chrome.platformKeys.getKeyPair: Check requested algorithm against certificate.
[chromium-blink-merge.git] / chrome / renderer / resources / extensions / platform_keys_custom_bindings.js
blob1f30c1fcaaf845a03a50dc5356696dafb08e8382
1 // Copyright 2015 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
5 // Custom binding for the platformKeys API.
7 var binding = require('binding').Binding.create('platformKeys');
8 var SubtleCrypto = require('platformKeys.SubtleCrypto').SubtleCrypto;
9 var getPublicKey = require('platformKeys.getPublicKey').getPublicKey;
10 var internalAPI = require('platformKeys.internalAPI');
12 var keyModule = require('platformKeys.Key');
13 var Key = keyModule.Key;
14 var KeyType = keyModule.KeyType;
15 var KeyUsage = keyModule.KeyUsage;
17 function createPublicKey(publicKeySpki, algorithm) {
18   return new Key(KeyType.public, publicKeySpki, algorithm, [KeyUsage.verify],
19                  true /* extractable */);
22 function createPrivateKey(publicKeySpki, algorithm) {
23   return new Key(KeyType.private, publicKeySpki, algorithm, [KeyUsage.sign],
24                  false /* not extractable */);
27 binding.registerCustomHook(function(api) {
28   var apiFunctions = api.apiFunctions;
29   var subtleCrypto = new SubtleCrypto('' /* tokenId */);
31   apiFunctions.setHandleRequest(
32       'selectClientCertificates', function(details, callback) {
33         internalAPI.selectClientCertificates(details, function(matches) {
34           callback($Array.map(matches, function(match) {
35             // internalAPI.selectClientCertificates returns publicExponent as
36             // ArrayBuffer, but it should be a Uint8Array.
37             if (match.keyAlgorithm.publicExponent) {
38               match.keyAlgorithm.publicExponent =
39                   new Uint8Array(match.keyAlgorithm.publicExponent);
40             }
41             return match;
42           }));
43         });
44       });
46   apiFunctions.setHandleRequest(
47       'subtleCrypto', function() { return subtleCrypto });
49   apiFunctions.setHandleRequest(
50       'getKeyPair', function(cert, params, callback) {
51         getPublicKey(cert, params, function(publicKey, algorithm) {
52           if (chrome.runtime.lastError) {
53             callback();
54             return;
55           }
56           callback(createPublicKey(publicKey, algorithm),
57                    createPrivateKey(publicKey, algorithm));
58         });
59       });
60 });
62 exports.binding = binding.generate();