feat: add secure payment confirmation classes and update payment handling logic

Author: Spomky

src/webauthn/src/AuthenticationExtensions/PaymentExtension.php

@@ -0,0 +1,29 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Webauthn\AuthenticationExtensions;
+
+use Webauthn\SecurePaymentConfirmation\PaymentCredentialInstrument;
+use Webauthn\SecurePaymentConfirmation\PaymentCurrencyAmount;
+
+final class PaymentExtension extends AuthenticationExtension
+{
+    public static function register(string $rpId, string $topOrigin, string $payeeName, string $payeeOrigin, PaymentCurrencyAmount $amount, PaymentCredentialInstrument $instrument): AuthenticationExtension
+    {
+        return self::create('payment', [
+            'isPayment' => true,
+            'rpId' => $rpId,
+            'topOrigin' => $topOrigin,
+            'payeeName' => $payeeName,
+            'payeeOrigin' => $payeeOrigin,
+            'currencyAmount' => $amount,
+            'credentialInstrument' => $instrument,
+        ]);
+    }
+
+    public static function authenticate(): AuthenticationExtension
+    {
+        return self::create('payment', ['isPayment' => true]);
+    }
+}

src/webauthn/src/SecurePaymentConfirmation/CollectedClientAdditionalPaymentData.php

@@ -0,0 +1,18 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Webauthn\SecurePaymentConfirmation;
+
+class CollectedClientAdditionalPaymentData
+{
+    public function __construct(
+        public string $rpId,
+        public string $topOrigin,
+        public string $payeeName,
+        public string $payeeOrigin,
+        public PaymentCurrencyAmount $total,
+        public PaymentCredentialInstrument $instrument,
+    ){
+    }
+}

src/webauthn/src/SecurePaymentConfirmation/CollectedClientPaymentData.php

@@ -0,0 +1,15 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Webauthn\SecurePaymentConfirmation;
+
+class CollectedClientPaymentData
+{
+
+    public function __construct(
+        public CollectedClientAdditionalPaymentData $payment,
+    )
+    {
+    }
+}

src/webauthn/src/SecurePaymentConfirmation/PaymentCredentialInstrument.php

@@ -0,0 +1,16 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Webauthn\SecurePaymentConfirmation;
+
+class PaymentCredentialInstrument
+{
+    public function __construct(
+        public string $displayName,
+        public string $icon,
+     public bool $iconMustBeShown = true,
+    )
+    {
+    }
+}

src/webauthn/src/SecurePaymentConfirmation/PaymentCurrencyAmount.php

@@ -0,0 +1,15 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Webauthn\SecurePaymentConfirmation;
+
+class PaymentCurrencyAmount
+{
+    public function __construct(
+        public string $currency,
+        public string $value,
+    )
+    {
+    }
+}

tests/library/Functional/AssertionTest.php

@@ -226,7 +226,7 @@ public function previouslyFixedKeyCanBeVerified(): void
                 $source,
                 $publicKeyCredential->response,
                 $publicKeyCredentialRequestOptions,
-                'tuleap-web.tuleap-aio-dev.docker',
+                'webauthn.spomky-labs.com',
                 '101'
             );
     }