42 Improve Token Security & Extend wac.install

[type1fool]

Overview

Resolves #42
Resolves #41

This PR contains two major changes:

• Tokens are stored in session cookies instead of window.sessionStorage.
• The wac.install Mix Task has been extended to generate more files and inject routes into the app's router.

Changes

• Replaced TokenComponent with Session controller
• Updated wac.install to add options for bypassing generators
• Updated generators:
  • Contexts
  • Fixtures
  • Migrations
  • Schemas
  • Tests
• Added generators:
  • Controllers
  • LiveViews
  • Router
  • Session Hooks
• Moved schemas into Identity context
• Updated JS hooks to use ESM syntax
• Bumped to v0.6.0

Video Demo

https://youtu.be/GGWM_ZM3xlg

Tests

WebauthnComponents

mix test

...EVENTS_OMITTED...

Finished in 0.1 seconds (0.1s async, 0.00s sync)
10 tests, 0 failures

Randomized with seed 373636

Fresh Demo App w/ WAC

mix test
.......................
Finished in 0.2 seconds (0.2s async, 0.00s sync)
23 tests, 0 failures

Randomized with seed 313260

UI Screenshots

The following screenshots were captured in Chrome on MacOS.

/sign-in

Validation

Invalid Email

Valid Email

Registration

Authentication

🚨 Firefox

Firefox does not appear to support MacOS Passkeys by default. After attempting to register a user in Firefox, the browser prompted to activate the authenticator, but nothing happened when I pressed the laptop's TouchID.

Collaborators

1. @type1fool
2. @doorgan

[type1fool]

Example Success Output

mix wac.install
==> webauthn_components
Compiling 1 file (.ex)
==> passkeys
* creating lib/passkeys/identity.ex
* creating lib/passkeys/identity/user.ex
* creating lib/passkeys/identity/user_key.ex
* creating lib/passkeys/identity/user_token.ex
* creating priv/repo/migrations/20230913020225_users.exs
* creating priv/repo/migrations/20230913020226_user_keys.exs
* creating priv/repo/migrations/20230913020227_user_tokens.exs
* creating test/passkeys/identity_test.exs
* creating test/support/user_fixtures.ex
* creating lib/passkeys_web/controllers/session.ex
* creating lib/passkeys_web/session_hooks/assign_user.ex
* creating lib/passkeys_web/session_hooks/require_user.ex
* creating lib/passkeys_web/live/authentication_live.ex
* creating lib/passkeys_web/live/authentication_live.html.heex
* updating lib/passkeys_web/router.ex

✅ Successfully scaffolded WebauthnComponents for Elixir.Passkeys

📚 Resources

- Repo: https://github.com/liveshowy/webauthn_components
- Hex:  https://hex.pm/packages/webauthn_components
- Docs: https://hexdocs.pm/webauthn_components/readme.html

Example Error Output

mix wac.install
Compiling 1 file (.ex)
* creating lib/passkeys/identity.ex
* creating lib/passkeys/identity/user.ex
* creating lib/passkeys/identity/user_key.ex
* creating lib/passkeys/identity/user_token.ex
* creating priv/repo/migrations/20230913020344_users.exs
* creating priv/repo/migrations/20230913020345_user_keys.exs
* creating priv/repo/migrations/20230913020346_user_tokens.exs
* creating test/passkeys/identity_test.exs
* creating test/support/user_fixtures.ex
* creating lib/passkeys_web/controllers/session.ex
* creating lib/passkeys_web/session_hooks/assign_user.ex
* creating lib/passkeys_web/session_hooks/require_user.ex
* creating lib/passkeys_web/live/authentication_live.ex
* creating lib/passkeys_web/live/authentication_live.html.heex
** (Wac.Gen.RouterError) 🫣 Unable to find the first router scope

🙏 Please review the WebauthnComponents issue tracker and open a new issue if necessary.
👉 https://github.com/liveshowy/webauthn_components/issues
👇 For debugging, please include this error and the stacktrace below:

    (webauthn_components 0.6.0) lib/wac_gen/router.ex:95: Wac.Gen.Router.insert_routes/2
    (webauthn_components 0.6.0) lib/wac_gen/router.ex:52: Wac.Gen.Router.update_router/1
    (webauthn_components 0.6.0) lib/mix/tasks/wac.install.ex:106: Mix.Tasks.Wac.Install.run/1
    (mix 1.15.4) lib/mix/task.ex:447: anonymous fn/3 in Mix.Task.run_task/5
    (mix 1.15.4) lib/mix/cli.ex:92: Mix.CLI.run_task/2
    /Users/owenbickford/.asdf/installs/elixir/1.15.4-otp-26/bin/mix:2: (file)
    (elixir 1.15.4) lib/code.ex:1435: Code.require_file/2