Add support for FIDO Convenience MDS

packages/server/src/helpers/fetch.ts

@@ -2,14 +2,14 @@
  * A simple method for requesting data via standard `fetch`. Should work
  * across multiple runtimes.
  */
-export function fetch(url: string): Promise<Response> {
-  return _fetchInternals.stubThis(url);
+export function fetch(...args: Parameters<typeof globalThis.fetch>): Promise<Response> {
+  return _fetchInternals.stubThis(...args);
 }
 
 /**
  * Make it possible to stub the return value during testing
  * @ignore Don't include this in docs output
  */
 export const _fetchInternals = {
-  stubThis: (url: string) => globalThis.fetch(url),
+  stubThis: (...args: Parameters<typeof globalThis.fetch>) => globalThis.fetch(...args),
 };

packages/server/src/helpers/isCertRevoked.test.ts

@@ -315,7 +315,7 @@ Deno.test('should check all CRL URLs in issuer cert for revocation status', asyn
   using _mockFetch = stub(
     _fetchInternals,
     'stubThis',
-    (url: string) => {
+    (url: RequestInfo | URL) => {
       if (url === CRL_URL) {
         return Promise.resolve(new Response(crl1.rawData));
       } else {

packages/server/src/metadata/convenienceMDSTypes.ts

@@ -0,0 +1,35 @@
+import type { DataURLPNGOrSVGString, DataURLSVGString, FriendlyNames } from './mdsTypes.ts';
+
+/**
+ * Passkey Provider metadata, including localized names, and light and dark mode icons.
+ *
+ * See https://fidoalliance.org/specs/mds/fido-convenience-metadata-service-v1.0-ps-20250521.html#sctn-convenience-details
+ */
+export type ProviderMetadata = {
+  friendlyNames?: FriendlyNames;
+  icon?: DataURLPNGOrSVGString;
+  iconDark?: DataURLSVGString;
+  providerLogoLight?: DataURLSVGString;
+  providerLogoDark?: DataURLSVGString;
+};
+
+/**
+ * A dictionary of payload data within a Convenience MDS blob. Except for the `"no"` property,
+ * keys in this dictionary are AAGUIDs that map to `ProviderMetadata` dictionaries.
+ *
+ * Example:
+ * ```json
+ * {
+ *   "no": 1,
+ *   "12345678-1234-1234-1234-12345678": {...},
+ *   "87654321-4321-4321-4321-87654321": {...}
+ * }
+ * ```
+ *
+ * See https://fidoalliance.org/specs/mds/fido-convenience-metadata-service-v1.0-ps-20250521.html#sctn-cmds-pe
+ *
+ * @property no - A serial number that increments whenever the convenience metadata payload is updated
+ */
+export type ConvenienceMDSPayload =
+  & { no: number }
+  & { [aaguid: string]: ProviderMetadata };

packages/server/src/metadata/mdsTypes.ts

@@ -169,9 +169,14 @@ export type MetadataStatement = {
   tcDisplayPNGCharacteristics?: DisplayPNGCharacteristicsDescriptor[];
   attestationRootCertificates: string[];
   ecdaaTrustAnchors?: EcdaaTrustAnchor[];
-  icon?: string;
   supportedExtensions?: ExtensionDescriptor[];
   authenticatorGetInfo?: AuthenticatorGetInfo;
+  // Same values as in Convenience Metadata
+  friendlyNames?: FriendlyNames;
+  icon?: DataURLPNGOrSVGString;
+  iconDark?: DataURLSVGString;
+  providerLogoLight?: DataURLSVGString;
+  providerLogoDark?: DataURLSVGString;
 };
 
 /**
@@ -314,3 +319,43 @@ export type AuthenticatorGetInfo = {
   pinProtocols?: number[];
   algorithms?: { type: 'public-key'; alg: number }[];
 };
+
+/**
+ * Localized names, typically a company's trade name for a given region.
+ *
+ * Example:
+ * ```json
+ * {
+ *   "en-US": "SimpleWebAuthn",
+ *   "ja-JP": "シンプルウェブオースン"
+ * }
+ * ```
+ *
+ * See https://fidoalliance.org/specs/mds/fido-convenience-metadata-service-v1.0-ps-20250521.html#sctn-types-fn
+ */
+export type FriendlyNames = {
+  [ietfLanguageCode: string]: string;
+};
+
+/**
+ * A `data:` URL-encoded string containing base64-encoded PNG or SVG data.
+ *
+ * Example:
+ * ```json
+ * "data:image/svg+xml;base64,..."
+ * ```
+ * ```json
+ * "data:image/png;base64,..."
+ * ```
+ */
+export type DataURLPNGOrSVGString = string;
+
+/**
+ * A `data:` URL-encoded string containing base64-encoded SVG data.
+ *
+ * Example:
+ * ```json
+ * "data:image/svg+xml;base64,..."
+ * ```
+ */
+export type DataURLSVGString = string;