEBAUTHN: string;
         OTP_EMAIL: string;
         OTP_PHONE: string;
         LINK_EMAIL: string;

lib/build/recipe/multifactorauth/types.d.ts

@@ -136,6 +136,7 @@ export declare type GetPhoneNumbersForFactorsFromOtherRecipesFunc = (
       };
 export declare const FactorIds: {
     EMAILPASSWORD: string;
+    WEBAUTHN: string;
     OTP_EMAIL: string;
     OTP_PHONE: string;
     LINK_EMAIL: string;

lib/build/recipe/multifactorauth/types.js

@@ -17,6 +17,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.FactorIds = void 0;
 exports.FactorIds = {
     EMAILPASSWORD: "emailpassword",
+    WEBAUTHN: "webauthn",
     OTP_EMAIL: "otp-email",
     OTP_PHONE: "otp-phone",
     LINK_EMAIL: "link-email",

lib/build/recipe/webauthn/api/emailExists.d.ts

@@ -0,0 +1,9 @@
+// @ts-nocheck
+import { APIInterface, APIOptions } from "../";
+import { UserContext } from "../../../types";
+export default function emailExists(
+    apiImplementation: APIInterface,
+    tenantId: string,
+    options: APIOptions,
+    userContext: UserContext
+): Promise<boolean>;