summaryrefslogtreecommitdiff
path: root/chromium/device/fido/features.h
blob: 7219a16e2ff8d28475e699c03b3f54d431209cda (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
// Copyright 2018 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef DEVICE_FIDO_FEATURES_H_
#define DEVICE_FIDO_FEATURES_H_

#include "base/component_export.h"
#include "base/feature_list.h"
#include "base/metrics/field_trial_params.h"
#include "build/build_config.h"

namespace url {
class Origin;
}

namespace device {

#if defined(OS_WIN)
// Controls whether on Windows, U2F/CTAP2 requests are forwarded to the
// native WebAuthentication API, where available.
COMPONENT_EXPORT(DEVICE_FIDO)
extern const base::Feature kWebAuthUseNativeWinApi;
#endif  // defined(OS_WIN)

// Enable biometric enrollment in the security keys settings UI.
COMPONENT_EXPORT(DEVICE_FIDO)
extern const base::Feature kWebAuthBiometricEnrollment;

// Enable using a phone as a generic security key.
COMPONENT_EXPORT(DEVICE_FIDO)
extern const base::Feature kWebAuthPhoneSupport;

// Enable WebAuthn GetAssertion calls in cross-origin iframes if allowed by
// Feature Policy.
COMPONENT_EXPORT(DEVICE_FIDO)
extern const base::Feature kWebAuthGetAssertionFeaturePolicy;

#if defined(OS_CHROMEOS) || defined(OS_LINUX)
// Use a low connection latency BLE mode when connecting to caBLE
// authenticators.
COMPONENT_EXPORT(DEVICE_FIDO)
extern const base::Feature kWebAuthCableLowLatency;
#endif  // defined(OS_CHROMEOS) || defined(OS_LINUX)

#if defined(OS_CHROMEOS)
// Enable a ChromeOS platform authenticator
COMPONENT_EXPORT(DEVICE_FIDO)
extern const base::Feature kWebAuthCrosPlatformAuthenticator;
#endif  // defined(OS_CHROMEOS)

COMPONENT_EXPORT(DEVICE_FIDO)
extern const base::Feature kWebAuthAttestationBlockList;
COMPONENT_EXPORT(DEVICE_FIDO)
extern const base::FeatureParam<std::string> kWebAuthAttestationBlockedDomains;

// DoesMatchWebAuthAttestationBlockedDomains returns true if the
// |kWebAuthAttestationBlocked| feature is enabled and |origin| is listed
// in |kWebAuthAttestationBlockedDomains|.
COMPONENT_EXPORT(DEVICE_FIDO)
bool DoesMatchWebAuthAttestationBlockedDomains(const url::Origin& origin);

}  // namespace device

#endif  // DEVICE_FIDO_FEATURES_H_