1 files changed, 78 insertions, 0 deletions

diff --git a/app/controllers/register.go b/app/controllers/register.go
new file mode 100644
index 0000000..8698bda
--- /dev/null
+++ b/app/controllers/register.go
@@ -0,0 +1,78 @@
+package controllers
+
+import (
+        "net/http"
+
+        "code.crute.us/mcrute/golib/echo/session"
+        "code.crute.us/mcrute/ssh-proxy/app"
+        "code.crute.us/mcrute/ssh-proxy/app/models"
+        "github.com/go-webauthn/webauthn/protocol"
+        "github.com/go-webauthn/webauthn/webauthn"
+        "github.com/labstack/echo/v4"
+)
+
+type RegisterController[T app.AppSession] struct {
+        Logger       echo.Logger
+        Sessions     session.Store[T]
+        Users        models.UserStore
+        AuthSessions models.AuthSessionStore
+        Webauthn     *webauthn.WebAuthn
+}
+
+func (a *RegisterController[T]) HandleStart(c echo.Context) error {
+        user, err := a.Users.Get(c.Request().Context(), c.Param("username"))
+        if err != nil {
+                a.Logger.Errorf("Error getting user: %s", err)
+                return c.NoContent(http.StatusNotFound)
+        }
+
+        request, sessionData, err := a.Webauthn.BeginRegistration(user)
+        if err != nil {
+                a.Logger.Errorf("Error creating webauthn request: %s", err)
+                return c.NoContent(http.StatusInternalServerError)
+        }
+
+        session := a.Sessions.Get(c)
+        s := session.Self()
+        s.WebauthnSession = sessionData
+        a.Sessions.Update(c, session)
+
+        return c.JSON(http.StatusOK, request)
+}
+
+func (a *RegisterController[T]) HandleFinish(c echo.Context) error {
+        user, err := a.Users.Get(c.Request().Context(), c.Param("username"))
+        if err != nil {
+                a.Logger.Errorf("Error getting user: %s", err)
+                return c.NoContent(http.StatusNotFound)
+        }
+
+        response, err := protocol.ParseCredentialCreationResponseBody(c.Request().Body)
+        if err != nil {
+                a.Logger.Errorf("Error parsing credential response: %s", err)
+                return c.NoContent(http.StatusBadRequest)
+        }
+
+        session := a.Sessions.Get(c)
+        s := session.Self()
+
+        if s.WebauthnSession == nil {
+                a.Logger.Errorf("Webauthn session is not set")
+                return c.NoContent(http.StatusBadRequest)
+        }
+
+        credential, err := a.Webauthn.CreateCredential(user, *s.WebauthnSession, response)
+        if err != nil {
+                a.Logger.Errorf("Error creating credential: %s", err)
+                return c.NoContent(http.StatusBadRequest)
+        }
+
+        user.Fido2Credentials = append(user.Fido2Credentials, *credential)
+
+        if err := a.Users.Upsert(c.Request().Context(), user); err != nil {
+                a.Logger.Errorf("Error saving user: %s", err)
+                return c.NoContent(http.StatusInternalServerError)
+        }
+
+        return c.NoContent(http.StatusOK)
+}