mirror of
https://github.com/gravitational/teleport.git
synced 2026-10-31 20:39:37 +08:00
Alan Parra
c089164ce1
Introduce the touchid package and add the ability to register and login using Secure Enclave keys. The code is not yet wired to tsh, plus there are additional parts to come (listing and deleting keys). This is tricky to properly execute, as the Secure Enclave requires, at the very least, a signed binary and a provisioning profile installed. Future PRs will attempt to bridge that gap and provide ways for Teleport devs to compile and run this locally as well (but not for external devs, sorry). I've elected to keep native as simple as I could. Objc uses ARC for memory management and good old C uses malloc/free, but there are relatively few naked pointers (many of which are handled by Go with defer-frees). I've kept the language boundary in plan C, so it's easier to reason about the Go<->C bridge. The package is protected by the touchid build tag, but a good part of it exists outside of it - that is in hope that it gets well exercised by CI. In the near future the build tag will be used as a proxy for good builds (ie, if tagged then we assume signed, notarized, etc) - this makes releasing safer in the short time, without us having to code too many safeguards. #9160 * Implement touch ID registration and login * Validate raw public key length * Use string concatenation in place of fmt.Sprintf * Keep pubKeyFromRawAppleKey calls centered on api.go * Compare strings using NSString (instead of string.h) * Break early in params loop. Comments. * Add license to headers * Move native var. Non-pointer receiver. C tweaks. * Use SecCopyErrorMessageString * Guard against overflows. Release infos without defer.
25 lines
852 B
Objective-C
25 lines
852 B
Objective-C
// Copyright 2022 Gravitational, Inc
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
#ifndef COMMON_H_
|
|
#define COMMON_H_
|
|
|
|
#import <Foundation/Foundation.h>
|
|
|
|
// CopyNSString duplicates an NSString into an UTF-8 encoded C string.
|
|
// The caller is expected to free the returned pointer.
|
|
char *CopyNSString(NSString *val);
|
|
|
|
#endif // COMMON_H_
|