feat(webauthn): Extend authenticator model to store AAGUID and origin

apps/dev/nextjs/prisma/schema.prisma

@@ -34,9 +34,9 @@ model Session {
 }
 
 model User {
-  id            String    @id @default(cuid())
+  id            String          @id @default(cuid())
   name          String?
-  email         String?   @unique
+  email         String?         @unique
   emailVerified DateTime?
   image         String?
   accounts      Account[]
@@ -62,6 +62,7 @@ model Authenticator {
   credentialDeviceType String
   credentialBackedUp   Boolean
   transports           String?
+  credentialAAGUID     String?
 
   user User @relation(fields: [userId], references: [id], onDelete: Cascade)
 }

packages/core/src/lib/utils/webauthn-utils.ts

@@ -377,7 +377,7 @@ export async function verifyRegister(
   }
 
   // Build a new authenticator
-  const authenticator = {
+  const authenticator: Authenticator = {
     providerAccountId: account.providerAccountId,
     counter: verification.registrationInfo.counter,
     credentialID: toBase64(verification.registrationInfo.credentialID),
@@ -390,6 +390,7 @@ export async function verifyRegister(
       (data as RegistrationResponseJSON).response
         .transports as AuthenticatorTransport[]
     ),
+    credentialAAGUID: verification.registrationInfo.aaguid,
   }
 
   // Return created stuff

packages/core/src/types.ts

@@ -396,6 +396,10 @@ export interface Authenticator {
    * Device type of the authenticator.
    */
   credentialDeviceType: string
+  /**
+   * AAGUID of the authenticator. Useful to identify authenticators in the UI, see: https://github.com/passkeydeveloper/passkey-authenticator-aaguids
+   */
+  credentialAAGUID: string
 }
 
 /** @internal */