webauthn 0.8.0.0 → 0.9.0.0

raw patch · 19 files changed

+99/−93 lines, 19 filesdep +cryptondep +crypton-x509dep +crypton-x509-storedep −cryptonitedep −x509dep −x509-storedep ~aesondep ~containersdep ~hashablePVP ok

version bump matches the API change (PVP)

Dependencies added: crypton, crypton-x509, crypton-x509-store, crypton-x509-validation

Dependencies removed: cryptonite, x509, x509-store, x509-validation

Dependency ranges changed: aeson, containers, hashable, jose, these, unordered-containers

API changes (from Hackage documentation)

Files

• changelog.md +7/−0
• src/Crypto/WebAuthn/AttestationStatementFormat/AndroidSafetyNet.hs +1/−1
• src/Crypto/WebAuthn/AttestationStatementFormat/TPM.hs +2/−2
• src/Crypto/WebAuthn/Cose/Internal/Verify.hs +7/−7
• src/Crypto/WebAuthn/Cose/PublicKeyWithSignAlg.hs +2/−2
• src/Crypto/WebAuthn/Cose/SignAlg.hs +1/−1
• src/Crypto/WebAuthn/Encoding/Binary.hs +5/−5
• src/Crypto/WebAuthn/Encoding/Internal/WebAuthnJson.hs +10/−10
• src/Crypto/WebAuthn/Internal/DateOrphans.hs +1/−1
• src/Crypto/WebAuthn/Metadata.hs +2/−2
• src/Crypto/WebAuthn/Metadata/Service/Decode.hs +1/−1
• src/Crypto/WebAuthn/Metadata/Service/Processing.hs +2/−2
• src/Crypto/WebAuthn/Metadata/Service/Types.hs +1/−1
• src/Crypto/WebAuthn/Model/Types.hs +6/−6
• src/Crypto/WebAuthn/Operation/Registration.hs +2/−2
• tests/Emulation/Client.hs +1/−1
• tests/Spec/Key.hs +3/−3
• tests/Spec/Types.hs +9/−10
• webauthn.cabal +36/−36

@@ -1,3 +1,10 @@+### 0.9.0.0++* [#182](https://github.com/tweag/webauthn/pull/182) Migrate to the crypton library ecosystem.+  crypton is a hard fork of cryptonite, which was no longer maintained.+  Minimum version bounds have been bumped accordingly.+* Restore GHC 8.8 compatibility.+ ### 0.8.0.0  * [#178](https://github.com/tweag/webauthn/pull/178) Remove orphan instance for ToJSON ByteString.

@@ -149,7 +149,7 @@   deriving newtype (IsString)  -- | This instance doesn't actually perform any validation-instance MonadError JOSE.Error m => JOSE.VerificationKeyStore m (JOSE.JWSHeader ()) p VerificationHostName where+instance (MonadError JOSE.Error m) => JOSE.VerificationKeyStore m (JOSE.JWSHeader ()) p VerificationHostName where   getVerificationKeys header _ hostName = do     chain <- case header ^? JOSE.x5c . _Just . JOSE.param of       Nothing -> throwError JOSE.JWSInvalidSignature

@@ -90,7 +90,7 @@   deriving (Show, Eq, Generic, ToJSON)  -- | [(spec)](https://trustedcomputinggroup.org/wp-content/uploads/TCG-_Algorithm_Registry_r1p32_pub.pdf)-toTPMAlgId :: MonadFail m => Word16 -> m TPMAlgId+toTPMAlgId :: (MonadFail m) => Word16 -> m TPMAlgId toTPMAlgId 0x0001 = pure TPMAlgRSA toTPMAlgId 0x0004 = pure TPMAlgSHA1 toTPMAlgId 0x000B = pure TPMAlgSHA256@@ -98,7 +98,7 @@ toTPMAlgId _ = fail "Unsupported or invalid TPM_ALD_IG"  -- | [(spec)](https://trustedcomputinggroup.org/wp-content/uploads/TCG-_Algorithm_Registry_r1p32_pub.pdf)-toCurveId :: MonadFail m => Word16 -> m Cose.CoseCurveECDSA+toCurveId :: (MonadFail m) => Word16 -> m Cose.CoseCurveECDSA toCurveId 0x0003 = pure Cose.CoseCurveP256 toCurveId 0x0004 = pure Cose.CoseCurveP384 toCurveId 0x0005 = pure Cose.CoseCurveP521

@@ -29,7 +29,7 @@     Cose.Signature (..),     verify, -    -- * Hash Conversions to cryptonite types+    -- * Hash Conversions to crypton types     SomeHashAlgorithm (..),     toCryptHashECDSA,     SomeHashAlgorithmASN1 (..),@@ -160,19 +160,19 @@       else Left "RSA Signature invalid" verify key _ _ = error $ "PublicKeyWithSignAlg invariant violated for public key " <> show key <> ". This should not occur unless the PublicKeyWithSignAlg module has a bug" --- | Some cryptonite 'Hash.HashAlgorithm' type, used as a return value of 'toCryptHashECDSA'-data SomeHashAlgorithm = forall a. Hash.HashAlgorithm a => SomeHashAlgorithm a+-- | Some crypton 'Hash.HashAlgorithm' type, used as a return value of 'toCryptHashECDSA'+data SomeHashAlgorithm = forall a. (Hash.HashAlgorithm a) => SomeHashAlgorithm a --- | Returns the cryptonite 'SomeHashAlgorithm' corresponding to this hash algorithm+-- | Returns the crypton 'SomeHashAlgorithm' corresponding to this hash algorithm toCryptHashECDSA :: Cose.CoseHashAlgECDSA -> SomeHashAlgorithm toCryptHashECDSA Cose.CoseHashAlgECDSASHA256 = SomeHashAlgorithm Hash.SHA256 toCryptHashECDSA Cose.CoseHashAlgECDSASHA384 = SomeHashAlgorithm Hash.SHA384 toCryptHashECDSA Cose.CoseHashAlgECDSASHA512 = SomeHashAlgorithm Hash.SHA512 --- | Some cryptonite 'RSA.HashAlgorithmASN1' type, used as a return value of 'toCryptHashRSA'-data SomeHashAlgorithmASN1 = forall a. RSA.HashAlgorithmASN1 a => SomeHashAlgorithmASN1 a+-- | Some crypton 'RSA.HashAlgorithmASN1' type, used as a return value of 'toCryptHashRSA'+data SomeHashAlgorithmASN1 = forall a. (RSA.HashAlgorithmASN1 a) => SomeHashAlgorithmASN1 a --- | Returns the cryptonite 'SomeHashAlgorithmASN1' corresponding to this hash algorithm+-- | Returns the crypton 'SomeHashAlgorithmASN1' corresponding to this hash algorithm toCryptHashRSA :: Cose.CoseHashAlgRSA -> SomeHashAlgorithmASN1 toCryptHashRSA Cose.CoseHashAlgRSASHA1 = SomeHashAlgorithmASN1 Hash.SHA1 toCryptHashRSA Cose.CoseHashAlgRSASHA256 = SomeHashAlgorithmASN1 Hash.SHA256

@@ -255,7 +255,7 @@             pure P.PublicKeyRSA {..}  -- | Same as 'os2ip', but throws an error if there are not exactly as many bytes as expected. Thus any successful result of this function will give the same 'BS.ByteString' back if encoded with @'i2ospOf_' size@.-os2ipWithSize :: MonadFail m => Int -> BS.ByteString -> m Integer+os2ipWithSize :: (MonadFail m) => Int -> BS.ByteString -> m Integer os2ipWithSize size bytes   | BS.length bytes == size = pure $ os2ip bytes   | otherwise =@@ -267,7 +267,7 @@           <> " was expected"  -- | Same as 'os2ip', but throws an error if there are leading zero bytes. Thus any successful result of this function will give the same 'BS.ByteString' back if encoded with 'i2osp'.-os2ipNoLeading :: MonadFail m => BS.ByteString -> m Integer+os2ipNoLeading :: (MonadFail m) => BS.ByteString -> m Integer os2ipNoLeading bytes   | leadingZeroCount == 0 = pure $ os2ip bytes   | otherwise =

@@ -230,7 +230,7 @@ -- | Converts a 'CoseSignAlg' to the corresponding integer value from the -- [COSE Algorithms registry](https://www.iana.org/assignments/cose/cose.xhtml#algorithms). -- The inverse operation is 'toCoseSignAlg'-fromCoseSignAlg :: Num p => CoseSignAlg -> p+fromCoseSignAlg :: (Num p) => CoseSignAlg -> p fromCoseSignAlg (CoseSignAlgRSA CoseHashAlgRSASHA1) = -65535 fromCoseSignAlg (CoseSignAlgRSA CoseHashAlgRSASHA512) = -259 fromCoseSignAlg (CoseSignAlgRSA CoseHashAlgRSASHA384) = -258

@@ -211,7 +211,7 @@ -- This function is useful for testing. encodeRawCollectedClientData ::   forall (c :: K.CeremonyKind) raw.-  SingI c =>+  (SingI c) =>   M.CollectedClientData c raw ->   M.CollectedClientData c 'True encodeRawCollectedClientData M.CollectedClientData {..} =@@ -248,7 +248,7 @@     -- > Append 0x66616c7365 (false) to result.     crossOriginValue = fromMaybe False ccdCrossOrigin -    jsonBuilder :: Aeson.ToJSON a => a -> Builder+    jsonBuilder :: (Aeson.ToJSON a) => a -> Builder     jsonBuilder = Aeson.fromEncoding . Aeson.toEncoding  -- | Removes all raw fields of a 'M.CollectedClientData'.@@ -267,7 +267,7 @@ -- structure, which is used for both attestation and assertion. decodeCollectedClientData ::   forall (c :: K.CeremonyKind).-  SingI c =>+  (SingI c) =>   BS.ByteString ->   Either Text (M.CollectedClientData c 'True) decodeCollectedClientData bytes = do@@ -392,7 +392,7 @@ -- 'M.adRawData'. This function is needed for an authenticator implementation. encodeRawAuthenticatorData ::   forall (c :: K.CeremonyKind) raw.-  SingI c =>+  (SingI c) =>   M.AuthenticatorData c raw ->   M.AuthenticatorData c 'True encodeRawAuthenticatorData M.AuthenticatorData {..} =@@ -460,7 +460,7 @@ -- structure. decodeAuthenticatorData ::   forall (c :: K.CeremonyKind).-  SingI c =>+  (SingI c) =>   BS.ByteString ->   Either Text (M.AuthenticatorData c 'True) decodeAuthenticatorData strictBytes = runPartialBinaryDecoder strictBytes $ do

@@ -65,7 +65,7 @@    -- | Encodes a value to its webauthn-json equivalent   encode :: a -> JSON a-  default encode :: Coercible a (JSON a) => a -> JSON a+  default encode :: (Coercible a (JSON a)) => a -> JSON a   encode = coerce  -- | An extension of 'Encode' to decoding. This typeclass is parametrized by a@@ -73,9 +73,9 @@ -- information to succeed, specifically -- 'M.SupportedAttestationStatementFormats', which can be provided with a -- 'MonadReader' constraint-class Encode a => Decode m a where+class (Encode a) => Decode m a where   -- | Decodes a webauthn-json type, potentially throwing a 'Text' error-  decode :: MonadError Text m => JSON a -> m a+  decode :: (MonadError Text m) => JSON a -> m a   default decode :: (MonadError Text m, Coercible (JSON a) a) => JSON a -> m a   decode = pure . coerce @@ -306,11 +306,11 @@     aecoCredProps <- decode credProps     pure $ T.AuthenticationExtensionsClientOutputs {..} -instance SingI c => Encode (T.CollectedClientData (c :: K.CeremonyKind) 'True) where+instance (SingI c) => Encode (T.CollectedClientData (c :: K.CeremonyKind) 'True) where   type JSON (T.CollectedClientData c 'True) = Base64UrlString   encode = Base64UrlString . T.unRaw . T.ccdRawData -instance SingI c => Decode m (T.CollectedClientData (c :: K.CeremonyKind) 'True) where+instance (SingI c) => Decode m (T.CollectedClientData (c :: K.CeremonyKind) 'True) where   decode = liftEither . B.decodeCollectedClientData . unBase64UrlString  instance Encode (T.AttestationObject 'True) where@@ -318,7 +318,7 @@   encode = Base64UrlString . B.encodeAttestationObject  instance-  MonadReader T.SupportedAttestationStatementFormats m =>+  (MonadReader T.SupportedAttestationStatementFormats m) =>   Decode m (T.AttestationObject 'True)   where   decode (Base64UrlString bytes) = do@@ -610,10 +610,10 @@   }   deriving (Eq, Show, Generic) -instance Aeson.FromJSON response => Aeson.FromJSON (PublicKeyCredential response) where+instance (Aeson.FromJSON response) => Aeson.FromJSON (PublicKeyCredential response) where   parseJSON = Aeson.genericParseJSON jsonEncodingOptions -instance Aeson.ToJSON response => Aeson.ToJSON (PublicKeyCredential response) where+instance (Aeson.ToJSON response) => Aeson.ToJSON (PublicKeyCredential response) where   toJSON = Aeson.genericToJSON jsonEncodingOptions  instance Encode (T.Credential 'K.Registration 'True) where@@ -626,7 +626,7 @@       }  instance-  MonadReader T.SupportedAttestationStatementFormats m =>+  (MonadReader T.SupportedAttestationStatementFormats m) =>   Decode m (T.Credential 'K.Registration 'True)   where   decode PublicKeyCredential {..} = do@@ -680,7 +680,7 @@       }  instance-  MonadReader T.SupportedAttestationStatementFormats m =>+  (MonadReader T.SupportedAttestationStatementFormats m) =>   Decode m (T.AuthenticatorResponse 'K.Registration 'True)   where   decode AuthenticatorAttestationResponse {..} = do

@@ -34,7 +34,7 @@ instance Time UTCTime where   timeFromElapsedP = posixSecondsToUTCTime . secondsToNominalDiffTime . realToFrac -instance HasResolution a => Timeable (Fixed a) where+instance (HasResolution a) => Timeable (Fixed a) where   timeGetElapsedP value = ElapsedP seconds nanos     where       ns :: Nano

@@ -1,6 +1,6 @@ -- | Stability: experimental--- A function for decoding a [FIDO Alliance Metadata Service](https://fidoalliance.org/metadata/)--- BLOB in order to be able to enforce a set of requirements on the authenticator+-- A function for decoding a [FIDO Alliance Metadata Service](https://fidoalliance.org/metadata/).+-- BLOB in order to be able to enforce a set of requirements on he uthenticator -- used, e.g. to only allow authenticators that have been -- [FIDO certified](https://fidoalliance.org/certification/functional-certification/). module Crypto.WebAuthn.Metadata

@@ -32,7 +32,7 @@ decodeMetadataPayload ServiceIDL.MetadataBLOBPayload {..} = do   let mpLegalHeader = legalHeader       mpNo = no-  mpNextUpdate <- either (This . NE.singleton) That $ decodeDate nextUpdate+  mpNextUpdate <- either (This . (NE.:| [])) That $ decodeDate nextUpdate   let errorOrEntries = mapMaybe decodeMetadataEntry entries   let errors = lefts errorOrEntries   let decodedEntries = rights errorOrEntries

@@ -60,7 +60,7 @@ import Data.HashMap.Strict (HashMap, (!?)) import qualified Data.HashMap.Strict as HashMap import Data.Hourglass (DateTime)-import Data.List.NonEmpty (NonEmpty, singleton)+import Data.List.NonEmpty (NonEmpty) import qualified Data.List.NonEmpty as NE import Data.Text (Text) import qualified Data.Text as Text@@ -186,7 +186,7 @@ -- important. jsonToPayload :: HashMap Text Value -> These (NonEmpty Text) Service.MetadataPayload jsonToPayload value = case Aeson.parseEither metadataPayloadParser value of-  Left err -> This (singleton $ Text.pack err)+  Left err -> This (Text.pack err NE.:| [])   Right payload -> decodeMetadataPayload payload  metadataPayloadParser :: HashMap Text Aeson.Value -> Aeson.Parser ServiceIDL.MetadataBLOBPayload

@@ -96,7 +96,7 @@ deriving instance ToJSON (MetadataEntry p)  -- | Same as 'MetadataEntry', but with its type parameter erased-data SomeMetadataEntry = forall p. SingI p => SomeMetadataEntry (MetadataEntry p)+data SomeMetadataEntry = forall p. (SingI p) => SomeMetadataEntry (MetadataEntry p)  -- | [(spec)](https://fidoalliance.org/specs/mds/fido-metadata-service-v3.0-ps-20210518.html#statusreport-dictionary) -- Same as 'StatementIDL.StatusReport', but fully decoded.

@@ -586,7 +586,7 @@ -- | [(spec)](https://www.w3.org/TR/webauthn-2/#user-handle) -- A user handle is an opaque [byte sequence](https://infra.spec.whatwg.org/#byte-sequence) -- with a maximum size of 64 bytes, and is not meant to be displayed to the user.-generateUserHandle :: MonadRandom m => m UserHandle+generateUserHandle :: (MonadRandom m) => m UserHandle generateUserHandle = UserHandle <$> getRandomBytes 16  -- | [(spec)](https://www.w3.org/TR/webauthn-2/#dom-publickeycredentialuserentity-displayname)@@ -650,7 +650,7 @@ -- Generates a random 'CredentialId' using 16 random bytes. -- This is only useful for authenticators, not for relying parties. -- This function is only included for completeness and testing purposes.-generateCredentialId :: MonadRandom m => m CredentialId+generateCredentialId :: (MonadRandom m) => m CredentialId generateCredentialId = CredentialId <$> getRandomBytes 16  -- | [(spec)](https://www.w3.org/TR/webauthn-2/#sctn-cryptographic-challenges)@@ -668,7 +668,7 @@ -- | [(spec)](https://www.w3.org/TR/webauthn-2/#sctn-cryptographic-challenges) -- In order to prevent replay attacks, the challenges MUST contain enough entropy -- to make guessing them infeasible. Challenges SHOULD therefore be at least 16 bytes long.-generateChallenge :: MonadRandom m => m Challenge+generateChallenge :: (MonadRandom m) => m Challenge generateChallenge = Challenge <$> getRandomBytes 16  -- | [(spec)](https://www.w3.org/TR/webauthn-2/#dom-publickeycredentialcreationoptions-timeout)@@ -1170,7 +1170,7 @@ -- | An arbitrary and potentially unstable JSON encoding, only intended for -- logging purposes. To actually encode and decode structures, use the -- "Crypto.WebAuthn.Encoding" modules-instance SingI c => ToJSON (CollectedClientData (c :: CeremonyKind) raw) where+instance (SingI c) => ToJSON (CollectedClientData (c :: CeremonyKind) raw) where   toJSON CollectedClientData {..} =     object       [ "webauthnKind" .= sing @c,@@ -1379,7 +1379,7 @@ -- This is used for 'singletonAttestationStatementFormat' data SomeAttestationStatementFormat   = forall a.-    AttestationStatementFormat a =>+    (AttestationStatementFormat a) =>     SomeAttestationStatementFormat a  -- | A type representing the set of supported attestation statement formats.@@ -1432,7 +1432,7 @@ -- 'Crypto.WebAuthn.Encoding.Binary.encodeAttestationObject' can be used to get -- the binary encoding of this type when @raw ~ 'True'@. data AttestationObject raw = forall a.-  AttestationStatementFormat a =>+  (AttestationStatementFormat a) =>   AttestationObject   { -- | [(spec)](https://www.w3.org/TR/webauthn-2/#authenticator-data)     -- The authenticator data structure encodes contextual bindings made by the

@@ -99,7 +99,7 @@         reReceivedSigningAlgorithm :: Cose.CoseSignAlg       }   | -- | There was some exception in the statement format specific section-    forall a. M.AttestationStatementFormat a => RegistrationAttestationFormatError a (NonEmpty (M.AttStmtVerificationError a))+    forall a. (M.AttestationStatementFormat a) => RegistrationAttestationFormatError a (NonEmpty (M.AttStmtVerificationError a))  deriving instance Show RegistrationError @@ -455,7 +455,7 @@ -- Results in the type of attestation and the model. validateAttestationChain ::   forall raw p a.-  M.AttestationStatementFormat a =>+  (M.AttestationStatementFormat a) =>   M.Credential 'M.Registration raw ->   a ->   M.AttestationType ('M.Verifiable p) ->

@@ -100,7 +100,7 @@ -- authenticator. MonadRandom is required for signing using Ed25519 which -- requires a random number to be generated during signing. There exists -- methods to not rely on a random number, but these have not been implemented--- in the cryptonite library we rely on.+-- in the crypton library we rely on. clientAssertion ::   (MonadFail m, Random.MonadRandom m) =>   M.CredentialOptions 'M.Authentication ->

@@ -54,7 +54,7 @@   }   deriving (Eq, Show) -newKeyPair :: MonadRandom m => Cose.CoseSignAlg -> m KeyPair+newKeyPair :: (MonadRandom m) => Cose.CoseSignAlg -> m KeyPair newKeyPair Cose.CoseSignAlgEdDSA = do   privKey' <- Ed25519.generateSecretKey   let privKey =@@ -118,7 +118,7 @@       cosePubKey = fromRight (error "unreachable") $ Cose.makePublicKeyWithSignAlg pubKey (Cose.CoseSignAlgRSA hash)   pure KeyPair {..} -sign :: MonadRandom m => Cose.CoseSignAlg -> PrivateKey -> BS.ByteString -> m BS.ByteString+sign :: (MonadRandom m) => Cose.CoseSignAlg -> PrivateKey -> BS.ByteString -> m BS.ByteString sign Cose.CoseSignAlgEdDSA PrivateKeyEdDSA {eddsaCurve = Cose.CoseCurveEd25519, ..} msg = do   let privKey = case Ed25519.secretKey eddsaBytes of         CryptoFailed err -> error $ show err@@ -158,7 +158,7 @@ toX509 :: Cose.UncheckedPublicKey -> X509.PubKey toX509 Cose.PublicKeyEdDSA {eddsaCurve = Cose.CoseCurveEd25519, ..} =   let key = case Ed25519.publicKey $ Cose.unEdDSAKeyBytes eddsaX of-        CryptoFailed err -> error $ "Failed to create a cryptonite Ed25519 public key of a bytestring with size " <> show (BS.length $ Cose.unEdDSAKeyBytes eddsaX) <> ": " <> show err+        CryptoFailed err -> error $ "Failed to create a crypton Ed25519 public key of a bytestring with size " <> show (BS.length $ Cose.unEdDSAKeyBytes eddsaX) <> ": " <> show err         CryptoPassed res -> res    in X509.PubKeyEd25519 key toX509 Cose.PublicKeyECDSA {..} =

@@ -140,17 +140,16 @@  instance Arbitrary ArbitraryAttestationStatementFormat where   arbitrary =-    elements-      [ ArbitraryAttestationStatementFormat None.Format-      -- ArbitraryAttestationStatementFormat Packed.Format,-      -- ArbitraryAttestationStatementFormat FidoU2F.Format,-      -- ArbitraryAttestationStatementFormat AndroidKey.Format-      ]+    return (ArbitraryAttestationStatementFormat None.Format) +-- ArbitraryAttestationStatementFormat Packed.Format,+-- ArbitraryAttestationStatementFormat FidoU2F.Format,+-- ArbitraryAttestationStatementFormat AndroidKey.Format+ instance Arbitrary M.SignatureCounter where   arbitrary = M.SignatureCounter <$> arbitrary -instance SingI c => Arbitrary (M.AuthenticatorData c 'False) where+instance (SingI c) => Arbitrary (M.AuthenticatorData c 'False) where   arbitrary = M.AuthenticatorData <$> arbitrary <*> arbitrary <*> arbitrary <*> arbitrary <*> arbitrary <*> arbitrary  instance Arbitrary M.Challenge where@@ -167,7 +166,7 @@ instance Arbitrary M.AuthenticatorDataFlags where   arbitrary = M.AuthenticatorDataFlags <$> arbitrary <*> arbitrary -instance SingI c => Arbitrary (M.AttestedCredentialData c 'False) where+instance (SingI c) => Arbitrary (M.AttestedCredentialData c 'False) where   arbitrary = case sing @c of     M.SRegistration -> M.AttestedCredentialData <$> arbitrary <*> arbitrary <*> arbitrary <*> arbitrary     M.SAuthentication -> pure M.NoAttestedCredentialData@@ -282,10 +281,10 @@       <*> arbitrary       <*> arbitrary -shuffledSubsetWith :: Ord a => Set a -> Gen [a]+shuffledSubsetWith :: (Ord a) => Set a -> Gen [a] shuffledSubsetWith set = subsetWith set >>= shuffle . Set.toList -subsetWith :: Ord a => Set a -> Gen (Set a)+subsetWith :: (Ord a) => Set a -> Gen (Set a) subsetWith set = Set.fromList <$> sublistOf (Set.toList set)  parameters :: Gen [M.CredentialParameters]

@@ -1,6 +1,6 @@ cabal-version: 2.4 name: webauthn-version: 0.8.0.0+version: 0.9.0.0 license: Apache-2.0 license-file: LICENSE copyright:@@ -35,7 +35,7 @@   however follow the [PVP](https://pvp.haskell.org/) and properly label changes   with the appropriate version increase. category: Web, Authentication-tested-with: GHC == 9.2.4+tested-with: GHC == 9.4.7 extra-source-files:   README.md,   changelog.md,@@ -69,37 +69,37 @@   import: sanity   hs-source-dirs: src   build-depends:-    base                  >= 4.13.0 && < 4.20,-    aeson                 >= 1.4.7 && < 2.3,-    asn1-encoding         >= 0.9.6 && < 0.10,-    asn1-parse            >= 0.9.5 && < 0.10,-    asn1-types            >= 0.3.4 && < 0.4,-    base16-bytestring     >= 1.0.0 && < 1.1,-    base64-bytestring     >= 1.2.1 && < 1.3,-    binary                >= 0.8.7 && < 0.9,-    bytestring            >= 0.10.10 && < 0.13,-    cborg                 >= 0.2.4 && < 0.3,-    containers            >= 0.6.2 && < 0.7,-    cryptonite            >= 0.27 && < 0.31,-    file-embed            >= 0.0.11 && < 0.1,-    hashable              >= 1.3.0 && < 1.5,-    hourglass             >= 0.2.12 && < 0.3,-    jose                  >= 0.8.5 && < 0.11,-    lens                  >= 4.18.1 && < 5.3,-    memory                >= 0.15.0 && < 0.19,-    monad-time            >= 0.3.1 && < 0.5,-    mtl                   >= 2.2.2 && < 2.4,-    serialise             >= 0.2.3 && < 0.3,-    singletons            >= 2.6 && < 3.2,-    text                  >= 1.2.4 && < 2.2,-    these                 >= 1.1 && < 1.3,-    time                  >= 1.9.3 && < 1.14,-    unordered-containers  >= 0.2.11 && < 0.3,-    uuid                  >= 1.3.13 && < 1.4,-    validation            >= 1.1 && < 1.3,-    x509                  >= 1.7.5 && < 1.8,-    x509-store            >= 1.6.7 && < 1.7,-    x509-validation       >= 1.6.12 && < 1.7+    base                    >= 4.13.0 && < 4.20,+    aeson                   >= 2.0.1 && < 2.3,+    asn1-encoding           >= 0.9.6 && < 0.10,+    asn1-parse              >= 0.9.5 && < 0.10,+    asn1-types              >= 0.3.4 && < 0.4,+    base16-bytestring       >= 1.0.0 && < 1.1,+    base64-bytestring       >= 1.2.1 && < 1.3,+    binary                  >= 0.8.7 && < 0.9,+    bytestring              >= 0.10.10 && < 0.13,+    cborg                   >= 0.2.4 && < 0.3,+    containers              >= 0.6.2.1 && < 0.7,+    crypton                 >= 0.32 && < 0.35,+    crypton-x509            >= 1.7.6 && < 1.8,+    crypton-x509-store      >= 1.6.9 && < 1.7,+    crypton-x509-validation >= 1.6.12 && < 1.7,+    file-embed              >= 0.0.11 && < 0.1,+    hashable                >= 1.3.2 && < 1.5,+    hourglass               >= 0.2.12 && < 0.3,+    jose                    >= 0.11 && < 0.12,+    lens                    >= 4.18.1 && < 5.3,+    memory                  >= 0.15.0 && < 0.19,+    monad-time              >= 0.3.1 && < 0.5,+    mtl                     >= 2.2.2 && < 2.4,+    serialise               >= 0.2.3 && < 0.3,+    singletons              >= 2.6 && < 3.2,+    text                    >= 1.2.4 && < 2.2,+    these                   >= 1.1.1.1 && < 1.3,+    time                    >= 1.9.3 && < 1.14,+    unordered-containers    >= 0.2.12 && < 0.3,+    uuid                    >= 1.3.13 && < 1.4,+    validation              >= 1.1 && < 1.3,   exposed-modules:     Crypto.WebAuthn,     Crypto.WebAuthn.AttestationStatementFormat,@@ -170,7 +170,9 @@     asn1-encoding,     bytestring,     containers,-    cryptonite,+    crypton,+    crypton-x509,+    crypton-x509-store,     directory,     filepath,     hourglass,@@ -188,5 +190,3 @@     uuid,     validation,     webauthn,-    x509,-    x509-store