Attachment #411602 for bug #217559

View Details Raw Unified Return to Bug 217559

| Differences between



2020-10-14  Jiewen Tan  <jiewen_tan@apple.com>

        [WebAuthn] Implement a dummy WebAuthnProcess
        https://bugs.webkit.org/show_bug.cgi?id=217559
        <rdar://problem/70168749>

        Reviewed by Brent Fulgham.

        No tests.

        * en.lproj/Localizable.strings:
        Provides a name for the WebAuthn process.

2020-10-15  Keith Rollin  <krollin@apple.com>

        Lessen the reliance on VPATH in WebCore/DerivedSources.make



2020-10-14  Jiewen Tan  <jiewen_tan@apple.com>

        [WebAuthn] Implement a dummy WebAuthnProcess
        https://bugs.webkit.org/show_bug.cgi?id=217559
        <rdar://problem/70168749>

        Reviewed by Brent Fulgham.

        Previous patch r268248 introduces a new daemon to handle all WebAuthn requests. However, after more deeper investigations, the daemon
        story is not very compelling for WebKit. Here are the two major road blockers:
        1) The major one is on macOS. New daemons cannot be installed without a system update. It means relocatable Safari (e.g. STP)
        and staged Safari on downlevel OSes will not get this feature. And relocatable STP can only utilize the system daemon. This
        seems a bummer especially for the STP case given it is heavily used to test latest web features.
        2) Additional plumbing is needed for testing and engineering builds. This problem is specific to WebKit and is on both macOS and iOS.
        WebKit doesn't build roots to test engineering builds, which is required to update the plist on the above location. Hence, a separate
        configuration is needed to generate a different plist that points to the right engineering binary and additional scripts will be needed
        to ask launchd to load the plist before running any tests. Some extra exercises are probably needed to not confuse launchd about the
        engineering binary and system binary as well.

        Given the above constraints, a new architecture is proposed to make the daemon a WebKit XPC service/process instead and leave the launchd
        event handler to a new Safari daemon. The launchd related feature is only on iOS and therefore it really doesn't make sense to overcome
        all the above macOS constraints. Having different architectures on iOS (a daemon) and on macOS (a XPC service) accordingly will introduce
        tons of overhead for maintainance as well. That's why relying on a Safari daemon to do the job is the most reasonable option.

        This patch therefore focuses on making the WebAuthn process happen and removes the WebAuthn daemon.

        * CMakeLists.txt:
        * Configurations/WebAuthnService.xcconfig: Renamed from Source/WebKit/Configurations/WebAuthenticationAgent.xcconfig.
        * Configurations/WebKit.xcconfig:
        * Daemons/WebAuthenticationAgent/WebAuthenticationAgent.entitlements: Removed.
        * Daemons/WebAuthenticationAgent/com.apple.webkit.WebAuthenticationAgent.plist: Removed.
        * DerivedSources-input.xcfilelist:
        * DerivedSources-output.xcfilelist:
        * DerivedSources.make:
        Paperwork for building the new WebAuthn process.

        * Platform/ExtraPrivateSymbolsForTAPI.h:
        * Shared/AuxiliaryProcess.h:
        * Shared/EntryPointUtilities/Cocoa/XPCService/XPCServiceEntryPoint.h:
        * Shared/EntryPointUtilities/Cocoa/XPCService/XPCServiceMain.mm:
        (WebKit::XPCServiceEventHandler):
        * Shared/mac/AuxiliaryProcessMac.mm:
        (WebKit::processStorageClass):
        (WebKit::sandboxDirectory):
        Paperwork for introducing the new WebAuthn process. Mostly copied from GPU process.

        * Sources.txt:
        * SourcesCocoa.txt:
        Paperwork for building the new WebAuthn process.

        * UIProcess/AuxiliaryProcessProxy.cpp:
        (WebKit::AuxiliaryProcessProxy::getLaunchOptions):
        * UIProcess/Launcher/ProcessLauncher.h:
        * UIProcess/Launcher/mac/ProcessLauncherMac.mm:
        (WebKit::serviceName):
        (WebKit::shouldLeakBoost):
        * UIProcess/WebAuthentication/WebAuthnProcessProxy.cpp: Added.
        (WebKit::WebAuthnProcessProxy::singleton):
        (WebKit::WebAuthnProcessProxy::WebAuthnProcessProxy):
        (WebKit::WebAuthnProcessProxy::getLaunchOptions):
        (WebKit::WebAuthnProcessProxy::connectionWillOpen):
        (WebKit::WebAuthnProcessProxy::processWillShutDown):
        (WebKit::WebAuthnProcessProxy::getWebAuthnProcessConnection):
        (WebKit::WebAuthnProcessProxy::webAuthnProcessCrashed):
        (WebKit::WebAuthnProcessProxy::didClose):
        (WebKit::WebAuthnProcessProxy::didReceiveInvalidMessage):
        (WebKit::WebAuthnProcessProxy::didFinishLaunching):
        (WebKit::WebAuthnProcessProxy::updateProcessAssertion):
        * UIProcess/WebAuthentication/WebAuthnProcessProxy.h: Added.
        * UIProcess/WebAuthentication/WebAuthnProcessProxy.messages.in: Added.
        * UIProcess/WebProcessPool.cpp:
        (WebKit::WebProcessPool::getWebAuthnProcessConnection):
        * UIProcess/WebProcessPool.h:
        * UIProcess/WebProcessProxy.cpp:
        (WebKit::WebProcessProxy::getWebAuthnProcessConnection):
        * UIProcess/WebProcessProxy.h:
        * UIProcess/WebProcessProxy.messages.in:
        * WebAuthnProcess/EntryPoint/Cocoa/XPCService/WebAuthnService/Info-OSX.plist: Copied from Source/WebKit/Daemons/WebAuthenticationAgent/Info.plist.
        * WebAuthnProcess/EntryPoint/Cocoa/XPCService/WebAuthnService/Info-iOS.plist: Renamed from Source/WebKit/Daemons/WebAuthenticationAgent/Info.plist.
        * WebAuthnProcess/EntryPoint/Cocoa/XPCService/WebAuthnServiceEntryPoint.mm: Copied from Source/WebKit/Daemons/WebAuthenticationAgent/main.mm.
        (WebKit::WebAuthnServiceInitializerDelegate::WebAuthnServiceInitializerDelegate):
        (WebKit::initializeAuxiliaryProcess<WebAuthnProcess>):
        (WEBAUTHEN_SERVICE_INITIALIZER):
        * WebAuthnProcess/WebAuthnConnectionToWebProcess.cpp: Added.
        (WebKit::WebAuthnConnectionToWebProcess::create):
        (WebKit::WebAuthnConnectionToWebProcess::WebAuthnConnectionToWebProcess):
        (WebKit::WebAuthnConnectionToWebProcess::~WebAuthnConnectionToWebProcess):
        (WebKit::WebAuthnConnectionToWebProcess::didClose):
        (WebKit::WebAuthnConnectionToWebProcess::didReceiveInvalidMessage):
        * WebAuthnProcess/WebAuthnConnectionToWebProcess.h: Copied from Source/WebKit/Daemons/WebAuthenticationAgent/main.mm.
        (WebKit::WebAuthnConnectionToWebProcess::connection):
        (WebKit::WebAuthnConnectionToWebProcess::WebAuthnProcessProcess):
        (WebKit::WebAuthnConnectionToWebProcess::webProcessIdentifier const):
        * WebAuthnProcess/WebAuthnConnectionToWebProcess.messages.in: Added.
        * WebAuthnProcess/WebAuthnProcess.cpp: Added.
        (WebKit::WebAuthnProcess::WebAuthnProcess):
        (WebKit::WebAuthnProcess::~WebAuthnProcess):
        (WebKit::WebAuthnProcess::createWebAuthnConnectionToWebProcess):
        (WebKit::WebAuthnProcess::removeWebAuthnConnectionToWebProcess):
        (WebKit::WebAuthnProcess::connectionToWebProcessClosed):
        (WebKit::WebAuthnProcess::shouldTerminate):
        (WebKit::WebAuthnProcess::didClose):
        (WebKit::WebAuthnProcess::lowMemoryHandler):
        (WebKit::WebAuthnProcess::initializeWebAuthnProcess):
        (WebKit::WebAuthnProcess::prepareToSuspend):
        (WebKit::WebAuthnProcess::processDidResume):
        (WebKit::WebAuthnProcess::resume):
        (WebKit::WebAuthnProcess::processDidTransitionToForeground):
        (WebKit::WebAuthnProcess::processDidTransitionToBackground):
        (WebKit::WebAuthnProcess::webProcessConnection const):
        * WebAuthnProcess/WebAuthnProcess.h: Added.
        * WebAuthnProcess/WebAuthnProcess.messages.in: Added.
        * WebAuthnProcess/WebAuthnProcessCreationParameters.cpp: Copied from Source/WebKit/Daemons/WebAuthenticationAgent/main.mm.
        (WebKit::WebAuthnProcessCreationParameters::encode const):
        (WebKit::WebAuthnProcessCreationParameters::decode):
        * WebAuthnProcess/WebAuthnProcessCreationParameters.h: Copied from Source/WebKit/Daemons/WebAuthenticationAgent/main.mm.
        * WebAuthnProcess/ios/WebAuthnProcessIOS.mm: Copied from Source/WebKit/Daemons/WebAuthenticationAgent/main.mm.
        (WebKit::WebAuthnProcess::initializeProcess):
        (WebKit::WebAuthnProcess::initializeProcessName):
        (WebKit::WebAuthnProcess::initializeSandbox):
        * WebAuthnProcess/mac/WebAuthnProcessMac.mm: Added.
        (WebKit::WebAuthnProcess::initializeProcess):
        (WebKit::WebAuthnProcess::initializeProcessName):
        (WebKit::WebAuthnProcess::initializeSandbox):
        Paperwork for introducing the new WebAuthn process. Mostly copied from GPU process.

        * WebAuthnProcess/mac/com.apple.WebKit.WebAuthnProcess.sb.in: Added.
        The sandbox profile is originally from the GPU Process with IOKit related rules removed. Will tighten it again after the process is fully functional.

        * WebKit.xcodeproj/project.pbxproj:
        Paperwork for building the new WebAuthn process.

        * WebProcess/WebAuthentication/WebAuthnProcessConnection.cpp: Copied from Source/WebKit/Daemons/WebAuthenticationAgent/main.mm.
        (WebKit::WebAuthnProcessConnection::WebAuthnProcessConnection):
        (WebKit::WebAuthnProcessConnection::~WebAuthnProcessConnection):
        (WebKit::WebAuthnProcessConnection::didClose):
        (WebKit::WebAuthnProcessConnection::didReceiveInvalidMessage):
        * WebProcess/WebAuthentication/WebAuthnProcessConnection.h: Renamed from Source/WebKit/Daemons/WebAuthenticationAgent/main.mm.
        (WebKit::WebAuthnProcessConnection::create):
        (WebKit::WebAuthnProcessConnection::connection):
        * WebProcess/WebAuthentication/WebAuthnProcessConnection.messages.in: Added.
        * WebProcess/WebAuthentication/WebAuthnProcessConnectionInfo.h: Added.
        (WebKit::WebAuthnProcessConnectionInfo::identifier const):
        (WebKit::WebAuthnProcessConnectionInfo::releaseIdentifier):
        (WebKit::WebAuthnProcessConnectionInfo::encode const):
        (WebKit::WebAuthnProcessConnectionInfo::decode):
        * WebProcess/WebProcess.cpp:
        (WebKit::getWebAuthnProcessConnection):
        (WebKit::WebProcess::ensureWebAuthnProcessConnection):
        (WebKit::WebProcess::webAuthnProcessConnectionClosed):
        * WebProcess/WebProcess.h:
        (WebKit::WebProcess::existingWebAuthnProcessConnection):
        Paperwork for introducing the new WebAuthn process. Mostly copied from GPU process.

2020-10-15  Jiewen Tan  <jiewen_tan@apple.com>

        [WebAuthn] Move AppAttestInternal related code from WKA to OpenSource

Lines 46-51 a/Source/WebCore/en.lproj/Localizable.strings_sec1
- a/Source/WebCore/en.lproj/Localizable.strings +3 lines
46	/* Visible name of Service Worker process. The argument is the application name. */	46	/* Visible name of Service Worker process. The argument is the application name. */
47	"%@ Service Worker (%@)" = "%@ Service Worker (%@)";	47	"%@ Service Worker (%@)" = "%@ Service Worker (%@)";
48		48
		49	/* visible name of the WebAuthn process. The argument is the application name. */
		50	"%@ Web Authentication" = "%@ Web Authentication";
		51
49	/* Visible name of the web process. The argument is the application name. */	52	/* Visible name of the web process. The argument is the application name. */
50	"%@ Web Content" = "%@ Web Content";	53	"%@ Web Content" = "%@ Web Content";
51		54

Lines 71-76 set(WebKit_INCLUDE_DIRECTORIES a/Source/WebKit/CMakeLists.txt_sec1
- a/Source/WebKit/CMakeLists.txt +1 lines
71	"${WEBKIT_DIR}/UIProcess/WebAuthentication"	71	"${WEBKIT_DIR}/UIProcess/WebAuthentication"
72	"${WEBKIT_DIR}/UIProcess/WebAuthentication/Mock"	72	"${WEBKIT_DIR}/UIProcess/WebAuthentication/Mock"
73	"${WEBKIT_DIR}/UIProcess/WebsiteData"	73	"${WEBKIT_DIR}/UIProcess/WebsiteData"
		74	"${WEBKIT_DIR}/WebAuthnProcess"
74	"${WEBKIT_DIR}/WebProcess"	75	"${WEBKIT_DIR}/WebProcess"
75	"${WEBKIT_DIR}/WebProcess/ApplePay"	76	"${WEBKIT_DIR}/WebProcess/ApplePay"
76	"${WEBKIT_DIR}/WebProcess/ApplicationCache"	77	"${WEBKIT_DIR}/WebProcess/ApplicationCache"



// Copyright (C) 2020 Apple Inc. All rights reserved.
//
// Redistribution and use in source and binary forms, with or without
// modification, are permitted provided that the following conditions
// are met:
// 1. Redistributions of source code must retain the above copyright
//    notice, this list of conditions and the following disclaimer.
// 2. Redistributions in binary form must reproduce the above copyright
//    notice, this list of conditions and the following disclaimer in the
//    documentation and/or other materials provided with the distribution.
//
// THIS SOFTWARE IS PROVIDED BY APPLE INC. ``AS IS'' AND ANY
// EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
// IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
// PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL APPLE INC. OR
// CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
// EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
// PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
// PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
// OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
// (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
// OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

#include "BaseXPCService.xcconfig"

PRODUCT_NAME = com.apple.WebKit.WebAuthenticationAgent;
PRODUCT_BUNDLE_IDENTIFIER = $(PRODUCT_NAME);
INFOPLIST_FILE = Daemons/WebAuthenticationAgent/Info.plist;

OTHER_LDFLAGS = $(inherited) $(OTHER_LDFLAGS_VERSIONED_FRAMEWORK_PATH) $(WK_RELOCATABLE_FRAMEWORKS_LDFLAGS);

ENTITLEMENTS_REQUIRED = $(ENTITLEMENTS_REQUIRED_USE_INTERNAL_SDK_$(USE_INTERNAL_SDK))
ENTITLEMENTS_REQUIRED_USE_INTERNAL_SDK_ = NO;
ENTITLEMENTS_REQUIRED_USE_INTERNAL_SDK_NO = NO;
ENTITLEMENTS_REQUIRED_USE_INTERNAL_SDK_YES = $(ENTITLEMENTS_REQUIRED);

CODE_SIGN_ENTITLEMENTS = Daemons/WebAuthenticationAgent/WebAuthenticationAgent.entitlements;



// Copyright (C) 2020 Apple Inc. All rights reserved.
//
// Redistribution and use in source and binary forms, with or without
// modification, are permitted provided that the following conditions
// are met:
// 1. Redistributions of source code must retain the above copyright
//    notice, this list of conditions and the following disclaimer.
// 2. Redistributions in binary form must reproduce the above copyright
//    notice, this list of conditions and the following disclaimer in the
//    documentation and/or other materials provided with the distribution.
//
// THIS SOFTWARE IS PROVIDED BY APPLE INC. ``AS IS'' AND ANY
// EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
// IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
// PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL APPLE INC. OR
// CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
// EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
// PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
// PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
// OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
// (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
// OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

#include "BaseXPCService.xcconfig"

PRODUCT_NAME = com.apple.WebKit.WebAuthn;
PRODUCT_BUNDLE_IDENTIFIER = $(PRODUCT_NAME);
INFOPLIST_FILE[sdk=embedded*] = WebAuthnProcess/EntryPoint/Cocoa/XPCService/WebAuthnService/Info-iOS.plist;
INFOPLIST_FILE[sdk=macosx*] = WebAuthnProcess/EntryPoint/Cocoa/XPCService/WebAuthnService/Info-OSX.plist;

OTHER_LDFLAGS = $(inherited) $(OTHER_LDFLAGS_VERSIONED_FRAMEWORK_PATH) $(WK_RELOCATABLE_FRAMEWORKS_LDFLAGS);

ENTITLEMENTS_REQUIRED = $(ENTITLEMENTS_REQUIRED_USE_INTERNAL_SDK_$(USE_INTERNAL_SDK))
ENTITLEMENTS_REQUIRED_USE_INTERNAL_SDK_ = NO;
ENTITLEMENTS_REQUIRED_USE_INTERNAL_SDK_NO = NO;
ENTITLEMENTS_REQUIRED_USE_INTERNAL_SDK_YES = $(ENTITLEMENTS_REQUIRED);

Lines 154-160 SECTORDER_FLAGS_Production[sdk=iphoneos*] = -Wl,-order_file,$(SDKROOT)/AppleInte a/Source/WebKit/Configurations/WebKit.xcconfig_sec1
- a/Source/WebKit/Configurations/WebKit.xcconfig -1 / +1 lines
154	SECTORDER_FLAGS_Production[sdk=macosx*] = -Wl,-order_file,mac/WebKit2.order;	154	SECTORDER_FLAGS_Production[sdk=macosx*] = -Wl,-order_file,mac/WebKit2.order;
155		155
156	EXCLUDED_SOURCE_FILE_NAMES = Resources/ios/*;	156	EXCLUDED_SOURCE_FILE_NAMES = Resources/ios/*;
157	EXCLUDED_SOURCE_FILE_NAMES[sdk=iphone] = PluginProcessShim.dylib SecItemShim.dylib WebProcessShim.dylib .pdf Resources/mac/* com.apple.WebKit.NetworkProcess.sb com.apple.WebKit.GPUProcess.sb com.apple.WebProcess.sb com.apple.WebKit.plugin-common.sb PlugInSandboxProfiles/*.sb;	157	EXCLUDED_SOURCE_FILE_NAMES[sdk=iphone] = PluginProcessShim.dylib SecItemShim.dylib WebProcessShim.dylib .pdf Resources/mac/* com.apple.WebKit.NetworkProcess.sb com.apple.WebKit.GPUProcess.sb com.apple.WebKit.WebAuthnProcess.sb com.apple.WebProcess.sb com.apple.WebKit.plugin-common.sb PlugInSandboxProfiles/*.sb;
158		158
159	INSTALLHDRS_SCRIPT_PHASE = YES;	159	INSTALLHDRS_SCRIPT_PHASE = YES;
160	APPLY_RULES_IN_COPY_HEADERS = $(WK_USE_NEW_BUILD_SYSTEM);	160	APPLY_RULES_IN_COPY_HEADERS = $(WK_USE_NEW_BUILD_SYSTEM);



<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>CFBundleGetInfoString</key>
	<string>${BUNDLE_VERSION}, Copyright 2003-2020 Apple Inc.</string>
	<key>CFBundleDevelopmentRegion</key>
	<string>English</string>
	<key>CFBundleExecutable</key>
	<string>${EXECUTABLE_NAME}</string>
	<key>CFBundleIdentifier</key>
	<string>${PRODUCT_BUNDLE_IDENTIFIER}</string>
	<key>CFBundleInfoDictionaryVersion</key>
	<string>6.0</string>
	<key>CFBundleName</key>
	<string>${PRODUCT_NAME}</string>
	<key>CFBundlePackageType</key>
	<string>APPL</string>
	<key>CFBundleShortVersionString</key>
	<string>${SHORT_VERSION_STRING}</string>
	<key>CFBundleSignature</key>
	<string>????</string>
	<key>CFBundleVersion</key>
	<string>${BUNDLE_VERSION}</string>
	<key>LSFileQuarantineEnabled</key>
	<true/>
	<key>LSBackgroundOnly</key>
	<true/>
	<key>NSPrincipalClass</key>
	<string>NSApplication</string>
	<key>LSUIElement</key>
	<true/>
</dict>
</plist>

Lines 1-5 a/Source/WebKit/Daemons/WebAuthenticationAgent/WebAuthenticationAgent.entitlements_sec1
- a/Source/WebKit/Daemons/WebAuthenticationAgent/WebAuthenticationAgent.entitlements -5 lines
1	<?xml version="1.0" encoding="UTF-8"?>
2	<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
3	<plist version="1.0">
4	<dict/>
5	</plist>



<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>EnablePressuredExit</key>
	<true/>
	<key>KeepAlive</key>
	<false/>
	<key>Label</key>
	<string>com.apple.webkit.WebAuthenticationAgent</string>
	<key>MachServices</key>
	<dict>
		<key>com.apple.webkit.WebAuthenticationAgent</key>
		<true/>
	</dict>
	<key>Program</key>
	<string>/Users/jwtan/Documents/Build/Products/Debug/com.apple.WebKit.WebAuthenticationAgent.Development</string>
</dict>
</plist>



/*
 * Copyright (C) 2020 Apple Inc. All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
 * THE POSSIBILITY OF SUCH DAMAGE.
 */

#import "config.h"

int main(int argc, const char* argv[])
{
    @autoreleasepool {
        WTFLogAlways("com.apple.webkit.WebAuthenticationAgent started.");
    }

    [[NSRunLoop mainRunLoop] run];

    return 0;
}



$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthenticatorCoordinatorProxyMessageReceiver.cpp
$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthenticatorCoordinatorProxyMessages.h
$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthenticatorCoordinatorProxyMessagesReplies.h
$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthnConnectionToWebProcessMessageReceiver.cpp
$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthnConnectionToWebProcessMessages.h
$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthnConnectionToWebProcessMessagesReplies.h
$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthnProcessConnectionMessageReceiver.cpp
$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthnProcessConnectionMessages.h
$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthnProcessConnectionMessagesReplies.h
$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthnProcessMessageReceiver.cpp
$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthnProcessMessages.h
$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthnProcessMessagesReplies.h
$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthnProcessProxyMessageReceiver.cpp
$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthnProcessProxyMessages.h
$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthnProcessProxyMessagesReplies.h
$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAutomationSessionMessageReceiver.cpp
$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAutomationSessionMessages.h
$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAutomationSessionMessagesReplies.h

$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebUserContentControllerProxyMessagesReplies.h
$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/com.apple.WebKit.GPUProcess.sb
$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/com.apple.WebKit.NetworkProcess.sb
$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/com.apple.WebKit.WebAuthnProcess.sb
$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/com.apple.WebKit.plugin-common.sb
$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/com.apple.WebProcess.sb

Lines 45-50 VPATH = \ a/Source/WebKit/DerivedSources.make_sec1
- a/Source/WebKit/DerivedSources.make -1 / +8 lines
45	$(WebKit2)/Shared/ApplePay \	45	$(WebKit2)/Shared/ApplePay \
46	$(WebKit2)/Shared/Authentication \	46	$(WebKit2)/Shared/Authentication \
47	$(WebKit2)/Shared/mac \	47	$(WebKit2)/Shared/mac \
		48	$(WebKit2)/WebAuthnProcess \
		49	$(WebKit2)/WebAuthnProcess/mac \
48	$(WebKit2)/WebProcess/ApplePay \	50	$(WebKit2)/WebProcess/ApplePay \
49	$(WebKit2)/WebProcess/ApplicationCache \	51	$(WebKit2)/WebProcess/ApplicationCache \
50	$(WebKit2)/WebProcess/Automation \	52	$(WebKit2)/WebProcess/Automation \
Lines 140-145 MESSAGE_RECEIVERS = \ a/Source/WebKit/DerivedSources.make_sec2
140	UIProcess/RemoteLayerTree/RemoteLayerTreeDrawingAreaProxy \	142	UIProcess/RemoteLayerTree/RemoteLayerTreeDrawingAreaProxy \
141	UIProcess/GPU/GPUProcessProxy \	143	UIProcess/GPU/GPUProcessProxy \
142	UIProcess/WebAuthentication/WebAuthenticatorCoordinatorProxy \	144	UIProcess/WebAuthentication/WebAuthenticatorCoordinatorProxy \
		145	UIProcess/WebAuthentication/WebAuthnProcessProxy \
143	UIProcess/WebPasteboardProxy \	146	UIProcess/WebPasteboardProxy \
144	UIProcess/UserContent/WebUserContentControllerProxy \	147	UIProcess/UserContent/WebUserContentControllerProxy \
145	UIProcess/Inspector/WebInspectorProxy \	148	UIProcess/Inspector/WebInspectorProxy \
Lines 213-218 MESSAGE_RECEIVERS = \ a/Source/WebKit/DerivedSources.make_sec3
213	WebProcess/WebPage/VisitedLinkTableController \	216	WebProcess/WebPage/VisitedLinkTableController \
214	WebProcess/WebPage/Cocoa/TextCheckingControllerProxy \	217	WebProcess/WebPage/Cocoa/TextCheckingControllerProxy \
215	WebProcess/WebPage/ViewUpdateDispatcher \	218	WebProcess/WebPage/ViewUpdateDispatcher \
		219	WebProcess/WebAuthentication/WebAuthnProcessConnection \
216	PluginProcess/WebProcessConnection \	220	PluginProcess/WebProcessConnection \
217	PluginProcess/PluginControllerProxy \	221	PluginProcess/PluginControllerProxy \
218	PluginProcess/PluginProcess \	222	PluginProcess/PluginProcess \
Lines 239-244 MESSAGE_RECEIVERS = \ a/Source/WebKit/DerivedSources.make_sec4
239	GPUProcess/media/RemoteLegacyCDMProxy \	243	GPUProcess/media/RemoteLegacyCDMProxy \
240	GPUProcess/media/RemoteMediaPlayerManagerProxy \	244	GPUProcess/media/RemoteMediaPlayerManagerProxy \
241	GPUProcess/media/RemoteAudioDestinationManager \	245	GPUProcess/media/RemoteAudioDestinationManager \
		246	WebAuthnProcess/WebAuthnConnectionToWebProcess \
		247	WebAuthnProcess/WebAuthnProcess \
242	#	248	#
243		249
244	GENERATE_MESSAGE_RECEIVER_SCRIPT = $(WebKit2)/Scripts/generate-message-receiver.py	250	GENERATE_MESSAGE_RECEIVER_SCRIPT = $(WebKit2)/Scripts/generate-message-receiver.py
Lines 284-290 SANDBOX_PROFILES = \ a/Source/WebKit/DerivedSources.make_sec5
284	com.apple.WebProcess.sb \	290	com.apple.WebProcess.sb \
285	com.apple.WebKit.plugin-common.sb \	291	com.apple.WebKit.plugin-common.sb \
286	com.apple.WebKit.NetworkProcess.sb \	292	com.apple.WebKit.NetworkProcess.sb \
287	com.apple.WebKit.GPUProcess.sb	293	com.apple.WebKit.GPUProcess.sb \
		294	com.apple.WebKit.WebAuthnProcess.sb
288		295
289	all : $(SANDBOX_PROFILES)	296	all : $(SANDBOX_PROFILES)
290		297

Lines 34-39 void NetworkServiceInitializer(); a/Source/WebKit/Platform/ExtraPrivateSymbolsForTAPI.h_sec1
- a/Source/WebKit/Platform/ExtraPrivateSymbolsForTAPI.h +1 lines
34	void PluginServiceInitializer();	34	void PluginServiceInitializer();
35	void WebContentServiceInitializer();	35	void WebContentServiceInitializer();
36	void GPUServiceInitializer();	36	void GPUServiceInitializer();
		37	void WebAuthnServiceInitializer();
37		38
38	#ifdef __cplusplus	39	#ifdef __cplusplus
39	}	40	}

Lines 1-5 a/Source/WebKit/Shared/AuxiliaryProcess.h_sec1
- a/Source/WebKit/Shared/AuxiliaryProcess.h -2 / +5 lines
1	/*	1	/*
2	* Copyright (C) 2010-2019 Apple Inc. All rights reserved.	2	* Copyright (C) 2010-2020 Apple Inc. All rights reserved.
3	*	3	*
4	* Redistribution and use in source and binary forms, with or without	4	* Redistribution and use in source and binary forms, with or without
5	* modification, are permitted provided that the following conditions	5	* modification, are permitted provided that the following conditions
Lines 49-55 public: a/Source/WebKit/Shared/AuxiliaryProcess.h_sec2
49	Network,	49	Network,
50	Plugin,	50	Plugin,
51	#if ENABLE(GPU_PROCESS)	51	#if ENABLE(GPU_PROCESS)
52	GPU	52	GPU,
		53	#endif
		54	#if ENABLE(WEB_AUTHN)
		55	WebAuthn
53	#endif	56	#endif
54	};	57	};
55		58

Lines 42-47 extern "C" OS_NOTHROW void voucher_replace_default_voucher(void); a/Source/WebKit/Shared/EntryPointUtilities/Cocoa/XPCService/XPCServiceEntryPoint.h_sec1
- a/Source/WebKit/Shared/EntryPointUtilities/Cocoa/XPCService/XPCServiceEntryPoint.h +1 lines
42	#define NETWORK_SERVICE_INITIALIZER NetworkServiceInitializer	42	#define NETWORK_SERVICE_INITIALIZER NetworkServiceInitializer
43	#define PLUGIN_SERVICE_INITIALIZER PluginServiceInitializer	43	#define PLUGIN_SERVICE_INITIALIZER PluginServiceInitializer
44	#define GPU_SERVICE_INITIALIZER GPUServiceInitializer	44	#define GPU_SERVICE_INITIALIZER GPUServiceInitializer
		45	#define WEBAUTHN_SERVICE_INITIALIZER WebAuthnServiceInitializer
45		46
46	namespace WebKit {	47	namespace WebKit {
47		48

Lines 70-75 static void XPCServiceEventHandler(xpc_connection_t peer) a/Source/WebKit/Shared/EntryPointUtilities/Cocoa/XPCService/XPCServiceMain.mm_sec1
- a/Source/WebKit/Shared/EntryPointUtilities/Cocoa/XPCService/XPCServiceMain.mm +2 lines
70	entryPointFunctionName = CFSTR(STRINGIZE_VALUE_OF(PLUGIN_SERVICE_INITIALIZER));	70	entryPointFunctionName = CFSTR(STRINGIZE_VALUE_OF(PLUGIN_SERVICE_INITIALIZER));
71	else if (!strcmp(serviceName, "com.apple.WebKit.GPU"))	71	else if (!strcmp(serviceName, "com.apple.WebKit.GPU"))
72	entryPointFunctionName = CFSTR(STRINGIZE_VALUE_OF(GPU_SERVICE_INITIALIZER));	72	entryPointFunctionName = CFSTR(STRINGIZE_VALUE_OF(GPU_SERVICE_INITIALIZER));
		73	else if (!strcmp(serviceName, "com.apple.WebKit.WebAuthn"))
		74	entryPointFunctionName = CFSTR(STRINGIZE_VALUE_OF(WEBAUTHN_SERVICE_INITIALIZER));
73	else	75	else
74	RELEASE_ASSERT_NOT_REACHED();	76	RELEASE_ASSERT_NOT_REACHED();
75		77

Lines 230-235 constexpr const char* processStorageClass(AuxiliaryProcess::ProcessType type) a/Source/WebKit/Shared/mac/AuxiliaryProcessMac.mm_sec1
- a/Source/WebKit/Shared/mac/AuxiliaryProcessMac.mm +9 lines
230	#if ENABLE(GPU_PROCESS)	230	#if ENABLE(GPU_PROCESS)
231	case AuxiliaryProcess::ProcessType::GPU:	231	case AuxiliaryProcess::ProcessType::GPU:
232	return "WebKitGPUSandbox";	232	return "WebKitGPUSandbox";
		233	#endif
		234	#if ENABLE(WEB_AUTHN)
		235	case AuxiliaryProcess::ProcessType::WebAuthn:
		236	return "WebKitWebAuthnSandbox";
233	#endif	237	#endif
234	}	238	}
235	}	239	}
Lines 292-297 static String sandboxDirectory(AuxiliaryProcess::ProcessType processType, const a/Source/WebKit/Shared/mac/AuxiliaryProcessMac.mm_sec2
292	case AuxiliaryProcess::ProcessType::GPU:	296	case AuxiliaryProcess::ProcessType::GPU:
293	directory.append("/com.apple.WebKit.GPU.Sandbox");	297	directory.append("/com.apple.WebKit.GPU.Sandbox");
294	break;	298	break;
		299	#endif
		300	#if ENABLE(WEB_AUTHN)
		301	case AuxiliaryProcess::ProcessType::WebAuthn:
		302	directory.append("/com.apple.WebKit.WebAuthn.Sandbox");
		303	break;
295	#endif	304	#endif
296	}	305	}
297		306



UIProcess/WebAuthentication/Authenticator.cpp
UIProcess/WebAuthentication/WebAuthenticatorCoordinatorProxy.cpp
UIProcess/WebAuthentication/WebAuthenticationRequestData.cpp
UIProcess/WebAuthentication/WebAuthnProcessProxy.cpp

UIProcess/WebsiteData/WebDeviceOrientationAndMotionAccessController.cpp
UIProcess/WebsiteData/WebsiteDataRecord.cpp
UIProcess/WebsiteData/WebsiteDataStore.cpp
UIProcess/WebsiteData/WebsiteDataStoreConfiguration.cpp

WebAuthnProcess/WebAuthnConnectionToWebProcess.cpp
WebAuthnProcess/WebAuthnProcess.cpp
WebAuthnProcess/WebAuthnProcessCreationParameters.cpp

WebProcess/WebConnectionToUIProcess.cpp
WebProcess/WebProcess.cpp
WebProcess/WebSleepDisablerClient.cpp

WebProcess/UserContent/WebUserContentController.cpp

WebProcess/WebAuthentication/WebAuthenticatorCoordinator.cpp
WebProcess/WebAuthentication/WebAuthnProcessConnection.cpp

WebProcess/WebCoreSupport/SessionStateConversion.cpp
WebProcess/WebCoreSupport/WebChromeClient.cpp

Lines 549-554 UIProcess/WebAuthentication/Mock/MockNfcService.mm a/Source/WebKit/SourcesCocoa.txt_sec1
- a/Source/WebKit/SourcesCocoa.txt +4 lines
549		549
550	UIProcess/WebsiteData/Cocoa/WebsiteDataStoreCocoa.mm	550	UIProcess/WebsiteData/Cocoa/WebsiteDataStoreCocoa.mm
551		551
		552	WebAuthnProcess/EntryPoint/Cocoa/XPCService/WebAuthnServiceEntryPoint.mm
		553	WebAuthnProcess/ios/WebAuthnProcessIOS.mm
		554	WebAuthnProcess/mac/WebAuthnProcessMac.mm
		555
552	WebProcess/API/Cocoa/WKWebProcess.cpp	556	WebProcess/API/Cocoa/WKWebProcess.cpp
553		557
554	WebProcess/ApplePay/WebPaymentCoordinator.cpp	558	WebProcess/ApplePay/WebPaymentCoordinator.cpp

Lines 83-88 void AuxiliaryProcessProxy::getLaunchOptions(ProcessLauncher::LaunchOptions& lau a/Source/WebKit/UIProcess/AuxiliaryProcessProxy.cpp_sec1
- a/Source/WebKit/UIProcess/AuxiliaryProcessProxy.cpp +5 lines
83	case ProcessLauncher::ProcessType::GPU:	83	case ProcessLauncher::ProcessType::GPU:
84	varname = "GPU_PROCESS_CMD_PREFIX";	84	varname = "GPU_PROCESS_CMD_PREFIX";
85	break;	85	break;
		86	#endif
		87	#if ENABLE(WEB_AUTHN)
		88	case ProcessLauncher::ProcessType::WebAuthn:
		89	varname = "WEBAUTHN_PROCESS_CMD_PREFIX";
		90	break;
86	#endif	91	#endif
87	}	92	}
88	const char* processCmdPrefix = getenv(varname);	93	const char* processCmdPrefix = getenv(varname);

Lines 73-79 public: a/Source/WebKit/UIProcess/Launcher/ProcessLauncher.h_sec1
- a/Source/WebKit/UIProcess/Launcher/ProcessLauncher.h -1 / +4 lines
73	#endif	73	#endif
74	Network,	74	Network,
75	#if ENABLE(GPU_PROCESS)	75	#if ENABLE(GPU_PROCESS)
76	GPU	76	GPU,
		77	#endif
		78	#if ENABLE(WEB_AUTHN)
		79	WebAuthn
77	#endif	80	#endif
78	};	81	};
79		82

Lines 60-65 static const char* serviceName(const ProcessLauncher::LaunchOptions& launchOptio a/Source/WebKit/UIProcess/Launcher/mac/ProcessLauncherMac.mm_sec1
- a/Source/WebKit/UIProcess/Launcher/mac/ProcessLauncherMac.mm -1 / +9 lines
60	case ProcessLauncher::ProcessType::GPU:	60	case ProcessLauncher::ProcessType::GPU:
61	return "com.apple.WebKit.GPU";	61	return "com.apple.WebKit.GPU";
62	#endif	62	#endif
		63	#if ENABLE(WEB_AUTHN)
		64	case ProcessLauncher::ProcessType::WebAuthn:
		65	return "com.apple.WebKit.WebAuthn";
		66	#endif
63	#if ENABLE(NETSCAPE_PLUGIN_API)	67	#if ENABLE(NETSCAPE_PLUGIN_API)
64	case ProcessLauncher::ProcessType::Plugin:	68	case ProcessLauncher::ProcessType::Plugin:
65	return "com.apple.WebKit.Plugin.64";	69	return "com.apple.WebKit.Plugin.64";
Lines 74-83 static bool shouldLeakBoost(const ProcessLauncher::LaunchOptions& launchOptions) a/Source/WebKit/UIProcess/Launcher/mac/ProcessLauncherMac.mm_sec2
74	UNUSED_PARAM(launchOptions);	78	UNUSED_PARAM(launchOptions);
75	return true;	79	return true;
76	#else	80	#else
77	// On Mac, leak a boost onto the NetworkProcess and GPUProcess.	81	// On Mac, leak a boost onto the NetworkProcess, GPUProcess, and WebAuthnProcess.
78	#if ENABLE(GPU_PROCESS)	82	#if ENABLE(GPU_PROCESS)
79	if (launchOptions.processType == ProcessLauncher::ProcessType::GPU)	83	if (launchOptions.processType == ProcessLauncher::ProcessType::GPU)
80	return true;	84	return true;
		85	#endif
		86	#if ENABLE(WEB_AUTHN)
		87	if (launchOptions.processType == ProcessLauncher::ProcessType::WebAuthn)
		88	return true;
81	#endif	89	#endif
82	return launchOptions.processType == ProcessLauncher::ProcessType::Network;	90	return launchOptions.processType == ProcessLauncher::ProcessType::Network;
83	#endif	91	#endif



/*
 * Copyright (C) 2020 Apple Inc. All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
 * THE POSSIBILITY OF SUCH DAMAGE.
 */

#include "config.h"
#include "WebAuthnProcessProxy.h"

#if ENABLE(WEB_AUTHN)

#include "Logging.h"
#include "WebAuthnProcessConnectionInfo.h"
#include "WebAuthnProcessCreationParameters.h"
#include "WebAuthnProcessMessages.h"
#include "WebAuthnProcessProxyMessages.h"
#include "WebPageMessages.h"
#include "WebPageProxy.h"
#include "WebProcessMessages.h"
#include "WebProcessPool.h"
#include "WebProcessProxy.h"
#include "WebProcessProxyMessages.h"
#include <WebCore/RuntimeApplicationChecks.h>
#include <wtf/CompletionHandler.h>

#if PLATFORM(IOS_FAMILY)
#include <wtf/spi/darwin/XPCSPI.h>
#endif

#define MESSAGE_CHECK(assertion) MESSAGE_CHECK_BASE(assertion, this->connection())

namespace WebKit {
using namespace WebCore;

WebAuthnProcessProxy& WebAuthnProcessProxy::singleton()
{
    ASSERT(RunLoop::isMain());

    static std::once_flag onceFlag;
    static LazyNeverDestroyed<WebAuthnProcessProxy> webAuthnProcess;

    std::call_once(onceFlag, [] {
        webAuthnProcess.construct();

        WebAuthnProcessCreationParameters parameters;

        // Initialize the WebAuthn process.
        webAuthnProcess->send(Messages::WebAuthnProcess::InitializeWebAuthnProcess(parameters), 0);
        webAuthnProcess->updateProcessAssertion();
    });

    return webAuthnProcess.get();
}

WebAuthnProcessProxy::WebAuthnProcessProxy()
    : AuxiliaryProcessProxy()
    , m_throttler(*this, false)
{
    connect();
}

WebAuthnProcessProxy::~WebAuthnProcessProxy() = default;

void WebAuthnProcessProxy::getLaunchOptions(ProcessLauncher::LaunchOptions& launchOptions)
{
    launchOptions.processType = ProcessLauncher::ProcessType::WebAuthn;
    AuxiliaryProcessProxy::getLaunchOptions(launchOptions);
}

void WebAuthnProcessProxy::connectionWillOpen(IPC::Connection&)
{
}

void WebAuthnProcessProxy::processWillShutDown(IPC::Connection& connection)
{
    ASSERT_UNUSED(connection, this->connection() == &connection);
}

void WebAuthnProcessProxy::getWebAuthnProcessConnection(WebProcessProxy& webProcessProxy, Messages::WebProcessProxy::GetWebAuthnProcessConnection::DelayedReply&& reply)
{
    RELEASE_LOG(ProcessSuspension, "%p - WebAuthnProcessProxy is taking a background assertion because a web process is requesting a connection", this);
    sendWithAsyncReply(Messages::WebAuthnProcess::CreateWebAuthnConnectionToWebProcess { webProcessProxy.coreProcessIdentifier() }, [this, weakThis = makeWeakPtr(*this), reply = WTFMove(reply)](auto&& identifier) mutable {
        if (!weakThis) {
            RELEASE_LOG_ERROR(Process, "WebAuthnProcessProxy::getWebAuthnProcessConnection: WebAuthnProcessProxy deallocated during connection establishment");
            return reply({ });
        }

        if (!identifier) {
            RELEASE_LOG_ERROR(Process, "WebAuthnProcessProxy::getWebAuthnProcessConnection: connection identifier is empty");
            return reply({ });
        }

        MESSAGE_CHECK(MACH_PORT_VALID(identifier->port()));
        reply(WebAuthnProcessConnectionInfo { IPC::Attachment { identifier->port(), MACH_MSG_TYPE_MOVE_SEND } });
    }, 0, IPC::SendOption::DispatchMessageEvenWhenWaitingForSyncReply);
}

void WebAuthnProcessProxy::webAuthnProcessCrashed()
{
    for (auto& processPool : WebProcessPool::allProcessPools())
        processPool->terminateAllWebContentProcesses();
}

void WebAuthnProcessProxy::didClose(IPC::Connection&)
{
    // This will cause us to be deleted.
    webAuthnProcessCrashed();
}

void WebAuthnProcessProxy::didReceiveInvalidMessage(IPC::Connection& connection, IPC::MessageName messageName)
{
    logInvalidMessage(connection, messageName);

    WebProcessPool::didReceiveInvalidMessage(messageName);

    // Terminate the WebAuthn process.
    terminate();

    // Since we've invalidated the connection we'll never get a IPC::Connection::Client::didClose
    // callback so we'll explicitly call it here instead.
    didClose(connection);
}

void WebAuthnProcessProxy::didFinishLaunching(ProcessLauncher* launcher, IPC::Connection::Identifier connectionIdentifier)
{
    AuxiliaryProcessProxy::didFinishLaunching(launcher, connectionIdentifier);

    if (!IPC::Connection::identifierIsValid(connectionIdentifier)) {
        webAuthnProcessCrashed();
        return;
    }

#if PLATFORM(IOS_FAMILY)
    if (xpc_connection_t connection = this->connection()->xpcConnection())
        m_throttler.didConnectToProcess(xpc_connection_get_pid(connection));
#endif
}

void WebAuthnProcessProxy::updateProcessAssertion()
{
    bool hasAnyForegroundWebProcesses = false;
    bool hasAnyBackgroundWebProcesses = false;

    for (auto& processPool : WebProcessPool::allProcessPools()) {
        hasAnyForegroundWebProcesses |= processPool->hasForegroundWebProcesses();
        hasAnyBackgroundWebProcesses |= processPool->hasBackgroundWebProcesses();
    }

    if (hasAnyForegroundWebProcesses) {
        if (!ProcessThrottler::isValidForegroundActivity(m_activityFromWebProcesses)) {
            m_activityFromWebProcesses = throttler().foregroundActivity("WebAuthn for foreground view(s)"_s);
            send(Messages::WebAuthnProcess::ProcessDidTransitionToForeground(), 0);
        }
        return;
    }
    if (hasAnyBackgroundWebProcesses) {
        if (!ProcessThrottler::isValidBackgroundActivity(m_activityFromWebProcesses)) {
            m_activityFromWebProcesses = throttler().backgroundActivity("WebAuthn for background view(s)"_s);
            send(Messages::WebAuthnProcess::ProcessDidTransitionToBackground(), 0);
        }
        return;
    }
    m_activityFromWebProcesses = nullptr;
}

} // namespace WebKit

#undef MESSAGE_CHECK

#endif // ENABLE(WEB_AUTHN)



/*
 * Copyright (C) 2020 Apple Inc. All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
 * THE POSSIBILITY OF SUCH DAMAGE.
 */

#pragma once

#if ENABLE(WEB_AUTHN)

#include "AuxiliaryProcessProxy.h"
#include "ProcessLauncher.h"
#include "ProcessThrottler.h"
#include "ProcessThrottlerClient.h"
#include "WebPageProxyIdentifier.h"
#include "WebProcessProxyMessagesReplies.h"
#include <memory>

namespace WebKit {

class WebProcessProxy;
class WebsiteDataStore;
struct WebAuthnProcessCreationParameters;

class WebAuthnProcessProxy final : public AuxiliaryProcessProxy, private ProcessThrottlerClient, public CanMakeWeakPtr<WebAuthnProcessProxy> {
    WTF_MAKE_FAST_ALLOCATED;
    WTF_MAKE_NONCOPYABLE(WebAuthnProcessProxy);
    friend LazyNeverDestroyed<WebAuthnProcessProxy>;
public:
    static WebAuthnProcessProxy& singleton();

    void getWebAuthnProcessConnection(WebProcessProxy&, Messages::WebProcessProxy::GetWebAuthnProcessConnectionDelayedReply&&);

    ProcessThrottler& throttler() final { return m_throttler; }
    void updateProcessAssertion();

    // ProcessThrottlerClient
    void sendProcessDidResume() final { }
    ASCIILiteral clientName() const final { return "WebAuthnProcess"_s; }

private:
    explicit WebAuthnProcessProxy();
    ~WebAuthnProcessProxy();

    // AuxiliaryProcessProxy
    ASCIILiteral processName() const final { return "WebAuthn"_s; }

    void getLaunchOptions(ProcessLauncher::LaunchOptions&) override;
    void connectionWillOpen(IPC::Connection&) override;
    void processWillShutDown(IPC::Connection&) override;

    void webAuthnProcessCrashed();

    // ProcessThrottlerClient
    void sendPrepareToSuspend(IsSuspensionImminent, CompletionHandler<void()>&&) final { }

    // ProcessLauncher::Client
    void didFinishLaunching(ProcessLauncher*, IPC::Connection::Identifier) override;

    // IPC::Connection::Client
    void didClose(IPC::Connection&) override;
    void didReceiveInvalidMessage(IPC::Connection&, IPC::MessageName) override;

    ProcessThrottler m_throttler;
    ProcessThrottler::ActivityVariant m_activityFromWebProcesses;
};

} // namespace WebKit

#endif // ENABLE(WEB_AUTHN)



# Copyright (C) 2020 Apple Inc. All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions
# are met:
# 1.  Redistributions of source code must retain the above copyright
#     notice, this list of conditions and the following disclaimer.
# 2.  Redistributions in binary form must reproduce the above copyright
#     notice, this list of conditions and the following disclaimer in the
#     documentation and/or other materials provided with the distribution.
#
# THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS'' AND
# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
# DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS BE LIABLE FOR
# ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
# SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
# CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
# OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

#if ENABLE(WEB_AUTHN)

messages -> WebAuthnProcessProxy NotRefCounted {
}

#endif // ENABLE(WEB_AUTHN)



#include "GPUProcessProxy.h"
#endif

#if ENABLE(WEB_AUTHN)
#include "WebAuthnProcessConnectionInfo.h"
#include "WebAuthnProcessProxy.h"
#endif

#if ENABLE(REMOTE_INSPECTOR)
#include <JavaScriptCore/RemoteInspector.h>
#endif

}
#endif

#if ENABLE(WEB_AUTHN)
void WebProcessPool::getWebAuthnProcessConnection(WebProcessProxy& webProcessProxy, Messages::WebProcessProxy::GetWebAuthnProcessConnection::DelayedReply&& reply)
{
    WebAuthnProcessProxy::singleton().getWebAuthnProcessConnection(webProcessProxy, [this, weakThis = makeWeakPtr(*this), webProcessProxy = makeWeakPtr(webProcessProxy), reply = WTFMove(reply)] (auto& connectionInfo) mutable {
        if (UNLIKELY(!IPC::Connection::identifierIsValid(connectionInfo.identifier()) && webProcessProxy && weakThis)) {
            WEBPROCESSPOOL_RELEASE_LOG_ERROR(Process, "getWebAuthnProcessConnection: Failed first attempt, retrying");
            WebAuthnProcessProxy::singleton().getWebAuthnProcessConnection(*webProcessProxy, WTFMove(reply));
            return;
        }
        reply(connectionInfo);
    });
}
#endif

bool WebProcessPool::s_useSeparateServiceWorkerProcess = false;

#if ENABLE(SERVICE_WORKER)

Lines 358-363 public: a/Source/WebKit/UIProcess/WebProcessPool.h_sec1
- a/Source/WebKit/UIProcess/WebProcessPool.h +4 lines
358	void getGPUProcessConnection(WebProcessProxy&, Messages::WebProcessProxy::GetGPUProcessConnectionDelayedReply&&);	358	void getGPUProcessConnection(WebProcessProxy&, Messages::WebProcessProxy::GetGPUProcessConnectionDelayedReply&&);
359	#endif	359	#endif
360		360
		361	#if ENABLE(WEB_AUTHN)
		362	void getWebAuthnProcessConnection(WebProcessProxy&, Messages::WebProcessProxy::GetWebAuthnProcessConnectionDelayedReply&&);
		363	#endif
		364
361	// Network Process Management	365	// Network Process Management
362	void networkProcessCrashed(NetworkProcessProxy&);	366	void networkProcessCrashed(NetworkProcessProxy&);
363		367

Lines 769-774 void WebProcessProxy::gpuProcessCrashed() a/Source/WebKit/UIProcess/WebProcessProxy.cpp_sec1
- a/Source/WebKit/UIProcess/WebProcessProxy.cpp +7 lines
769	}	769	}
770	#endif	770	#endif
771		771
		772	#if ENABLE(WEB_AUTHN)
		773	void WebProcessProxy::getWebAuthnProcessConnection(Messages::WebProcessProxy::GetWebAuthnProcessConnection::DelayedReply&& reply)
		774	{
		775	m_processPool->getWebAuthnProcessConnection(*this, WTFMove(reply));
		776	}
		777	#endif
		778
772	#if !PLATFORM(COCOA)	779	#if !PLATFORM(COCOA)
773	bool WebProcessProxy::platformIsBeingDebugged() const	780	bool WebProcessProxy::platformIsBeingDebugged() const
774	{	781	{

Lines 451-456 private: a/Source/WebKit/UIProcess/WebProcessProxy.h_sec1
- a/Source/WebKit/UIProcess/WebProcessProxy.h +4 lines
451	void getGPUProcessConnection(Messages::WebProcessProxy::GetGPUProcessConnectionDelayedReply&&);	451	void getGPUProcessConnection(Messages::WebProcessProxy::GetGPUProcessConnectionDelayedReply&&);
452	#endif	452	#endif
453		453
		454	#if ENABLE(WEB_AUTHN)
		455	void getWebAuthnProcessConnection(Messages::WebProcessProxy::GetWebAuthnProcessConnectionDelayedReply&&);
		456	#endif
		457
454	bool platformIsBeingDebugged() const;	458	bool platformIsBeingDebugged() const;
455	bool shouldAllowNonValidInjectedCode() const;	459	bool shouldAllowNonValidInjectedCode() const;
456		460

Lines 42-47 messages -> WebProcessProxy LegacyReceiver { a/Source/WebKit/UIProcess/WebProcessProxy.messages.in_sec1
- a/Source/WebKit/UIProcess/WebProcessProxy.messages.in +4 lines
42	GetGPUProcessConnection() -> (struct WebKit::GPUProcessConnectionInfo connectionInfo) Synchronous	42	GetGPUProcessConnection() -> (struct WebKit::GPUProcessConnectionInfo connectionInfo) Synchronous
43	#endif	43	#endif
44		44
		45	#if ENABLE(WEB_AUTHN)
		46	GetWebAuthnProcessConnection() -> (struct WebKit::WebAuthnProcessConnectionInfo connectionInfo) Synchronous
		47	#endif
		48
45	SetIsHoldingLockedFiles(bool isHoldingLockedFiles)	49	SetIsHoldingLockedFiles(bool isHoldingLockedFiles)
46		50
47	DidExceedActiveMemoryLimit()	51	DidExceedActiveMemoryLimit()



<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>CFBundleGetInfoString</key>
	<string>${BUNDLE_VERSION}, Copyright 2003-2020 Apple Inc.</string>
	<key>CFBundleDevelopmentRegion</key>
	<string>English</string>
	<key>CFBundleExecutable</key>
	<string>${EXECUTABLE_NAME}</string>
	<key>CFBundleIdentifier</key>
	<string>${PRODUCT_BUNDLE_IDENTIFIER}</string>
	<key>CFBundleInfoDictionaryVersion</key>
	<string>6.0</string>
	<key>CFBundleName</key>
	<string>${PRODUCT_NAME}</string>
	<key>CFBundlePackageType</key>
	<string>XPC!</string>
	<key>CFBundleShortVersionString</key>
	<string>${SHORT_VERSION_STRING}</string>
	<key>CFBundleSignature</key>
	<string>????</string>
	<key>CFBundleVersion</key>
	<string>${BUNDLE_VERSION}</string>
	<key>LSFileQuarantineEnabled</key>
	<true/>
	<key>NSPrincipalClass</key>
	<string>NSApplication</string>
	<key>LSUIElement</key>
	<true/>
	<key>XPCService</key>
	<dict>
		<key>ServiceType</key>
		<string>Application</string>
		<key>JoinExistingSession</key>
		<true/>
		<key>RunLoopType</key>
		<string>NSRunLoop</string>
		<key>_MultipleInstances</key>
		<true/>
	</dict>
</dict>
</plist>



<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>CFBundleGetInfoString</key>
	<string>${BUNDLE_VERSION}, Copyright 2003-2020 Apple Inc.</string>
	<key>CFBundleDevelopmentRegion</key>
	<string>English</string>
	<key>CFBundleExecutable</key>
	<string>${EXECUTABLE_NAME}</string>
	<key>CFBundleIdentifier</key>
	<string>${PRODUCT_BUNDLE_IDENTIFIER}</string>
	<key>CFBundleInfoDictionaryVersion</key>
	<string>6.0</string>
	<key>CFBundleName</key>
	<string>${PRODUCT_NAME}</string>
	<key>CFBundlePackageType</key>
	<string>XPC!</string>
	<key>CFBundleShortVersionString</key>
	<string>${SHORT_VERSION_STRING}</string>
	<key>CFBundleSignature</key>
	<string>????</string>
	<key>CFBundleVersion</key>
	<string>${BUNDLE_VERSION}</string>
	<key>LSFileQuarantineEnabled</key>
	<true/>
	<key>NSPrincipalClass</key>
	<string>NSApplication</string>
	<key>LSUIElement</key>
	<true/>
	<key>XPCService</key>
	<dict>
		<key>ServiceType</key>
		<string>Application</string>
		<key>RunLoopType</key>
		<string>NSRunLoop</string>
		<key>_MultipleInstances</key>
		<true/>
	</dict>
	<key>CanInheritApplicationStateFromOtherProcesses</key>
	<true/>
</dict>
</plist>



/*
 * Copyright (C) 2020 Apple Inc. All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
 * THE POSSIBILITY OF SUCH DAMAGE.
 */

#import "config.h"

#import "EnvironmentUtilities.h"
#import "WKBase.h"
#import "WebAuthnProcess.h"
#import "XPCServiceEntryPoint.h"

#if ENABLE(WEB_AUTHN)

namespace WebKit {

class WebAuthnServiceInitializerDelegate : public XPCServiceInitializerDelegate {
public:
    WebAuthnServiceInitializerDelegate(OSObjectPtr<xpc_connection_t> connection, xpc_object_t initializerMessage)
        : XPCServiceInitializerDelegate(WTFMove(connection), initializerMessage)
    {
    }
};

template<>
void initializeAuxiliaryProcess<WebAuthnProcess>(AuxiliaryProcessInitializationParameters&& parameters)
{
    static NeverDestroyed<WebAuthnProcess> WebAuthnProcess(WTFMove(parameters));
}

} // namespace WebKit

#endif // ENABLE(WEB_AUTHN)

extern "C" WK_EXPORT void WEBAUTHN_SERVICE_INITIALIZER(xpc_connection_t connection, xpc_object_t initializerMessage, xpc_object_t priorityBoostMessage);

void WEBAUTHN_SERVICE_INITIALIZER(xpc_connection_t connection, xpc_object_t initializerMessage, xpc_object_t priorityBoostMessage)
{
    WTF::initializeMainThread();

#if ENABLE(WEB_AUTHN)
    WebKit::XPCServiceInitializer<WebKit::WebAuthnProcess, WebKit::WebAuthnServiceInitializerDelegate>(adoptOSObject(connection), initializerMessage, priorityBoostMessage);
#endif // ENABLE(WEB_AUTHN)
}



/*
 * Copyright (C) 2020 Apple Inc. All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
 * THE POSSIBILITY OF SUCH DAMAGE.
 */

#include "config.h"
#include "WebAuthnConnectionToWebProcess.h"

#if ENABLE(WEB_AUTHN)

namespace WebKit {
using namespace WebCore;

Ref<WebAuthnConnectionToWebProcess> WebAuthnConnectionToWebProcess::create(WebAuthnProcess& WebAuthnProcess, WebCore::ProcessIdentifier webProcessIdentifier, IPC::Connection::Identifier connectionIdentifier)
{
    return adoptRef(*new WebAuthnConnectionToWebProcess(WebAuthnProcess, webProcessIdentifier, connectionIdentifier));
}

WebAuthnConnectionToWebProcess::WebAuthnConnectionToWebProcess(WebAuthnProcess& WebAuthnProcess, WebCore::ProcessIdentifier webProcessIdentifier, IPC::Connection::Identifier connectionIdentifier)
    : m_connection(IPC::Connection::createServerConnection(connectionIdentifier, *this))
    , m_WebAuthnProcess(WebAuthnProcess)
    , m_webProcessIdentifier(webProcessIdentifier)
{
    RELEASE_ASSERT(RunLoop::isMain());
    m_connection->open();
}

WebAuthnConnectionToWebProcess::~WebAuthnConnectionToWebProcess()
{
    RELEASE_ASSERT(RunLoop::isMain());

    m_connection->invalidate();
}

void WebAuthnConnectionToWebProcess::didClose(IPC::Connection&)
{
}

void WebAuthnConnectionToWebProcess::didReceiveInvalidMessage(IPC::Connection& connection, IPC::MessageName messageName)
{
    WTFLogAlways("Received an invalid message \"%s\" from the web process.\n", description(messageName));
    CRASH();
}

} // namespace WebKit

#endif // ENABLE(WEB_AUTHN)



/*
 * Copyright (C) 2020 Apple Inc. All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
 * THE POSSIBILITY OF SUCH DAMAGE.
 */

#pragma once

#if ENABLE(WEB_AUTHN)

#include "Connection.h"
#include "WebAuthnConnectionToWebProcessMessages.h"
#include <WebCore/ProcessIdentifier.h>
#include <wtf/RefCounted.h>

namespace WebKit {

class WebAuthnProcess;

class WebAuthnConnectionToWebProcess
    : public RefCounted<WebAuthnConnectionToWebProcess>
    , IPC::Connection::Client {
public:
    static Ref<WebAuthnConnectionToWebProcess> create(WebAuthnProcess&, WebCore::ProcessIdentifier, IPC::Connection::Identifier);
    virtual ~WebAuthnConnectionToWebProcess();

    IPC::Connection& connection() { return m_connection.get(); }
    WebAuthnProcess& WebAuthnProcessProcess() { return m_WebAuthnProcess.get(); }
    WebCore::ProcessIdentifier webProcessIdentifier() const { return m_webProcessIdentifier; }

    void cleanupForSuspension(Function<void()>&&);
    void endSuspension();

private:
    WebAuthnConnectionToWebProcess(WebAuthnProcess&, WebCore::ProcessIdentifier, IPC::Connection::Identifier);

    // IPC::Connection::Client
    void didClose(IPC::Connection&) final;
    void didReceiveInvalidMessage(IPC::Connection&, IPC::MessageName) final;

    Ref<IPC::Connection> m_connection;
    Ref<WebAuthnProcess> m_WebAuthnProcess;
    const WebCore::ProcessIdentifier m_webProcessIdentifier;
};

} // namespace WebKit

#endif // ENABLE(WEB_AUTHN)



# Copyright (C) 2020 Apple Inc. All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions
# are met:
# 1.  Redistributions of source code must retain the above copyright
#     notice, this list of conditions and the following disclaimer.
# 2.  Redistributions in binary form must reproduce the above copyright
#     notice, this list of conditions and the following disclaimer in the
#     documentation and/or other materials provided with the distribution.
#
# THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS'' AND
# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
# DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS BE LIABLE FOR
# ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
# SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
# CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
# OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

#if ENABLE(WEB_AUTHN)

messages -> WebAuthnConnectionToWebProcess {
}

#endif // ENABLE(WEB_AUTHN)



/*
 * Copyright (C) 2020 Apple Inc. All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
 * THE POSSIBILITY OF SUCH DAMAGE.
 */

#include "config.h"
#include "WebAuthnProcess.h"

#if ENABLE(WEB_AUTHN)

#include "Logging.h"
#include "WebAuthnConnectionToWebProcess.h"
#include "WebAuthnProcessCreationParameters.h"
#include <wtf/text/AtomString.h>

namespace WebKit {
using namespace WebCore;


WebAuthnProcess::WebAuthnProcess(AuxiliaryProcessInitializationParameters&& parameters)
{
    initialize(WTFMove(parameters));
}

WebAuthnProcess::~WebAuthnProcess()
{
}

void WebAuthnProcess::createWebAuthnConnectionToWebProcess(ProcessIdentifier identifier, CompletionHandler<void(Optional<IPC::Attachment>&&)>&& completionHandler)
{
    auto ipcConnection = createIPCConnectionPair();
    if (!ipcConnection) {
        completionHandler({ });
        return;
    }

    auto newConnection = WebAuthnConnectionToWebProcess::create(*this, identifier, ipcConnection->first);

    ASSERT(!m_webProcessConnections.contains(identifier));
    m_webProcessConnections.add(identifier, WTFMove(newConnection));

    completionHandler(WTFMove(ipcConnection->second));
}

void WebAuthnProcess::removeWebAuthnConnectionToWebProcess(WebAuthnConnectionToWebProcess& connection)
{
    ASSERT(m_webProcessConnections.contains(connection.webProcessIdentifier()));
    m_webProcessConnections.remove(connection.webProcessIdentifier());
}

void WebAuthnProcess::connectionToWebProcessClosed(IPC::Connection& connection)
{
}

bool WebAuthnProcess::shouldTerminate()
{
    return m_webProcessConnections.isEmpty();
}

void WebAuthnProcess::didClose(IPC::Connection&)
{
    ASSERT(RunLoop::isMain());
}

void WebAuthnProcess::lowMemoryHandler(Critical critical)
{
    WTF::releaseFastMallocFreeMemory();
}

void WebAuthnProcess::initializeWebAuthnProcess(WebAuthnProcessCreationParameters&& parameters)
{
    WTF::Thread::setCurrentThreadIsUserInitiated();
    AtomString::init();
}

void WebAuthnProcess::prepareToSuspend(bool isSuspensionImminent, CompletionHandler<void()>&& completionHandler)
{
    RELEASE_LOG(ProcessSuspension, "%p - WebAuthnProcess::prepareToSuspend(), isSuspensionImminent: %d", this, isSuspensionImminent);

    lowMemoryHandler(Critical::Yes);
}

void WebAuthnProcess::processDidResume()
{
    RELEASE_LOG(ProcessSuspension, "%p - WebAuthnProcess::processDidResume()", this);
    resume();
}

void WebAuthnProcess::resume()
{
}

void WebAuthnProcess::processDidTransitionToForeground()
{
}

void WebAuthnProcess::processDidTransitionToBackground()
{
}

WebAuthnConnectionToWebProcess* WebAuthnProcess::webProcessConnection(ProcessIdentifier identifier) const
{
    return m_webProcessConnections.get(identifier);
}

} // namespace WebKit

#endif // ENABLE(WEB_AUTHN)



/*
 * Copyright (C) 2020 Apple Inc. All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
 * THE POSSIBILITY OF SUCH DAMAGE.
 */

#pragma once

#if ENABLE(WEB_AUTHN)

#include "AuxiliaryProcess.h"
#include "WebAuthnProcessMessages.h"
#include <wtf/Function.h>
#include <wtf/MemoryPressureHandler.h>
#include <wtf/WeakPtr.h>

namespace WebKit {

class WebAuthnConnectionToWebProcess;
struct WebAuthnProcessCreationParameters;

class WebAuthnProcess : public AuxiliaryProcess, public ThreadSafeRefCounted<WebAuthnProcess>, public CanMakeWeakPtr<WebAuthnProcess> {
    WTF_MAKE_NONCOPYABLE(WebAuthnProcess);
public:
    explicit WebAuthnProcess(AuxiliaryProcessInitializationParameters&&);
    ~WebAuthnProcess();
    static constexpr ProcessType processType = ProcessType::WebAuthn;

    void removeWebAuthnConnectionToWebProcess(WebAuthnConnectionToWebProcess&);

    void prepareToSuspend(bool isSuspensionImminent, CompletionHandler<void()>&&);
    void processDidResume();
    void resume();

    void connectionToWebProcessClosed(IPC::Connection&);

    WebAuthnConnectionToWebProcess* webProcessConnection(WebCore::ProcessIdentifier) const;

private:
    void lowMemoryHandler(Critical);

    // AuxiliaryProcess
    void initializeProcess(const AuxiliaryProcessInitializationParameters&) override;
    void initializeProcessName(const AuxiliaryProcessInitializationParameters&) override;
    void initializeSandbox(const AuxiliaryProcessInitializationParameters&, SandboxInitializationParameters&) override;
    bool shouldTerminate() override;

    // IPC::Connection::Client
    void didReceiveMessage(IPC::Connection&, IPC::Decoder&) override;
    void didClose(IPC::Connection&) override;

    // Message Handlers
    void initializeWebAuthnProcess(WebAuthnProcessCreationParameters&&);
    void createWebAuthnConnectionToWebProcess(WebCore::ProcessIdentifier, CompletionHandler<void(Optional<IPC::Attachment>&&)>&&);

    void processDidTransitionToForeground();
    void processDidTransitionToBackground();

    // Connections to WebProcesses.
    HashMap<WebCore::ProcessIdentifier, Ref<WebAuthnConnectionToWebProcess>> m_webProcessConnections;
};

} // namespace WebKit

#endif // ENABLE(WEB_AUTHN)



# Copyright (C) 2019-2020 Apple Inc. All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions
# are met:
# 1.  Redistributions of source code must retain the above copyright
#     notice, this list of conditions and the following disclaimer.
# 2.  Redistributions in binary form must reproduce the above copyright
#     notice, this list of conditions and the following disclaimer in the
#     documentation and/or other materials provided with the distribution.
#
# THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS'' AND
# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
# DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS BE LIABLE FOR
# ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
# SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
# CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
# OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

#if ENABLE(WEB_AUTHN)

messages -> WebAuthnProcess {
    # Initializes the WebAuthn process.
    InitializeWebAuthnProcess(struct WebKit::WebAuthnProcessCreationParameters processCreationParameters)

    # Creates a connection for communication with a WebProcess
    CreateWebAuthnConnectionToWebProcess(WebCore::ProcessIdentifier processIdentifier) -> (Optional<IPC::Attachment> connectionIdentifier) Async

    ProcessDidTransitionToForeground()
    ProcessDidTransitionToBackground()
}

#endif // ENABLE(WEB_AUTHN)



/*
 * Copyright (C) 2020 Apple Inc. All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
 * THE POSSIBILITY OF SUCH DAMAGE.
 */

#include "config.h"
#include "WebAuthnProcessCreationParameters.h"

#if ENABLE(WEB_AUTHN)

#include "ArgumentCoders.h"
#include "WebCoreArgumentCoders.h"

#if PLATFORM(COCOA)
#include "ArgumentCodersCF.h"
#endif

namespace WebKit {

WebAuthnProcessCreationParameters::WebAuthnProcessCreationParameters() = default;

void WebAuthnProcessCreationParameters::encode(IPC::Encoder& encoder) const
{
}

bool WebAuthnProcessCreationParameters::decode(IPC::Decoder& decoder, WebAuthnProcessCreationParameters& result)
{
    return true;
}

} // namespace WebKit

#endif // ENABLE(WEB_AUTHN)



/*
 * Copyright (C) 2020 Apple Inc. All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
 * THE POSSIBILITY OF SUCH DAMAGE.
 */

#pragma once

#if ENABLE(WEB_AUTHN)

namespace IPC {
class Decoder;
class Encoder;
}

namespace WebKit {

struct WebAuthnProcessCreationParameters {
    WebAuthnProcessCreationParameters();

    void encode(IPC::Encoder&) const;
    static WARN_UNUSED_RETURN bool decode(IPC::Decoder&, WebAuthnProcessCreationParameters&);
};

} // namespace WebKit

#endif // ENABLE(WEB_AUTHN)



/*
 * Copyright (C) 2020 Apple Inc. All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
 * THE POSSIBILITY OF SUCH DAMAGE.
 */

#import "config.h"
#import "WebAuthnProcess.h"

#if ENABLE(WEB_AUTHN) && PLATFORM(IOS_FAMILY)

#import <WebCore/NotImplemented.h>
#import <WebCore/WebCoreThreadSystemInterface.h>

namespace WebKit {
using namespace WebCore;

void WebAuthnProcess::initializeProcess(const AuxiliaryProcessInitializationParameters&)
{
    InitWebCoreThreadSystemInterface();
}

void WebAuthnProcess::initializeProcessName(const AuxiliaryProcessInitializationParameters&)
{
    notImplemented();
}

void WebAuthnProcess::initializeSandbox(const AuxiliaryProcessInitializationParameters&, SandboxInitializationParameters&)
{
}

} // namespace WebKit

#endif // ENABLE(WEB_AUTHN) && PLATFORM(IOS_FAMILY)



/*
 * Copyright (C) 2020 Apple Inc. All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
 * THE POSSIBILITY OF SUCH DAMAGE.
 */

#import "config.h"
#import "WebAuthnProcess.h"

#if ENABLE(WEB_AUTHN) && PLATFORM(MAC)

#import "SandboxInitializationParameters.h"
#import "WKFoundation.h"
#import "WebAuthnProcessCreationParameters.h"
#import <WebCore/LocalizedStrings.h>
#import <pal/spi/cocoa/LaunchServicesSPI.h>
#import <pal/spi/mac/HIServicesSPI.h>
#import <sysexits.h>
#import <wtf/MemoryPressureHandler.h>
#import <wtf/text/WTFString.h>

namespace WebKit {
using namespace WebCore;

void WebAuthnProcess::initializeProcess(const AuxiliaryProcessInitializationParameters&)
{
    // Having a window server connection in this process would result in spin logs (<rdar://problem/13239119>).
    OSStatus error = SetApplicationIsDaemon(true);
    ASSERT_UNUSED(error, error == noErr);

    launchServicesCheckIn();
}

void WebAuthnProcess::initializeProcessName(const AuxiliaryProcessInitializationParameters& parameters)
{
    NSString *applicationName = [NSString stringWithFormat:WEB_UI_STRING("%@ Web Authentication", "visible name of the WebAuthn process. The argument is the application name."), (NSString *)parameters.uiProcessName];
    _LSSetApplicationInformationItem(kLSDefaultSessionID, _LSGetCurrentApplicationASN(), _kLSDisplayNameKey, (CFStringRef)applicationName, nullptr);
}

void WebAuthnProcess::initializeSandbox(const AuxiliaryProcessInitializationParameters& parameters, SandboxInitializationParameters& sandboxParameters)
{
    // Need to override the default, because service has a different bundle ID.
    NSBundle *webKit2Bundle = [NSBundle bundleForClass:NSClassFromString(@"WKWebView")];

    sandboxParameters.setOverrideSandboxProfilePath([webKit2Bundle pathForResource:@"com.apple.WebKit.WebAuthnProcess" ofType:@"sb"]);

    AuxiliaryProcess::initializeSandbox(parameters, sandboxParameters);
}

} // namespace WebKit

#endif // ENABLE(WEB_AUTHN)



; Copyright (C) 2010-2020 Apple Inc. All rights reserved.
;
; Redistribution and use in source and binary forms, with or without
; modification, are permitted provided that the following conditions
; are met:
; 1. Redistributions of source code must retain the above copyright
;    notice, this list of conditions and the following disclaimer.
; 2. Redistributions in binary form must reproduce the above copyright
;    notice, this list of conditions and the following disclaimer in the
;    documentation and/or other materials provided with the distribution.
;
; THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
; AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
; THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
; PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
; BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
; CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
; SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
; INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
; CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
; ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
; THE POSSIBILITY OF SUCH DAMAGE.

(version 1)
(deny default (with partial-symbolication))
(allow system-audit file-read-metadata)

;;;
;;; The following rules were originally contained in 'system.sb'. We are duplicating them here so we can
;;; remove unneeded sandbox extensions.
;;;

;;; Allow registration of per-pid services.
(allow mach-register (local-name-prefix ""))

;;; Allow read access to standard system paths.
(allow file-read*
    (require-all (file-mode #o0004)
    (require-any (subpath "/Library/Filesystems/NetFSPlugins")
    (subpath "/Library/Apple/System")
    (subpath "/Library/Preferences/Logging")      ; Logging Rethink
    (subpath "/System")
    (subpath "/private/var/db/dyld")
    (subpath "/private/var/db/timezone")
    (subpath "/usr/lib")
    (subpath "/usr/share"))))

;;; Allow reading internal profiles on development builds
(allow file-read*
    (require-all (file-mode #o0004)
    (subpath "/AppleInternal/Library/Preferences/Logging")
    (system-attribute apple-internal)))

;;; Allow mapping of system frameworks + dylibs
(allow file-map-executable
    (subpath "/Library/Apple/System/Library/Frameworks")
    (subpath "/Library/Apple/System/Library/PrivateFrameworks")
    (subpath "/System/Library/Frameworks")
    (subpath "/System/Library/PrivateFrameworks")
    (subpath "/usr/lib")
    (subpath "/usr/appleinternal/lib/sanitizers"))

(allow file-read-metadata
    (literal "/etc")
    (literal "/tmp")
    (literal "/var")
    (literal "/private/etc/localtime"))


;;; Allow access to standard special files.
(allow file-read*
    (literal "/dev/autofs_nowait")
    (literal "/dev/random")
    (literal "/dev/urandom")
    (literal "/private/etc/master.passwd")
    (literal "/private/etc/passwd"))

(allow file-read*
       file-write-data
    (literal "/dev/null")
    (literal "/dev/zero"))

(allow file-read*
       file-write-data
       file-ioctl
    (literal "/dev/dtracehelper"))

;;; Allow creation of core dumps.
(allow file-write-create
    (require-all (prefix "/cores/")
        (vnode-type REGULAR-FILE)))

;;; Allow IPC to standard system agents.
(allow ipc-posix-shm-read*
    (ipc-posix-name "apple.shm.notification_center")
    (ipc-posix-name-prefix "apple.cfprefs."))

;;;
;;; End rules originally copied from 'system.sb'
;;;

;;; process-info* defaults to allow; deny it and then allow operations we actually need.
(deny process-info*)
(allow process-info-pidinfo)
(allow process-info-setcontrol (target self))
(allow process-codesigning-status*)

(deny sysctl*)
(allow sysctl-read
    (sysctl-name
        "hw.byteorder"
        "hw.busfrequency_max"
        "hw.cputype"
        "hw.machine"
        "hw.memsize"
        "hw.model"
        "hw.ncpu"
        "hw.vectorunit"
        "kern.bootargs" ;; <rdar://problem/47738015>
        "kern.hostname"
        "kern.maxfilesperproc"
        "kern.memorystatus_level"
        "kern.osproductversion" ;; <rdar://problem/51756739>
        "kern.osversion"
        "kern.safeboot"
        "kern.version"
        "machdep.cpu.brand_string"
        "security.mac.sandbox.sentinel"
        "kern.tcsm_enable"
        "kern.tcsm_available"
        "vm.footprint_suspend")
    (sysctl-name-regex #"^hw.(active|avail)cpu")
    (sysctl-name-regex #"^hw.(busfrequency|cachelinesize|cpufrequency(|_max)|pagesize|tbfrequency)(|_compat)")
    (sysctl-name-regex #"^hw.l.+cachesize")
    (sysctl-name-regex #"^hw.(logical|physical)cpu_max")
    (sysctl-name-regex #"^hw.optional\.")
    (sysctl-name-regex #"^kern.os(release|type|variant_status|version)")
    (sysctl-name-regex #"^net.routetable")
)

(allow sysctl-write
    (sysctl-name
        "kern.tcsm_enable"))

(deny mach-lookup (xpc-service-name-prefix ""))
(allow mach-lookup
    (xpc-service-name "com.apple.PerformanceAnalysis.animationperfd")
    (xpc-service-name "com.apple.accessibility.mediaaccessibilityd")
    (xpc-service-name "com.apple.audio.SandboxHelper")
    (xpc-service-name "com.apple.coremedia.videodecoder")
    (xpc-service-name "com.apple.coremedia.videoencoder")
    (xpc-service-name "com.apple.hiservices-xpcservice")
    (xpc-service-name "com.apple.print.normalizerd")
)

;; Utility functions for home directory relative path filters
(define (home-regex home-relative-regex)
  (regex (string-append "^" (regex-quote (param "HOME_DIR")) home-relative-regex)))

(define (home-subpath home-relative-subpath)
  (subpath (string-append (param "HOME_DIR") home-relative-subpath)))

(define (home-literal home-relative-literal)
  (literal (string-append (param "HOME_DIR") home-relative-literal)))

(define (allow-read-directory-and-issue-read-extensions path)
    (if path
        (begin
            (allow file-read* (subpath path))
            (allow file-issue-extension (require-all (extension-class "com.apple.app-sandbox.read") (subpath path))))))

(define (allow-read-write-directory-and-issue-read-write-extensions path)
    (if path
        (begin
            (allow file-read* file-write* (subpath path))
            (allow file-issue-extension (require-all (extension-class "com.apple.app-sandbox.read") (subpath path)))
            (allow file-issue-extension (require-all (extension-class "com.apple.app-sandbox.read-write") (subpath path))))))

;; Remove when <rdar://problem/29646094> is fixed.
(define (HEX-pattern-match-generator pattern-descriptor)
    (letrec ((pattern-string ""))
        (for-each  (lambda (repeat-count)
            (if (zero? repeat-count)
                (set! pattern-string (string-append  pattern-string "-"))
                (let appender ((count repeat-count))
                    (if (> count 0)
                        (begin
                            (set! pattern-string (string-append  pattern-string "[0-9A-F]"))
                            (appender (- count 1)))))))
            pattern-descriptor)
    pattern-string))

;; return a regex pattern matching string for 8-4-4-4-12 UUIDs:
(define (uuid-HEX-pattern-match-string)
    (HEX-pattern-match-generator '(8 0 4 0 4 0 4 0 12)))

;; global to hold the computed UUID matching pattern.
(define *uuid-pattern* "")

(define (uuid-regex-string)
    (if (zero? (string-length *uuid-pattern*))
        (set! *uuid-pattern* (uuid-HEX-pattern-match-string)))
    *uuid-pattern*)

;; Read-only preferences and data
(allow file-read*
    ;; Basic system paths
    (subpath "/Library/Dictionaries")
    (subpath "/Library/Fonts")
    (subpath "/Library/Frameworks")
    (subpath "/Library/Managed Preferences")
    (subpath "/Library/Speech/Synthesizers")
    (regex #"^/private/etc/(hosts|group|passwd)$")

    (literal "/Library/Application Support/CrashReporter/SubmitDiagInfo.domains")

    ;; System and user preferences
    (home-literal "/.CFUserTextEncoding")

    ;; FIXME: This should be removed when <rdar://problem/8957845> is fixed.
    (home-subpath "/Library/Fonts")

    (subpath "/Library/Audio/Plug-Ins/HAL")

    (home-subpath "/Library/Dictionaries"))

(allow file-read-data
    (literal "/usr/local/lib/log") ; <rdar://problem/36629495>
    ;; Needed for AES3 support
    (subpath "/Library/Audio/Plug-Ins/Components"))

;; Preferences support
(allow user-preference-read
    (preference-domain
        "kCFPreferencesAnyApplication"
        "com.apple.Accessibility"
        "com.apple.ATS"
        "com.apple.CoreGraphics"
        "com.apple.DownloadAssessment"
        "com.apple.HIToolbox"
        "com.apple.LaunchServices"
        "com.apple.MultitouchSupport" ;; FIXME: Remove when <rdar://problem/13011633> is fixed.
        "com.apple.ServicesMenu.Services" ;; Needed for NSAttributedString <rdar://problem/10844321>
        "com.apple.ViewBridge" ;; Needed for Input elements.
        "com.apple.WebFoundation"
        "com.apple.avfoundation"
        "com.apple.avfoundation.frecents" ;; <rdar://problem/33137029>
        "com.apple.avfoundation.videoperformancehud" ;; <rdar://problem/31594568>
        "com.apple.coremedia"
        "com.apple.crypto"
        "com.apple.driver.AppleBluetoothMultitouch.mouse"
        "com.apple.driver.AppleBluetoothMultitouch.trackpad"
        "com.apple.driver.AppleHIDMouse"
        "com.apple.lookup.shared"
        "com.apple.mediaaccessibility" ;; Needed for custom caption styles
        "com.apple.networkConnect"
        "com.apple.speech.voice.prefs"
        "com.apple.systemsound"
        "com.apple.universalaccess"
        "edu.mit.Kerberos"
        "pbs" ;; Needed for NSAttributedString <rdar://problem/10844321>
))

; (Temporary) backward compatibility with non-CFPreferences readers.
(allow file-read*
    (literal "/Library/Preferences/com.apple.ViewBridge.plist"))

; FIXME: This is needed for some security framework calls (that use non-CFPreferences readers)
(allow file-read-data
    (literal "/Library/Preferences/com.apple.security.plist")
    (home-subpath "/Library/Preferences/com.apple.security.plist"))

;; On-disk WebKit2 framework location, to account for debug installations outside of /System/Library/Frameworks,
;; and to allow issuing extensions.
(allow-read-directory-and-issue-read-extensions (param "WEBKIT2_FRAMEWORK_DIR"))

;; Allow issuing extensions to system libraries that the Network process can already read.
;; This is to avoid warnings attempting to create extensions for these resources.
(allow-read-directory-and-issue-read-extensions "/System/Library/PrivateFrameworks/WebInspectorUI.framework")

;; Sandbox extensions
(define (apply-read-and-issue-extension op path-filter)
    (op file-read* path-filter)
    (op file-issue-extension (require-all (extension-class "com.apple.app-sandbox.read") path-filter)))
(define (apply-write-and-issue-extension op path-filter)
    (op file-write* path-filter)
    (op file-issue-extension (require-all (extension-class "com.apple.app-sandbox.read-write") path-filter)))
(define (read-only-and-issue-extensions path-filter)
    (apply-read-and-issue-extension allow path-filter))
(define (read-write-and-issue-extensions path-filter)
    (apply-read-and-issue-extension allow path-filter)
    (apply-write-and-issue-extension allow path-filter))
(read-only-and-issue-extensions (extension "com.apple.app-sandbox.read"))
(read-write-and-issue-extensions (extension "com.apple.app-sandbox.read-write"))
(allow mach-lookup (extension "com.apple.app-sandbox.mach")) ;; FIXME: Should be removed when <rdar://problem/13066206> is fixed.

(allow mach-lookup
#if __MAC_OS_X_VERSION_MIN_REQUIRED >= 101500
    (with report) (with telemetry)
#endif
    (global-name "com.apple.audio.AudioComponentRegistrar")
    (global-name "com.apple.awdd")
    (global-name "com.apple.cfprefsd.agent")
    (global-name "com.apple.cookied")
    (global-name "com.apple.diagnosticd")
    (global-name "com.apple.iconservices")
    (global-name "com.apple.iconservices.store")
    (global-name "com.apple.mobileassetd")
    (global-name "com.apple.powerlog.plxpclogger.xpc")
    (global-name "com.apple.system.logger")
)

;; Various services required by AppKit and other frameworks
(allow mach-lookup
#if __MAC_OS_X_VERSION_MIN_REQUIRED < 101400
       (global-name "com.apple.FontObjectsServer")
#endif
       (global-name "com.apple.PowerManagement.control")
       (global-name "com.apple.SystemConfiguration.configd")
       (global-name "com.apple.analyticsd")
       (global-name "com.apple.assertiond.processassertionconnection")
       (global-name "com.apple.audio.SystemSoundServer-OSX")
       (global-name "com.apple.audio.audiohald")
       (global-name "com.apple.cfprefsd.daemon")
       (global-name "com.apple.coreservices.launchservicesd")
       (global-name "com.apple.fonts")
       (global-name "com.apple.mediaremoted.xpc")
       (global-name "com.apple.logd")
       (global-name "com.apple.logd.events")
       (global-name "com.apple.lsd.mapdb")
       (global-name "com.apple.lskdd") ;; <rdar://problem/49123855>
       (global-name "com.apple.tccd")
       (global-name "com.apple.tccd.system")
       (global-name "com.apple.trustd.agent")
#if __MAC_OS_X_VERSION_MIN_REQUIRED >= 101400 || PLATFORM(MACCATALYST)
       (global-name "com.apple.CARenderServer") ; Needed for [CAContext remoteContextWithOptions]
#else
       (global-name "com.apple.windowserver.active")
#endif
)

#if __MAC_OS_X_VERSION_MIN_REQUIRED >= 101400 || PLATFORM(MACCATALYST)
;; <rdar://problem/47268166>
(allow mach-lookup (xpc-service-name "com.apple.MTLCompilerService"))
#endif

#if __MAC_OS_X_VERSION_MIN_REQUIRED >= 101400 || PLATFORM(MACCATALYST)
(deny mach-lookup (with no-log)
    (global-name "com.apple.CoreServices.coreservicesd")
    (global-name "com.apple.DiskArbitration.diskarbitrationd")
    (global-name "com.apple.ViewBridgeAuxiliary")
    (global-name "com.apple.windowserver.active"))
#endif

;; Needed to support encrypted media playback <rdar://problem/40038478>
(allow mach-lookup
    (global-name "com.apple.SecurityServer")
    (global-name "com.apple.ocspd"))

(allow file-read* file-write* (subpath "/private/var/db/mds/system")) ;; FIXME: This should be removed when <rdar://problem/9538414> is fixed.

(allow file-read*
       (subpath "/private/var/db/mds")
       (literal "/private/var/db/DetachedSignatures"))

(allow ipc-posix-shm-read* ipc-posix-shm-write-data ipc-posix-shm-write-create
       (ipc-posix-name "com.apple.AppleDatabaseChanged"))

;; CoreFoundation. We don't import com.apple.corefoundation.sb, because it allows unnecessary access to pasteboard.
(allow mach-lookup
    (global-name-regex #"^com.apple.distributed_notifications")
#if !HAVE(CSCHECKFIXDISABLE)
    (global-name "com.apple.CoreServices.coreservicesd")
#endif
)

(allow file-read-data
    (literal "/dev/autofs_nowait")) ; Used by CF to circumvent automount triggers
(allow ipc-posix-shm
    (ipc-posix-name-regex #"^CFPBS:")) ; <rdar://problem/13757475>
(allow system-fsctl (fsctl-command (_IO "h" 47)))

;; Graphics
(system-graphics)

;; Networking
(allow network-outbound
       ;; Local mDNSResponder for DNS, arbitrary outbound TCP
       ;; Note: This is needed for some media playback features. <rdar://problem/38191574>
       ;; Remove this permission when <rdar://problem/38240572> is fixed.
       (literal "/private/var/run/mDNSResponder")
       ;; ObjC map_images needs to send logging data to syslog. <rdar://problem/39778918>
       (literal "/private/var/run/syslog")
       (remote tcp))

;; CFNetwork
(allow file-read-data (path "/private/var/db/nsurlstoraged/dafsaData.bin"))

#if PLATFORM(MAC)
;; FIXME should be removed when <rdar://problem/9347205> + related radar in Safari is fixed
(allow mach-lookup
       (global-name "com.apple.system.logger")
       (global-name "com.apple.system.notification_center"))
#endif

(if (defined? 'vnode-type)
        (deny file-write-create (vnode-type SYMLINK)))

;; Reserve a namespace for additional protected extended attributes.
(deny file-read-xattr file-write-xattr (xattr-regex #"^com\.apple\.security\.private\."))

(deny file-read* file-write* (with no-log)
       ;; FIXME: Should be removed after <rdar://problem/10463881> is fixed.
       (home-literal "/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2")
       (home-literal "/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2-journal"))

;; Deny access needed for unnecessary NSApplication initialization.
;; FIXME: This can be removed once <rdar://problem/13011633> is fixed.
(deny file-read* (with no-log)
       (subpath "/Library/InputManagers")
       (home-subpath "/Library/InputManagers"))
(deny user-preference-read (with no-log)
    (preference-domain "com.apple.speech.recognition.AppleSpeechRecognition.prefs"))
(deny mach-lookup (with no-log)
       (global-name "com.apple.coreservices.appleevents")
       (global-name "com.apple.pasteboard.1")
       (global-name "com.apple.speech.recognitionserver"))
#if PLATFORM(MAC)
;; Also part of unnecessary NSApplication initialization, but we can't block access to these yet, see <rdar://problem/13869765>.
(allow file-read*
       (subpath "/Library/Components")
       (subpath "/Library/Keyboard Layouts")
       (subpath "/Library/Input Methods")
       (home-subpath "/Library/Components")
       (home-subpath "/Library/Keyboard Layouts")
       (home-subpath "/Library/Input Methods"))
#endif

;; Data Detectors
(allow file-read* (subpath "/private/var/db/datadetectors/sys"))



				BCFFCA8A160D6DEA003DF315 /* Add XPCServices symlink */,
			);
			dependencies = (
				5742A2FA2535619D00B7BA14 /* PBXTargetDependency */,
				BCA8D46815BCE0D6009DC1F1 /* PBXTargetDependency */,
				372EBB492017E6CF00085064 /* PBXTargetDependency */,
				BC82844616B4FF6600A278FE /* PBXTargetDependency */,

		572EBBDA2538F6B4000552B3 /* AppAttestInternalSoftLink.mm in Sources */ = {isa = PBXBuildFile; fileRef = 572EBBD82538F6A1000552B3 /* AppAttestInternalSoftLink.mm */; };
		572EBBDB2538F6B6000552B3 /* AppAttestInternalSoftLink.h in Headers */ = {isa = PBXBuildFile; fileRef = 572EBBD92538F6A1000552B3 /* AppAttestInternalSoftLink.h */; };
		572EBBDD25392181000552B3 /* AppAttestSPI.h in Headers */ = {isa = PBXBuildFile; fileRef = 572EBBDC25392181000552B3 /* AppAttestSPI.h */; };
		572EBBBF2536A60A000552B3 /* WebAuthnConnectionToWebProcessMessageReceiver.cpp in Sources */ = {isa = PBXBuildFile; fileRef = 572EBBBB2536A60A000552B3 /* WebAuthnConnectionToWebProcessMessageReceiver.cpp */; };
		572EBBC02536A60A000552B3 /* WebAuthnConnectionToWebProcessMessages.h in Headers */ = {isa = PBXBuildFile; fileRef = 572EBBBC2536A60A000552B3 /* WebAuthnConnectionToWebProcessMessages.h */; };
		572EBBC12536A60A000552B3 /* WebAuthnProcessMessageReceiver.cpp in Sources */ = {isa = PBXBuildFile; fileRef = 572EBBBD2536A60A000552B3 /* WebAuthnProcessMessageReceiver.cpp */; };
		572EBBC22536A60A000552B3 /* WebAuthnProcessMessages.h in Headers */ = {isa = PBXBuildFile; fileRef = 572EBBBE2536A60A000552B3 /* WebAuthnProcessMessages.h */; };
		572EBBC42536AB84000552B3 /* com.apple.WebKit.WebAuthnProcess.sb in Resources */ = {isa = PBXBuildFile; fileRef = 572EBBC32536AB84000552B3 /* com.apple.WebKit.WebAuthnProcess.sb */; };
		572EBBC92536AFD5000552B3 /* WebAuthnProcessProxy.h in Headers */ = {isa = PBXBuildFile; fileRef = 572EBBC62536AFD5000552B3 /* WebAuthnProcessProxy.h */; };
		572EBBCC2536B04F000552B3 /* WebAuthnProcessConnectionInfo.h in Headers */ = {isa = PBXBuildFile; fileRef = 572EBBCB2536B04F000552B3 /* WebAuthnProcessConnectionInfo.h */; };
		572EBBCF2536BB11000552B3 /* WebAuthnProcessProxyMessageReceiver.cpp in Sources */ = {isa = PBXBuildFile; fileRef = 572EBBCD2536BB10000552B3 /* WebAuthnProcessProxyMessageReceiver.cpp */; };
		572EBBD02536BB11000552B3 /* WebAuthnProcessProxyMessages.h in Headers */ = {isa = PBXBuildFile; fileRef = 572EBBCE2536BB10000552B3 /* WebAuthnProcessProxyMessages.h */; };
		572EBBD52536C885000552B3 /* WebAuthnProcessConnection.h in Headers */ = {isa = PBXBuildFile; fileRef = 572EBBD22536C885000552B3 /* WebAuthnProcessConnection.h */; };
		572EBBD72537EBAE000552B3 /* ExtraPrivateSymbolsForTAPI.h in Headers */ = {isa = PBXBuildFile; fileRef = ECA680D31E6904B500731D20 /* ExtraPrivateSymbolsForTAPI.h */; };
		572FD44322265CE200A1ECC3 /* WebViewDidMoveToWindowObserver.h in Headers */ = {isa = PBXBuildFile; fileRef = 572FD44122265CE200A1ECC3 /* WebViewDidMoveToWindowObserver.h */; };
		574217922400E286002B303D /* LocalAuthenticationSPI.h in Headers */ = {isa = PBXBuildFile; fileRef = 574217912400E098002B303D /* LocalAuthenticationSPI.h */; };
		5742A2EB2535613F00B7BA14 /* AuxiliaryProcessMain.cpp in Sources */ = {isa = PBXBuildFile; fileRef = 5CE9120F2293C25F005BEC78 /* AuxiliaryProcessMain.cpp */; };
		5742A2EC2535613F00B7BA14 /* XPCServiceMain.mm in Sources */ = {isa = PBXBuildFile; fileRef = BC82839616B47EC400A278FE /* XPCServiceMain.mm */; };
		5742A2EE2535613F00B7BA14 /* Foundation.framework in Frameworks */ = {isa = PBXBuildFile; fileRef = BC3DE46815A91763008D26FC /* Foundation.framework */; };
		5742A2EF2535613F00B7BA14 /* WebKit.framework in Frameworks */ = {isa = PBXBuildFile; fileRef = 8DC2EF5B0486A6940098B216 /* WebKit.framework */; };
		5742A30825358A0400B7BA14 /* WebAuthnProcessCreationParameters.h in Headers */ = {isa = PBXBuildFile; fileRef = 5742A30625358A0400B7BA14 /* WebAuthnProcessCreationParameters.h */; };
		5742A30D25358EFD00B7BA14 /* WebAuthnConnectionToWebProcess.h in Headers */ = {isa = PBXBuildFile; fileRef = 5742A30A25358EFD00B7BA14 /* WebAuthnConnectionToWebProcess.h */; };
		5742A318253648E500B7BA14 /* WebAuthnProcess.h in Headers */ = {isa = PBXBuildFile; fileRef = 5742A315253648E400B7BA14 /* WebAuthnProcess.h */; };
		574728D123456E98001700AF /* _WKWebAuthenticationPanel.h in Headers */ = {isa = PBXBuildFile; fileRef = 574728CF23456E98001700AF /* _WKWebAuthenticationPanel.h */; settings = {ATTRIBUTES = (Private, ); }; };
		574728D4234570AE001700AF /* _WKWebAuthenticationPanelInternal.h in Headers */ = {isa = PBXBuildFile; fileRef = 574728D3234570AE001700AF /* _WKWebAuthenticationPanelInternal.h */; };
		57597EB921811D9A0037F924 /* CtapHidDriver.h in Headers */ = {isa = PBXBuildFile; fileRef = 57597EB721811D9A0037F924 /* CtapHidDriver.h */; };

		575B1BB823CE9BFC0020639A /* WebAutomationSessionProxy.cpp in Sources */ = {isa = PBXBuildFile; fileRef = 1C0A19441C8FF1A800FE0EBB /* WebAutomationSessionProxy.cpp */; };
		575B1BB923CE9C0B0020639A /* SimulatedInputDispatcher.cpp in Sources */ = {isa = PBXBuildFile; fileRef = 995226D5207D184600F78420 /* SimulatedInputDispatcher.cpp */; };
		575B1BBA23CE9C130020639A /* WebAutomationSession.cpp in Sources */ = {isa = PBXBuildFile; fileRef = 9955A6EA1C7980BB00EB6A93 /* WebAutomationSession.cpp */; };
		576BCD5E252FD22D00CE9F87 /* Foundation.framework in Frameworks */ = {isa = PBXBuildFile; fileRef = BC3DE46815A91763008D26FC /* Foundation.framework */; };
		576CA9D722B862180030143C /* SOAuthorizationNSURLExtras.h in Headers */ = {isa = PBXBuildFile; fileRef = 57FD317322B35148008D0E8B /* SOAuthorizationNSURLExtras.h */; settings = {ATTRIBUTES = (Private, ); }; };
		5772F206217DBD6A0056BF2C /* HidService.h in Headers */ = {isa = PBXBuildFile; fileRef = 5772F204217DBD6A0056BF2C /* HidService.h */; };
		577FF7822346E81C004EDFB9 /* APIWebAuthenticationPanelClient.h in Headers */ = {isa = PBXBuildFile; fileRef = 577FF7812346E81C004EDFB9 /* APIWebAuthenticationPanelClient.h */; };

		579F1BF623C80DB600C7D4B4 /* _WKWebAuthenticationAssertionResponse.h in Headers */ = {isa = PBXBuildFile; fileRef = 579F1BF423C80DB600C7D4B4 /* _WKWebAuthenticationAssertionResponse.h */; settings = {ATTRIBUTES = (Private, ); }; };
		579F1BF923C80EC600C7D4B4 /* _WKWebAuthenticationAssertionResponseInternal.h in Headers */ = {isa = PBXBuildFile; fileRef = 579F1BF823C80EC600C7D4B4 /* _WKWebAuthenticationAssertionResponseInternal.h */; };
		579F1BFC23C811CF00C7D4B4 /* APIWebAuthenticationAssertionResponse.h in Headers */ = {isa = PBXBuildFile; fileRef = 579F1BFA23C811CF00C7D4B4 /* APIWebAuthenticationAssertionResponse.h */; };
		57A9FF09252BEAF0006A2040 /* main.mm in Sources */ = {isa = PBXBuildFile; fileRef = 57A9FF08252BEAF0006A2040 /* main.mm */; };
		57A9FF1D252C6CE6006A2040 /* libWTF.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 57A9FF15252C6AEF006A2040 /* libWTF.a */; };
		57AC8F50217FEED90055438C /* HidConnection.h in Headers */ = {isa = PBXBuildFile; fileRef = 57AC8F4E217FEED90055438C /* HidConnection.h */; };
		57B4B46020B504AC00D4AD79 /* ClientCertificateAuthenticationXPCConstants.h in Headers */ = {isa = PBXBuildFile; fileRef = 57B4B45E20B504AB00D4AD79 /* ClientCertificateAuthenticationXPCConstants.h */; };
		57B826412304EB3E00B72EB0 /* NearFieldSPI.h in Headers */ = {isa = PBXBuildFile; fileRef = 57B826402304EB3E00B72EB0 /* NearFieldSPI.h */; };

		57B8264C230603C100B72EB0 /* MockNfcService.h in Headers */ = {isa = PBXBuildFile; fileRef = 57B8264A230603C100B72EB0 /* MockNfcService.h */; };
		57BBEA6D22BC0BFE00273995 /* SOAuthorizationLoadPolicy.h in Headers */ = {isa = PBXBuildFile; fileRef = 57BBEA6C22BC0BFE00273995 /* SOAuthorizationLoadPolicy.h */; };
		57C6244B234679A400383FE7 /* WebAuthenticationFlags.h in Headers */ = {isa = PBXBuildFile; fileRef = 57C6244A234679A400383FE7 /* WebAuthenticationFlags.h */; };
		57DCED6F2142EE630016B847 /* WebAuthenticatorCoordinatorMessages.h in Headers */ = {isa = PBXBuildFile; fileRef = 57DCED6A2142EAE20016B847 /* WebAuthenticatorCoordinatorMessages.h */; };
		57DCED702142EE680016B847 /* WebAuthenticatorCoordinatorProxyMessageReceiver.cpp in Sources */ = {isa = PBXBuildFile; fileRef = 57DCED6C2142EAF90016B847 /* WebAuthenticatorCoordinatorProxyMessageReceiver.cpp */; };
		57DCED712142EE6C0016B847 /* WebAuthenticatorCoordinatorProxyMessages.h in Headers */ = {isa = PBXBuildFile; fileRef = 57DCED6D2142EAFA0016B847 /* WebAuthenticatorCoordinatorProxyMessages.h */; };
		57DCEDAC214C60270016B847 /* LocalAuthenticator.h in Headers */ = {isa = PBXBuildFile; fileRef = 57DCEDA12149C1E20016B847 /* LocalAuthenticator.h */; };

			remoteGlobalIDString = C0CE72851247E66800BC0EC4;
			remoteInfo = "Derived Sources";
		};
		5742A2E72535613F00B7BA14 /* PBXContainerItemProxy */ = {
			isa = PBXContainerItemProxy;
			containerPortal = 0867D690FE84028FC02AAC07 /* Project object */;
			proxyType = 1;
			remoteGlobalIDString = E1AC2E2720F7B94C00B0897D;
			remoteInfo = "Unlock Keychain";
		};
		5742A2E92535613F00B7BA14 /* PBXContainerItemProxy */ = {
			isa = PBXContainerItemProxy;
			containerPortal = 0867D690FE84028FC02AAC07 /* Project object */;
			proxyType = 1;
			remoteGlobalIDString = 8DC2EF4F0486A6940098B216;
			remoteInfo = WebKit;
		};
		5742A2F92535619D00B7BA14 /* PBXContainerItemProxy */ = {
			isa = PBXContainerItemProxy;
			containerPortal = 0867D690FE84028FC02AAC07 /* Project object */;
			proxyType = 1;
			remoteGlobalIDString = 5742A2E52535613F00B7BA14;
			remoteInfo = WebAuthentication;
		};
		BC8283D416B4C01F00A278FE /* PBXContainerItemProxy */ = {
			isa = PBXContainerItemProxy;

			name = "Copy Shims";
			runOnlyForDeploymentPostprocessing = 0;
		};
		57A9FEFA252BD8AA006A2040 /* CopyFiles */ = {
			isa = PBXCopyFilesBuildPhase;
			buildActionMask = 2147483647;
			dstPath = /usr/share/man/man1/;
			dstSubfolderSpec = 0;
			files = (
			);
			runOnlyForDeploymentPostprocessing = 1;
		};
		7CB16FEE1724BA05007A0A95 /* Copy Plug-in Sandbox Profiles */ = {
			isa = PBXCopyFilesBuildPhase;
			buildActionMask = 2147483647;

		510523711C73D22B007993CB /* WebIDBConnectionToServer.messages.in */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = text; path = WebIDBConnectionToServer.messages.in; sourceTree = "<group>"; };
		510523721C73D37B007993CB /* WebIDBConnectionToServerMessageReceiver.cpp */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.cpp; name = WebIDBConnectionToServerMessageReceiver.cpp; path = DerivedSources/WebKit2/WebIDBConnectionToServerMessageReceiver.cpp; sourceTree = BUILT_PRODUCTS_DIR; };
		510523731C73D37B007993CB /* WebIDBConnectionToServerMessages.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; name = WebIDBConnectionToServerMessages.h; path = DerivedSources/WebKit2/WebIDBConnectionToServerMessages.h; sourceTree = BUILT_PRODUCTS_DIR; };
		510523771C73DA70007993CB /* WebIDBConnectionToClientMessageReceiver.cpp */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.cpp; name = WebIDBConnectionToClientMessageReceiver.cpp; path = DerivedSources/WebKit2/WebIDBConnectionToClientMessageReceiver.cpp; sourceTree = BUILT_PRODUCTS_DIR; };
		510523781C73DA70007993CB /* WebIDBConnectionToClientMessages.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; name = WebIDBConnectionToClientMessages.h; path = DerivedSources/WebKit2/WebIDBConnectionToClientMessages.h; sourceTree = BUILT_PRODUCTS_DIR; };
		5105B0D4162F7A7A00E27709 /* NetworkProcessConnection.cpp */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.cpp; name = NetworkProcessConnection.cpp; path = Network/NetworkProcessConnection.cpp; sourceTree = "<group>"; };
		5105B0D5162F7A7A00E27709 /* NetworkProcessConnection.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; name = NetworkProcessConnection.h; path = Network/NetworkProcessConnection.h; sourceTree = "<group>"; };
		5105B0F31630872E00E27709 /* NetworkProcessProxy.messages.in */ = {isa = PBXFileReference; lastKnownFileType = text; path = NetworkProcessProxy.messages.in; sourceTree = "<group>"; };

		511065FB23EC956B005443D6 /* WKContentWorldInternal.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; path = WKContentWorldInternal.h; sourceTree = "<group>"; };
		5110AE0A133C16CB0072717A /* WKIconDatabase.cpp */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.cpp; path = WKIconDatabase.cpp; sourceTree = "<group>"; };
		5110AE0B133C16CB0072717A /* WKIconDatabase.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; path = WKIconDatabase.h; sourceTree = "<group>"; };
		5118E9A21F295963003EF9F5 /* StorageProcessProxyMessages.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; name = StorageProcessProxyMessages.h; path = DerivedSources/WebKit2/StorageProcessProxyMessages.h; sourceTree = BUILT_PRODUCTS_DIR; };
		5118E9A31F295963003EF9F5 /* StorageToWebProcessConnectionMessageReceiver.cpp */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.cpp.cpp; name = StorageToWebProcessConnectionMessageReceiver.cpp; path = DerivedSources/WebKit2/StorageToWebProcessConnectionMessageReceiver.cpp; sourceTree = BUILT_PRODUCTS_DIR; };
		5118E9A41F295963003EF9F5 /* StorageToWebProcessConnectionMessages.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; name = StorageToWebProcessConnectionMessages.h; path = DerivedSources/WebKit2/StorageToWebProcessConnectionMessages.h; sourceTree = BUILT_PRODUCTS_DIR; };
		5118E9A51F295963003EF9F5 /* StorageProcessMessageReceiver.cpp */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.cpp.cpp; name = StorageProcessMessageReceiver.cpp; path = DerivedSources/WebKit2/StorageProcessMessageReceiver.cpp; sourceTree = BUILT_PRODUCTS_DIR; };
		5118E9A61F295963003EF9F5 /* StorageProcessMessages.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; name = StorageProcessMessages.h; path = DerivedSources/WebKit2/StorageProcessMessages.h; sourceTree = BUILT_PRODUCTS_DIR; };
		5118E9A71F295963003EF9F5 /* StorageProcessProxyMessageReceiver.cpp */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.cpp.cpp; name = StorageProcessProxyMessageReceiver.cpp; path = DerivedSources/WebKit2/StorageProcessProxyMessageReceiver.cpp; sourceTree = BUILT_PRODUCTS_DIR; };
		511F7D3F1EB1BCEE00E47B83 /* WebsiteDataStoreParameters.cpp */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.cpp; path = WebsiteDataStoreParameters.cpp; sourceTree = "<group>"; };
		511F7D401EB1BCEE00E47B83 /* WebsiteDataStoreParameters.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; path = WebsiteDataStoreParameters.h; sourceTree = "<group>"; };
		511F8A77138B460900A95F44 /* SecItemShimLibrary.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; name = SecItemShimLibrary.h; path = ../../WebProcess/mac/SecItemShimLibrary.h; sourceTree = "<group>"; };

		572EBBD82538F6A1000552B3 /* AppAttestInternalSoftLink.mm */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.cpp.objcpp; path = AppAttestInternalSoftLink.mm; sourceTree = "<group>"; };
		572EBBD92538F6A1000552B3 /* AppAttestInternalSoftLink.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; path = AppAttestInternalSoftLink.h; sourceTree = "<group>"; };
		572EBBDC25392181000552B3 /* AppAttestSPI.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; path = AppAttestSPI.h; sourceTree = "<group>"; };
		572EBBB92536A06E000552B3 /* Info-iOS.plist */ = {isa = PBXFileReference; lastKnownFileType = text.plist; name = "Info-iOS.plist"; path = "WebAuthnProcess/EntryPoint/Cocoa/XPCService/WebAuthnService/Info-iOS.plist"; sourceTree = SOURCE_ROOT; };
		572EBBBA2536A06E000552B3 /* Info-OSX.plist */ = {isa = PBXFileReference; lastKnownFileType = text.plist; name = "Info-OSX.plist"; path = "WebAuthnProcess/EntryPoint/Cocoa/XPCService/WebAuthnService/Info-OSX.plist"; sourceTree = SOURCE_ROOT; };
		572EBBBB2536A60A000552B3 /* WebAuthnConnectionToWebProcessMessageReceiver.cpp */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.cpp; path = WebAuthnConnectionToWebProcessMessageReceiver.cpp; sourceTree = "<group>"; };
		572EBBBC2536A60A000552B3 /* WebAuthnConnectionToWebProcessMessages.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; path = WebAuthnConnectionToWebProcessMessages.h; sourceTree = "<group>"; };
		572EBBBD2536A60A000552B3 /* WebAuthnProcessMessageReceiver.cpp */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.cpp; path = WebAuthnProcessMessageReceiver.cpp; sourceTree = "<group>"; };
		572EBBBE2536A60A000552B3 /* WebAuthnProcessMessages.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; path = WebAuthnProcessMessages.h; sourceTree = "<group>"; };
		572EBBC32536AB84000552B3 /* com.apple.WebKit.WebAuthnProcess.sb */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = text; path = com.apple.WebKit.WebAuthnProcess.sb; sourceTree = "<group>"; };
		572EBBC52536AFD5000552B3 /* WebAuthnProcessProxy.cpp */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.cpp; path = WebAuthnProcessProxy.cpp; sourceTree = "<group>"; };
		572EBBC62536AFD5000552B3 /* WebAuthnProcessProxy.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; path = WebAuthnProcessProxy.h; sourceTree = "<group>"; };
		572EBBC72536AFD5000552B3 /* WebAuthnProcessProxy.messages.in */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = text; path = WebAuthnProcessProxy.messages.in; sourceTree = "<group>"; };
		572EBBCB2536B04F000552B3 /* WebAuthnProcessConnectionInfo.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; path = WebAuthnProcessConnectionInfo.h; sourceTree = "<group>"; };
		572EBBCD2536BB10000552B3 /* WebAuthnProcessProxyMessageReceiver.cpp */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.cpp; path = WebAuthnProcessProxyMessageReceiver.cpp; sourceTree = "<group>"; };
		572EBBCE2536BB10000552B3 /* WebAuthnProcessProxyMessages.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; path = WebAuthnProcessProxyMessages.h; sourceTree = "<group>"; };
		572EBBD12536C885000552B3 /* WebAuthnProcessConnection.cpp */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.cpp; path = WebAuthnProcessConnection.cpp; sourceTree = "<group>"; };
		572EBBD22536C885000552B3 /* WebAuthnProcessConnection.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; path = WebAuthnProcessConnection.h; sourceTree = "<group>"; };
		572EBBD32536C885000552B3 /* WebAuthnProcessConnection.messages.in */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = text; path = WebAuthnProcessConnection.messages.in; sourceTree = "<group>"; };
		572FD44122265CE200A1ECC3 /* WebViewDidMoveToWindowObserver.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; path = WebViewDidMoveToWindowObserver.h; sourceTree = "<group>"; };
		574217912400E098002B303D /* LocalAuthenticationSPI.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; path = LocalAuthenticationSPI.h; sourceTree = "<group>"; };
		5742A2F72535613F00B7BA14 /* com.apple.WebKit.WebAuthn.xpc */ = {isa = PBXFileReference; explicitFileType = "wrapper.xpc-service"; includeInIndex = 0; path = com.apple.WebKit.WebAuthn.xpc; sourceTree = BUILT_PRODUCTS_DIR; };
		5742A30625358A0400B7BA14 /* WebAuthnProcessCreationParameters.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; path = WebAuthnProcessCreationParameters.h; sourceTree = "<group>"; };
		5742A30725358A0400B7BA14 /* WebAuthnProcessCreationParameters.cpp */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.cpp; path = WebAuthnProcessCreationParameters.cpp; sourceTree = "<group>"; };
		5742A30A25358EFD00B7BA14 /* WebAuthnConnectionToWebProcess.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; path = WebAuthnConnectionToWebProcess.h; sourceTree = "<group>"; };
		5742A30B25358EFD00B7BA14 /* WebAuthnConnectionToWebProcess.messages.in */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = text; path = WebAuthnConnectionToWebProcess.messages.in; sourceTree = "<group>"; };
		5742A30C25358EFD00B7BA14 /* WebAuthnConnectionToWebProcess.cpp */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.cpp; path = WebAuthnConnectionToWebProcess.cpp; sourceTree = "<group>"; };
		5742A313253648E400B7BA14 /* WebAuthnProcess.messages.in */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = text; path = WebAuthnProcess.messages.in; sourceTree = "<group>"; };
		5742A314253648E400B7BA14 /* WebAuthnProcess.cpp */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.cpp; path = WebAuthnProcess.cpp; sourceTree = "<group>"; };
		5742A315253648E400B7BA14 /* WebAuthnProcess.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; path = WebAuthnProcess.h; sourceTree = "<group>"; };
		5742A31A253675E900B7BA14 /* WebAuthnProcessIOS.mm */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.cpp.objcpp; path = WebAuthnProcessIOS.mm; sourceTree = "<group>"; };
		5742A31C253675F600B7BA14 /* WebAuthnProcessMac.mm */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.cpp.objcpp; path = WebAuthnProcessMac.mm; sourceTree = "<group>"; };
		5742A31D253675F600B7BA14 /* com.apple.WebKit.WebAuthnProcess.sb.in */ = {isa = PBXFileReference; lastKnownFileType = text; path = com.apple.WebKit.WebAuthnProcess.sb.in; sourceTree = "<group>"; };
		5742A31E2536949300B7BA14 /* WebAuthnServiceEntryPoint.mm */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.cpp.objcpp; path = WebAuthnServiceEntryPoint.mm; sourceTree = "<group>"; };
		574728CF23456E98001700AF /* _WKWebAuthenticationPanel.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; path = _WKWebAuthenticationPanel.h; sourceTree = "<group>"; };
		574728D023456E98001700AF /* _WKWebAuthenticationPanel.mm */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.cpp.objcpp; path = _WKWebAuthenticationPanel.mm; sourceTree = "<group>"; };
		574728D3234570AE001700AF /* _WKWebAuthenticationPanelInternal.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; path = _WKWebAuthenticationPanelInternal.h; sourceTree = "<group>"; };

		579F1BF823C80EC600C7D4B4 /* _WKWebAuthenticationAssertionResponseInternal.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; path = _WKWebAuthenticationAssertionResponseInternal.h; sourceTree = "<group>"; };
		579F1BFA23C811CF00C7D4B4 /* APIWebAuthenticationAssertionResponse.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; path = APIWebAuthenticationAssertionResponse.h; sourceTree = "<group>"; };
		579F1BFB23C811CF00C7D4B4 /* APIWebAuthenticationAssertionResponse.cpp */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.cpp.cpp; path = APIWebAuthenticationAssertionResponse.cpp; sourceTree = "<group>"; };
		57A9FF07252BE6E0006A2040 /* WebAuthnService.xcconfig */ = {isa = PBXFileReference; lastKnownFileType = text.xcconfig; path = WebAuthnService.xcconfig; sourceTree = "<group>"; };
		57A9FF07252BE6E0006A2040 /* WebAuthenticationAgent.xcconfig */ = {isa = PBXFileReference; lastKnownFileType = text.xcconfig; path = WebAuthenticationAgent.xcconfig; sourceTree = "<group>"; };
		57A9FF08252BEAF0006A2040 /* main.mm */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.objcpp; name = main.mm; path = Daemons/WebAuthenticationAgent/main.mm; sourceTree = SOURCE_ROOT; };
		57A9FF0A252BF5C3006A2040 /* Info.plist */ = {isa = PBXFileReference; lastKnownFileType = text.plist.xml; path = Info.plist; sourceTree = "<group>"; };
		57A9FF0D252C397A006A2040 /* com.apple.webkit.WebAuthenticationAgent.plist */ = {isa = PBXFileReference; lastKnownFileType = text.plist.xml; path = com.apple.webkit.WebAuthenticationAgent.plist; sourceTree = "<group>"; };
		57A9FF0F252C5D9D006A2040 /* WebAuthenticationAgent.entitlements */ = {isa = PBXFileReference; lastKnownFileType = text.plist.entitlements; path = WebAuthenticationAgent.entitlements; sourceTree = "<group>"; };
		57A9FF15252C6AEF006A2040 /* libWTF.a */ = {isa = PBXFileReference; explicitFileType = archive.ar; path = libWTF.a; sourceTree = BUILT_PRODUCTS_DIR; };
		57AC8F4E217FEED90055438C /* HidConnection.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; path = HidConnection.h; sourceTree = "<group>"; };
		57AC8F4F217FEED90055438C /* HidConnection.mm */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.cpp.objcpp; path = HidConnection.mm; sourceTree = "<group>"; };

		57BBEA6C22BC0BFE00273995 /* SOAuthorizationLoadPolicy.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; path = SOAuthorizationLoadPolicy.h; sourceTree = "<group>"; };
		57C3E8AC242490D5001E2209 /* WebAuthenticationRequestData.cpp */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.cpp.cpp; path = WebAuthenticationRequestData.cpp; sourceTree = "<group>"; };
		57C6244A234679A400383FE7 /* WebAuthenticationFlags.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; path = WebAuthenticationFlags.h; sourceTree = "<group>"; };
		57DCED6A2142EAE20016B847 /* WebAuthenticatorCoordinatorMessages.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; name = WebAuthenticatorCoordinatorMessages.h; path = DerivedSources/WebKit2/WebAuthenticatorCoordinatorMessages.h; sourceTree = BUILT_PRODUCTS_DIR; };
		57DCED6B2142EAE20016B847 /* WebAuthenticatorCoordinatorMessageReceiver.cpp */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.cpp; name = WebAuthenticatorCoordinatorMessageReceiver.cpp; path = DerivedSources/WebKit2/WebAuthenticatorCoordinatorMessageReceiver.cpp; sourceTree = BUILT_PRODUCTS_DIR; };
		57DCED6C2142EAF90016B847 /* WebAuthenticatorCoordinatorProxyMessageReceiver.cpp */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.cpp; name = WebAuthenticatorCoordinatorProxyMessageReceiver.cpp; path = DerivedSources/WebKit2/WebAuthenticatorCoordinatorProxyMessageReceiver.cpp; sourceTree = BUILT_PRODUCTS_DIR; };
		57DCED6D2142EAFA0016B847 /* WebAuthenticatorCoordinatorProxyMessages.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; name = WebAuthenticatorCoordinatorProxyMessages.h; path = DerivedSources/WebKit2/WebAuthenticatorCoordinatorProxyMessages.h; sourceTree = BUILT_PRODUCTS_DIR; };
		57DCED842147363A0016B847 /* AuthenticatorManager.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; path = AuthenticatorManager.h; sourceTree = "<group>"; };

		DF84CEE2249AA21F009096F6 /* WKPDFHUDView.mm */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.objcpp; name = WKPDFHUDView.mm; path = PDF/WKPDFHUDView.mm; sourceTree = "<group>"; };
		DF84CEE3249AA21F009096F6 /* WKPDFHUDView.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; name = WKPDFHUDView.h; path = PDF/WKPDFHUDView.h; sourceTree = "<group>"; };
		E105FE5318D7B9DE008F57A8 /* EditingRange.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; path = EditingRange.h; sourceTree = "<group>"; };
		E115C715190F8A2500ECC516 /* com.apple.WebKit.Storage.sb */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = text; name = com.apple.WebKit.Storage.sb; path = DerivedSources/WebKit2/com.apple.WebKit.Storage.sb; sourceTree = BUILT_PRODUCTS_DIR; };
		E133FD891423DD7F00FC7BFB /* WebKit.icns */ = {isa = PBXFileReference; lastKnownFileType = image.icns; name = WebKit.icns; path = Resources/WebKit.icns; sourceTree = "<group>"; };
		E14A954716E016A40068DE82 /* NetworkProcessPlatformStrategies.cpp */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.cpp.cpp; path = NetworkProcessPlatformStrategies.cpp; sourceTree = "<group>"; };
		E14A954816E016A40068DE82 /* NetworkProcessPlatformStrategies.h */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.c.h; path = NetworkProcessPlatformStrategies.h; sourceTree = "<group>"; };

			);
			runOnlyForDeploymentPostprocessing = 0;
		};
		5742A2ED2535613F00B7BA14 /* Frameworks */ = {
			isa = PBXFrameworksBuildPhase;
			buildActionMask = 2147483647;
			files = (
				5742A2EE2535613F00B7BA14 /* Foundation.framework in Frameworks */,
				5742A2EF2535613F00B7BA14 /* WebKit.framework in Frameworks */,
			);
			runOnlyForDeploymentPostprocessing = 0;
		};

				2D9FB228237523830049F936 /* com.apple.WebKit.GPU.xpc */,
				BC8283B116B4BF7700A278FE /* com.apple.WebKit.Networking.xpc */,
				BC82841F16B4FDF600A278FE /* com.apple.WebKit.Plugin.64.xpc */,
				5742A2F72535613F00B7BA14 /* com.apple.WebKit.WebAuthn.xpc */,
				372EBB462017E64300085064 /* com.apple.WebKit.WebContent.Development.xpc */,
				BC3DE46615A91763008D26FC /* com.apple.WebKit.WebContent.xpc */,
				1AC25FB012A48EA700BD2671 /* PluginProcessShim.dylib */,

				C0CE72DB1247E8F700BC0EC4 /* DerivedSources.make */,
				1A1D2117191D996C0001619F /* MigrateHeadersFromWebKitLegacy.make */,
				1A1D2116191D995C0001619F /* postprocess-framework-headers.sh */,
				57A9FEEF252BB70C006A2040 /* Daemons */,
				BC2E6E74114196F000A63B1E /* Platform */,
				1AADDF4B10D82AF000D3D63D /* Shared */,
				BC032DC310F438260058C15A /* UIProcess */,

				510CC7DA16138E0100D03ED3 /* NetworkProcess */,
				1A0EC6B0124BBD36007EF4A5 /* PluginProcess */,
				2D9FB1FF2375209D0049F936 /* GPUProcess */,
				5742A2FF2535758000B7BA14 /* WebAuthnProcess */,
				C0CE729D1247E71D00BC0EC4 /* Derived Sources */,
				1DEC97AB246B6865007C83F4 /* FeatureFlags */,
				089C1665FE841158C02AAC07 /* Resources */,

				A1EDD2DC1884B9B500BBFE98 /* SecItemShim.xcconfig */,
				5183B3931379F85C00E8754E /* Shim.xcconfig */,
				1A4F976E100E7B6600637A18 /* Version.xcconfig */,
				57A9FF07252BE6E0006A2040 /* WebAuthnService.xcconfig */,
				372EBB4A2017E76000085064 /* WebContentService.Development.xcconfig */,
				BCACC40E16B0B8A800B6E092 /* WebContentService.xcconfig */,
				BCB86F4B116AAACD00CE20B7 /* WebKit.xcconfig */,

			path = cocoa;
			sourceTree = "<group>";
		};
		5742A2FF2535758000B7BA14 /* WebAuthnProcess */ = {
			isa = PBXGroup;
			children = (
				5742A3002535758000B7BA14 /* EntryPoint */,
				5742A319253675E900B7BA14 /* ios */,
				5742A31B253675F600B7BA14 /* mac */,
				5742A30C25358EFD00B7BA14 /* WebAuthnConnectionToWebProcess.cpp */,
				5742A30A25358EFD00B7BA14 /* WebAuthnConnectionToWebProcess.h */,
				5742A30B25358EFD00B7BA14 /* WebAuthnConnectionToWebProcess.messages.in */,
				5742A314253648E400B7BA14 /* WebAuthnProcess.cpp */,
				5742A315253648E400B7BA14 /* WebAuthnProcess.h */,
				5742A313253648E400B7BA14 /* WebAuthnProcess.messages.in */,
				5742A30725358A0400B7BA14 /* WebAuthnProcessCreationParameters.cpp */,
				5742A30625358A0400B7BA14 /* WebAuthnProcessCreationParameters.h */,
			);
			path = WebAuthnProcess;
			sourceTree = "<group>";
		};
		5742A3002535758000B7BA14 /* EntryPoint */ = {
			isa = PBXGroup;
			children = (
				5742A3012535758000B7BA14 /* Cocoa */,
			);
			path = EntryPoint;
			sourceTree = "<group>";
		};
		5742A3012535758000B7BA14 /* Cocoa */ = {
			isa = PBXGroup;
			children = (
				5742A3022535758000B7BA14 /* XPCService */,
			);
			path = Cocoa;
			sourceTree = "<group>";
		};
		5742A3022535758000B7BA14 /* XPCService */ = {
			isa = PBXGroup;
			children = (
				5742A3032535758000B7BA14 /* WebAuthnService */,
				5742A31E2536949300B7BA14 /* WebAuthnServiceEntryPoint.mm */,
			);
			path = XPCService;
			sourceTree = "<group>";
		};
		5742A3032535758000B7BA14 /* WebAuthnService */ = {
			isa = PBXGroup;
			children = (
				572EBBB92536A06E000552B3 /* Info-iOS.plist */,
				572EBBBA2536A06E000552B3 /* Info-OSX.plist */,
			);
			path = WebAuthnService;
			sourceTree = "<group>";
		};
		5742A319253675E900B7BA14 /* ios */ = {
			isa = PBXGroup;
			children = (
				5742A31A253675E900B7BA14 /* WebAuthnProcessIOS.mm */,
			);
			path = ios;
			sourceTree = "<group>";
		};
		5742A31B253675F600B7BA14 /* mac */ = {
			isa = PBXGroup;
			children = (
				5742A31D253675F600B7BA14 /* com.apple.WebKit.WebAuthnProcess.sb.in */,
				5742A31C253675F600B7BA14 /* WebAuthnProcessMac.mm */,
			);
			path = mac;
			sourceTree = "<group>";
		};
		575075A620AB75AB00693EA9 /* mac */ = {
			isa = PBXGroup;
			children = (

			children = (
				5760828C2029854200116678 /* WebAuthenticatorCoordinator.cpp */,
				5760828B2029854200116678 /* WebAuthenticatorCoordinator.h */,
				572EBBD12536C885000552B3 /* WebAuthnProcessConnection.cpp */,
				572EBBD22536C885000552B3 /* WebAuthnProcessConnection.h */,
				572EBBD32536C885000552B3 /* WebAuthnProcessConnection.messages.in */,
				572EBBCB2536B04F000552B3 /* WebAuthnProcessConnectionInfo.h */,
			);
			path = WebAuthentication;
			sourceTree = "<group>";

				57608296202BD8BA00116678 /* WebAuthenticatorCoordinatorProxy.cpp */,
				57608295202BD8BA00116678 /* WebAuthenticatorCoordinatorProxy.h */,
				57608299202BDAE200116678 /* WebAuthenticatorCoordinatorProxy.messages.in */,
				572EBBC52536AFD5000552B3 /* WebAuthnProcessProxy.cpp */,
				572EBBC62536AFD5000552B3 /* WebAuthnProcessProxy.h */,
				572EBBC72536AFD5000552B3 /* WebAuthnProcessProxy.messages.in */,
			);
			path = WebAuthentication;
			sourceTree = "<group>";
		};
		57A9FEEF252BB70C006A2040 /* Daemons */ = {
			isa = PBXGroup;
			children = (
				57A9FEF0252BB740006A2040 /* WebAuthenticationAgent */,
			);
			path = Daemons;
			sourceTree = "<group>";
		};
		57A9FEF0252BB740006A2040 /* WebAuthenticationAgent */ = {
			isa = PBXGroup;
			children = (
				57A9FF0D252C397A006A2040 /* com.apple.webkit.WebAuthenticationAgent.plist */,
				57A9FF0A252BF5C3006A2040 /* Info.plist */,
				57A9FF08252BEAF0006A2040 /* main.mm */,
				57A9FF0F252C5D9D006A2040 /* WebAuthenticationAgent.entitlements */,
			);
			path = WebAuthenticationAgent;
			sourceTree = "<group>";
		};
		57B4B45C20B5048B00D4AD79 /* cocoa */ = {
			isa = PBXGroup;
			children = (

				E17AE2C216B9C63A001C42F2 /* com.apple.WebKit.GPUProcess.sb */,
				E17AE2C216B9C63A001C42F1 /* com.apple.WebKit.NetworkProcess.sb */,
				7A1506721DD56298001F4B58 /* com.apple.WebKit.plugin-common.sb */,
				572EBBC32536AB84000552B3 /* com.apple.WebKit.WebAuthnProcess.sb */,
				E1967E37150AB5E200C73169 /* com.apple.WebProcess.sb */,
				1AB7D6171288B9D900CFD08C /* DownloadProxyMessageReceiver.cpp */,
				1AB7D6181288B9D900CFD08C /* DownloadProxyMessages.h */,

				1A334DEC16DE8F88006A8E38 /* StorageAreaMapMessages.h */,
				9368EEDC2303A8D800BDB11A /* StorageManagerSetMessageReceiver.cpp */,
				9368EEDD2303A8D800BDB11A /* StorageManagerSetMessages.h */,
				5118E9A51F295963003EF9F5 /* StorageProcessMessageReceiver.cpp */,
				5118E9A61F295963003EF9F5 /* StorageProcessMessages.h */,
				5118E9A71F295963003EF9F5 /* StorageProcessProxyMessageReceiver.cpp */,
				5118E9A21F295963003EF9F5 /* StorageProcessProxyMessages.h */,
				5118E9A31F295963003EF9F5 /* StorageToWebProcessConnectionMessageReceiver.cpp */,
				5118E9A41F295963003EF9F5 /* StorageToWebProcessConnectionMessages.h */,
				CD491B0B1E732E4D00009066 /* UserMediaCaptureManagerMessageReceiver.cpp */,
				CD491B0C1E732E4D00009066 /* UserMediaCaptureManagerMessages.h */,
				CD491B151E73525500009066 /* UserMediaCaptureManagerProxyMessageReceiver.cpp */,

				1A60224B18C16B9F00C3E8C9 /* VisitedLinkStoreMessages.h */,
				1A8E7D3A18C15149005A702A /* VisitedLinkTableControllerMessageReceiver.cpp */,
				1A8E7D3B18C15149005A702A /* VisitedLinkTableControllerMessages.h */,
				57DCED6B2142EAE20016B847 /* WebAuthenticatorCoordinatorMessageReceiver.cpp */,
				57DCED6A2142EAE20016B847 /* WebAuthenticatorCoordinatorMessages.h */,
				57DCED6C2142EAF90016B847 /* WebAuthenticatorCoordinatorProxyMessageReceiver.cpp */,
				57DCED6D2142EAFA0016B847 /* WebAuthenticatorCoordinatorProxyMessages.h */,
				572EBBBB2536A60A000552B3 /* WebAuthnConnectionToWebProcessMessageReceiver.cpp */,
				572EBBBC2536A60A000552B3 /* WebAuthnConnectionToWebProcessMessages.h */,
				572EBBBD2536A60A000552B3 /* WebAuthnProcessMessageReceiver.cpp */,
				572EBBBE2536A60A000552B3 /* WebAuthnProcessMessages.h */,
				572EBBCD2536BB10000552B3 /* WebAuthnProcessProxyMessageReceiver.cpp */,
				572EBBCE2536BB10000552B3 /* WebAuthnProcessProxyMessages.h */,
				1C0A19551C90068F00FE0EBB /* WebAutomationSessionMessageReceiver.cpp */,
				1C0A19561C90068F00FE0EBB /* WebAutomationSessionMessages.h */,
				1C0A19511C8FFDFB00FE0EBB /* WebAutomationSessionProxyMessageReceiver.cpp */,

				BC0E606012D6BA910012A72A /* WebGeolocationManagerMessages.h */,
				BC0E618012D6CB1D0012A72A /* WebGeolocationManagerProxyMessageReceiver.cpp */,
				BC0E618112D6CB1D0012A72A /* WebGeolocationManagerProxyMessages.h */,
				510523771C73DA70007993CB /* WebIDBConnectionToClientMessageReceiver.cpp */,
				510523781C73DA70007993CB /* WebIDBConnectionToClientMessages.h */,
				510523721C73D37B007993CB /* WebIDBConnectionToServerMessageReceiver.cpp */,
				510523731C73D37B007993CB /* WebIDBConnectionToServerMessages.h */,
				933E835823A1ADF500DEF289 /* WebIDBServerMessageReceiver.cpp */,

				CDCDC99D248FE8DA00A69522 /* EndowmentStateTracker.h in Headers */,
				51B15A8513843A3900321AD8 /* EnvironmentUtilities.h in Headers */,
				1AA575FB1496B52600A4EE06 /* EventDispatcher.h in Headers */,
				572EBBD72537EBAE000552B3 /* ExtraPrivateSymbolsForTAPI.h in Headers */,
				57B8264823050C5100B72EB0 /* FidoService.h in Headers */,
				00B9661A18E25AE100CE1F88 /* FindClient.h in Headers */,
				1A90C1F41264FD71003E44D4 /* FindController.h in Headers */,

				57C6244B234679A400383FE7 /* WebAuthenticationFlags.h in Headers */,
				577FF7852346ECAA004EDFB9 /* WebAuthenticationPanelClient.h in Headers */,
				57DCEDB2214C604C0016B847 /* WebAuthenticationRequestData.h in Headers */,
				57DCED6F2142EE630016B847 /* WebAuthenticatorCoordinatorMessages.h in Headers */,
				57DCEDB3214C60530016B847 /* WebAuthenticatorCoordinatorProxy.h in Headers */,
				57DCED712142EE6C0016B847 /* WebAuthenticatorCoordinatorProxyMessages.h in Headers */,
				5742A30D25358EFD00B7BA14 /* WebAuthnConnectionToWebProcess.h in Headers */,
				572EBBC02536A60A000552B3 /* WebAuthnConnectionToWebProcessMessages.h in Headers */,
				5742A318253648E500B7BA14 /* WebAuthnProcess.h in Headers */,
				572EBBD52536C885000552B3 /* WebAuthnProcessConnection.h in Headers */,
				572EBBCC2536B04F000552B3 /* WebAuthnProcessConnectionInfo.h in Headers */,
				5742A30825358A0400B7BA14 /* WebAuthnProcessCreationParameters.h in Headers */,
				572EBBC22536A60A000552B3 /* WebAuthnProcessMessages.h in Headers */,
				572EBBC92536AFD5000552B3 /* WebAuthnProcessProxy.h in Headers */,
				572EBBD02536BB11000552B3 /* WebAuthnProcessProxyMessages.h in Headers */,
				F42D634122A0EFDF00D2FB3A /* WebAutocorrectionData.h in Headers */,
				990D39F5243BE64800199388 /* WebAutomationDOMWindowObserver.h in Headers */,
				9955A6EC1C7980C200EB6A93 /* WebAutomationSession.h in Headers */,

			productReference = 510031F61379CACB00C8DFE4 /* SecItemShim.dylib */;
			productType = "com.apple.product-type.library.dynamic";
		};
		5742A2E52535613F00B7BA14 /* WebAuthn */ = {
			isa = PBXNativeTarget;
			buildConfigurationList = 5742A2F32535613F00B7BA14 /* Build configuration list for PBXNativeTarget "WebAuthn" */;
			buildPhases = (
				5742A2EA2535613F00B7BA14 /* Sources */,
				5742A2ED2535613F00B7BA14 /* Frameworks */,
				5742A2F02535613F00B7BA14 /* Resources */,
				5742A2F12535613F00B7BA14 /* Unlock keychain */,
				5742A2F22535613F00B7BA14 /* Process WebAuthentication entitlements */,
			);
			buildRules = (
			);
			dependencies = (
				5742A2E62535613F00B7BA14 /* PBXTargetDependency */,
				5742A2E82535613F00B7BA14 /* PBXTargetDependency */,
			);
			name = WebAuthn;
			productName = Networking;
			productReference = 5742A2F72535613F00B7BA14 /* com.apple.WebKit.WebAuthn.xpc */;
			productType = "com.apple.product-type.xpc-service";
		};
		8DC2EF4F0486A6940098B216 /* WebKit */ = {
			isa = PBXNativeTarget;

						CreatedOnToolsVersion = 10.1;
						ProvisioningStyle = Automatic;
					};
					57A9FEFB252BD8AA006A2040 = {
						CreatedOnToolsVersion = 12.0;
					};
					E1AC2E2720F7B94C00B0897D = {
						CreatedOnToolsVersion = 9.3;
						ProvisioningStyle = Automatic;

				372EBB382017E64300085064 /* WebContent.Development */,
				BC8283B016B4BF7700A278FE /* Networking */,
				2D9FB216237523830049F936 /* GPU */,
				5742A2E52535613F00B7BA14 /* WebAuthn */,
				BC82841E16B4FDF600A278FE /* Plugin.64 */,
				A7AADA1019395CA9003EA1C7 /* Sandbox Profiles */,
				E1AC2E2720F7B94C00B0897D /* Unlock Keychain */,
				5325BDCD21DFF47700A0DEE1 /* Apply Configuration to XCFileLists */,
				57A9FEFB252BD8AA006A2040 /* WebAuthenticationAgent */,
			);
		};
/* End PBXProject section */

			);
			runOnlyForDeploymentPostprocessing = 0;
		};
		5742A2F02535613F00B7BA14 /* Resources */ = {
			isa = PBXResourcesBuildPhase;
			buildActionMask = 2147483647;
			files = (
			);
			runOnlyForDeploymentPostprocessing = 0;
		};
		8DC2EF520486A6940098B216 /* Resources */ = {
			isa = PBXResourcesBuildPhase;
			buildActionMask = 2147483647;
			files = (
				E17AE2C316B9C63A001C42F2 /* com.apple.WebKit.GPUProcess.sb in Resources */,
				E17AE2C316B9C63A001C42F1 /* com.apple.WebKit.NetworkProcess.sb in Resources */,
				572EBBC42536AB84000552B3 /* com.apple.WebKit.WebAuthnProcess.sb in Resources */,
				E11D35AE16B63D1B006D23D7 /* com.apple.WebProcess.sb in Resources */,
				414DD37920BF43F5006959FB /* com.cisco.webex.plugin.gpc64.sb in Resources */,
				6BE969C11E54D452008B7483 /* corePrediction_model in Resources */,

			shellPath = /bin/sh;
			shellScript = "Scripts/check-xcfilelists.sh\n";
		};
		5742A2F12535613F00B7BA14 /* Unlock keychain */ = {
			isa = PBXShellScriptBuildPhase;
			buildActionMask = 2147483647;
			files = (
			);
			inputPaths = (
			);
			name = "Unlock keychain";
			outputPaths = (
			);
			runOnlyForDeploymentPostprocessing = 0;
			shellPath = /bin/sh;
			shellScript = "UNLOCK_SCRIPT_PATH=\"${SRCROOT}/../../../Internal/Tools/Scripts/unlock-safari-engineering-keychain-if-needed\"\n\n[[ -x \"${UNLOCK_SCRIPT_PATH}\" ]] && exec \"${UNLOCK_SCRIPT_PATH}\"\n\nexit 0\n";
		};
		5742A2F22535613F00B7BA14 /* Process WebAuthentication entitlements */ = {
			isa = PBXShellScriptBuildPhase;
			buildActionMask = 2147483647;
			files = (
			);
			inputPaths = (
				"$(SRCROOT)/Scripts/process-entitlements.sh",
			);
			name = "Process WebAuthentication entitlements";
			outputPaths = (
				"$(WK_PROCESSED_XCENT_FILE)",
			);
			runOnlyForDeploymentPostprocessing = 0;
			shellPath = /bin/sh;
			shellScript = "Scripts/process-entitlements.sh\n";
		};
		5DF408C5131DD46700130071 /* Check For Weak VTables and Externals */ = {
			isa = PBXShellScriptBuildPhase;
			buildActionMask = 2147483647;

			);
			runOnlyForDeploymentPostprocessing = 0;
			shellPath = /bin/sh;
			shellScript = "if [[ \"${DEPLOYMENT_LOCATION}\" == \"YES\" ]]; then\n    exit\nfi\n\nif [[ ${WK_PLATFORM_NAME} != \"macosx\" ]]; then\n    XPC_SERVICES_PATH=\"${BUILT_PRODUCTS_DIR}/WebKit.framework/XPCServices\"\n    BUILT_PRODUCTS_DIR_RELATIVE_PATH_FROM_XPC_SERVICES=\"../..\"\nelse\n    XPC_SERVICES_PATH=\"${BUILT_PRODUCTS_DIR}/WebKit.framework/Versions/A/XPCServices\"\n    BUILT_PRODUCTS_DIR_RELATIVE_PATH_FROM_XPC_SERVICES=\"../../../..\"\nfi\n\nmkdir -p \"${XPC_SERVICES_PATH}\"\nln -sFh \"${BUILT_PRODUCTS_DIR_RELATIVE_PATH_FROM_XPC_SERVICES}/com.apple.WebKit.WebContent.xpc\" \"${XPC_SERVICES_PATH}/com.apple.WebKit.WebContent.xpc\"\nln -sFh \"${BUILT_PRODUCTS_DIR_RELATIVE_PATH_FROM_XPC_SERVICES}/com.apple.WebKit.Networking.xpc\" \"${XPC_SERVICES_PATH}/com.apple.WebKit.Networking.xpc\"\nln -sFh \"${BUILT_PRODUCTS_DIR_RELATIVE_PATH_FROM_XPC_SERVICES}/com.apple.WebKit.GPU.xpc\" \"${XPC_SERVICES_PATH}/com.apple.WebKit.GPU.xpc\"\nln -sFh \"${BUILT_PRODUCTS_DIR_RELATIVE_PATH_FROM_XPC_SERVICES}/com.apple.WebKit.WebAuthn.xpc\" \"${XPC_SERVICES_PATH}/com.apple.WebKit.WebAuthn.xpc\"\n\nif [[ ${WK_PLATFORM_NAME} == macosx ]]; then\n    ln -sFh \"${BUILT_PRODUCTS_DIR_RELATIVE_PATH_FROM_XPC_SERVICES}/com.apple.WebKit.Plugin.64.xpc\" \"${XPC_SERVICES_PATH}/com.apple.WebKit.Plugin.64.xpc\"\nfi\n";
		};
		99CA3862207286DB00BAD578 /* Copy WebDriver Atoms to Framework Private Headers */ = {
			isa = PBXShellScriptBuildPhase;

			);
			runOnlyForDeploymentPostprocessing = 0;
		};
		5742A2EA2535613F00B7BA14 /* Sources */ = {
			isa = PBXSourcesBuildPhase;
			buildActionMask = 2147483647;
			files = (
				5742A2EB2535613F00B7BA14 /* AuxiliaryProcessMain.cpp in Sources */,
				5742A2EC2535613F00B7BA14 /* XPCServiceMain.mm in Sources */,
			);
			runOnlyForDeploymentPostprocessing = 0;
		};

				1A60224C18C16B9F00C3E8C9 /* VisitedLinkStoreMessageReceiver.cpp in Sources */,
				1A8E7D3C18C15149005A702A /* VisitedLinkTableControllerMessageReceiver.cpp in Sources */,
				57DCED702142EE680016B847 /* WebAuthenticatorCoordinatorProxyMessageReceiver.cpp in Sources */,
				572EBBBF2536A60A000552B3 /* WebAuthnConnectionToWebProcessMessageReceiver.cpp in Sources */,
				572EBBC12536A60A000552B3 /* WebAuthnProcessMessageReceiver.cpp in Sources */,
				572EBBCF2536BB11000552B3 /* WebAuthnProcessProxyMessageReceiver.cpp in Sources */,
				575B1BBA23CE9C130020639A /* WebAutomationSession.cpp in Sources */,
				1C0A19571C90068F00FE0EBB /* WebAutomationSessionMessageReceiver.cpp in Sources */,
				575B1BB823CE9BFC0020639A /* WebAutomationSessionProxy.cpp in Sources */,

			target = C0CE72851247E66800BC0EC4 /* Derived Sources */;
			targetProxy = 37F7407812721F740093869B /* PBXContainerItemProxy */;
		};
		5742A2E62535613F00B7BA14 /* PBXTargetDependency */ = {
			isa = PBXTargetDependency;
			target = E1AC2E2720F7B94C00B0897D /* Unlock Keychain */;
			targetProxy = 5742A2E72535613F00B7BA14 /* PBXContainerItemProxy */;
		};
		5742A2E82535613F00B7BA14 /* PBXTargetDependency */ = {
			isa = PBXTargetDependency;
			target = 8DC2EF4F0486A6940098B216 /* WebKit */;
			targetProxy = 5742A2E92535613F00B7BA14 /* PBXContainerItemProxy */;
		};
		5742A2FA2535619D00B7BA14 /* PBXTargetDependency */ = {
			isa = PBXTargetDependency;
			target = 5742A2E52535613F00B7BA14 /* WebAuthn */;
			targetProxy = 5742A2F92535619D00B7BA14 /* PBXContainerItemProxy */;
		};
		BC8283D516B4C01F00A278FE /* PBXTargetDependency */ = {
			isa = PBXTargetDependency;

			};
			name = Production;
		};
		5742A2F42535613F00B7BA14 /* Debug */ = {
			isa = XCBuildConfiguration;
			baseConfigurationReference = 57A9FF07252BE6E0006A2040 /* WebAuthnService.xcconfig */;
			buildSettings = {
			};
			name = Debug;
		};
		5742A2F52535613F00B7BA14 /* Release */ = {
			isa = XCBuildConfiguration;
			baseConfigurationReference = 57A9FF07252BE6E0006A2040 /* WebAuthnService.xcconfig */;
			buildSettings = {
			};
			name = Release;
		};
		5742A2F62535613F00B7BA14 /* Production */ = {
			isa = XCBuildConfiguration;
			baseConfigurationReference = 57A9FF07252BE6E0006A2040 /* WebAuthnService.xcconfig */;
			buildSettings = {
			};
			name = Production;

			defaultConfigurationIsVisible = 0;
			defaultConfigurationName = Production;
		};
		5742A2F32535613F00B7BA14 /* Build configuration list for PBXNativeTarget "WebAuthn" */ = {
			isa = XCConfigurationList;
			buildConfigurations = (
				5742A2F42535613F00B7BA14 /* Debug */,
				5742A2F52535613F00B7BA14 /* Release */,
				5742A2F62535613F00B7BA14 /* Production */,
			);
			defaultConfigurationIsVisible = 0;
			defaultConfigurationName = Production;



/*
 * Copyright (C) 2020 Apple Inc. All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
 * THE POSSIBILITY OF SUCH DAMAGE.
 */

#include "config.h"
#include "WebAuthnProcessConnection.h"

#if ENABLE(WEB_AUTHN)

#include "WebAuthnConnectionToWebProcessMessages.h"
#include "WebPageMessages.h"
#include "WebProcess.h"

namespace WebKit {
using namespace WebCore;

WebAuthnProcessConnection::WebAuthnProcessConnection(IPC::Connection::Identifier connectionIdentifier)
    : m_connection(IPC::Connection::createClientConnection(connectionIdentifier, *this))
{
    m_connection->open();
}

WebAuthnProcessConnection::~WebAuthnProcessConnection()
{
    m_connection->invalidate();
}

void WebAuthnProcessConnection::didClose(IPC::Connection&)
{
}

void WebAuthnProcessConnection::didReceiveInvalidMessage(IPC::Connection&, IPC::MessageName)
{
}

} // namespace WebKit

#endif // ENABLE(WEB_AUTHN)



/*
 * Copyright (C) 2020 Apple Inc. All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
 * THE POSSIBILITY OF SUCH DAMAGE.
 */

#pragma once

#if ENABLE(WEB_AUTHN)

#include "Connection.h"
#include <wtf/RefCounted.h>
#include <wtf/text/WTFString.h>

namespace WebKit {

class WebAuthnProcessConnection : public RefCounted<WebAuthnProcessConnection>, IPC::Connection::Client {
public:
    static Ref<WebAuthnProcessConnection> create(IPC::Connection::Identifier connectionIdentifier)
    {
        return adoptRef(*new WebAuthnProcessConnection(connectionIdentifier));
    }
    ~WebAuthnProcessConnection();

    IPC::Connection& connection() { return m_connection.get(); }

private:
    WebAuthnProcessConnection(IPC::Connection::Identifier);

    // IPC::Connection::Client
    void didClose(IPC::Connection&) override;
    void didReceiveInvalidMessage(IPC::Connection&, IPC::MessageName) override;

    // The connection from the web process to the WebAuthn process.
    Ref<IPC::Connection> m_connection;
};

} // namespace WebKit

#endif // ENABLE(WEB_AUTHN)



# Copyright (C) 2019 Apple Inc. All rights reserved.
#
# Redistribution and use in source and binary forms, with or without
# modification, are permitted provided that the following conditions
# are met:
# 1.  Redistributions of source code must retain the above copyright
#     notice, this list of conditions and the following disclaimer.
# 2.  Redistributions in binary form must reproduce the above copyright
#     notice, this list of conditions and the following disclaimer in the
#     documentation and/or other materials provided with the distribution.
#
# THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS'' AND
# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
# DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS BE LIABLE FOR
# ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
# SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
# CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
# OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

#if ENABLE(WEB_AUTHN)

messages -> WebAuthnProcessConnection {
}

#endif // ENABLE(WEB_AUTHN)



/*
* Copyright (C) 2020 Apple Inc. All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
* 1. Redistributions of source code must retain the above copyright
*    notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
*    notice, this list of conditions and the following disclaimer in the
*    documentation and/or other materials provided with the distribution.
*
* THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
* THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
* BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
* THE POSSIBILITY OF SUCH DAMAGE.
*/

#pragma once

#if ENABLE(WEB_AUTHN)

namespace WebKit {

struct WebAuthnProcessConnectionInfo {
    IPC::Attachment connection;

    IPC::Connection::Identifier identifier() const
    {
        return IPC::Connection::Identifier(connection.port());
    }

    IPC::Connection::Identifier releaseIdentifier()
    {
        auto returnValue = identifier();
        connection = { };
        return returnValue;
    }

    void encode(IPC::Encoder& encoder) const
    {
        encoder << connection;
    }

    static WARN_UNUSED_RETURN bool decode(IPC::Decoder& decoder, WebAuthnProcessConnectionInfo& info)
    {
        if (!decoder.decode(info.connection))
            return false;
        return true;
    }
};

} // namespace WebKit

#endif // ENABLE(GPU_PROCESS)



#include "GPUProcessConnectionInfo.h"
#endif

#if ENABLE(WEB_AUTHN)
#include "WebAuthnConnectionToWebProcessMessages.h"
#include "WebAuthnProcessConnection.h"
#include "WebAuthnProcessConnectionInfo.h"
#endif

#if ENABLE(REMOTE_INSPECTOR)
#include <JavaScriptCore/RemoteInspector.h>
#endif


#endif // ENABLE(GPU_PROCESS)

#if ENABLE(WEB_AUTHN)

static WebAuthnProcessConnectionInfo getWebAuthnProcessConnection(IPC::Connection& connection)
{
    WebAuthnProcessConnectionInfo connectionInfo;
    if (!connection.sendSync(Messages::WebProcessProxy::GetWebAuthnProcessConnection(), Messages::WebProcessProxy::GetWebAuthnProcessConnection::Reply(connectionInfo), 0)) {
        // If we failed the first time, retry once. The attachment may have become invalid
        // before it was received by the web process if the network process crashed.
        if (!connection.sendSync(Messages::WebProcessProxy::GetWebAuthnProcessConnection(), Messages::WebProcessProxy::GetWebAuthnProcessConnection::Reply(connectionInfo), 0))
            CRASH();
    }

    return connectionInfo;
}

WebAuthnProcessConnection& WebProcess::ensureWebAuthnProcessConnection()
{
    RELEASE_ASSERT(RunLoop::isMain());

    // If we've lost our connection to the WebAuthn process (e.g. it crashed) try to re-establish it.
    if (!m_webAuthnProcessConnection) {
        auto connectionInfo = getWebAuthnProcessConnection(*parentProcessConnection());

        // Retry once if the IPC to get the connectionIdentifier succeeded but the connectionIdentifier we received
        // is invalid. This may indicate that the WebAuthn process has crashed.
        if (!IPC::Connection::identifierIsValid(connectionInfo.identifier()))
            connectionInfo = getWebAuthnProcessConnection(*parentProcessConnection());

        if (!IPC::Connection::identifierIsValid(connectionInfo.identifier()))
            CRASH();

        m_webAuthnProcessConnection = WebAuthnProcessConnection::create(connectionInfo.releaseIdentifier());
    }

    return *m_webAuthnProcessConnection;
}

void WebProcess::webAuthnProcessConnectionClosed(WebAuthnProcessConnection* connection)
{
    ASSERT(m_webAuthnProcessConnection);
    ASSERT_UNUSED(connection, m_webAuthnProcessConnection == connection);

    m_webAuthnProcessConnection = nullptr;
}

#endif // ENABLE(WEB_AUTHN)

void WebProcess::setEnhancedAccessibility(bool flag)
{
    WebCore::AXObjectCache::setEnhancedUserInterfaceAccessibility(flag);

Lines 115-120 struct ServiceWorkerInitializationData; a/Source/WebKit/WebProcess/WebProcess.h_sec1
- a/Source/WebKit/WebProcess/WebProcess.h +11 lines
115	class StorageAreaMap;	115	class StorageAreaMap;
116	class UserData;	116	class UserData;
117	class WaylandCompositorDisplay;	117	class WaylandCompositorDisplay;
		118	class WebAuthnProcessConnection;
118	class WebAutomationSessionProxy;	119	class WebAutomationSessionProxy;
119	class WebCacheStorageProvider;	120	class WebCacheStorageProvider;
120	class WebCookieJar;	121	class WebCookieJar;
Lines 232-237 public: a/Source/WebKit/WebProcess/WebProcess.h_sec2
232		233
233	#endif // ENABLE(GPU_PROCESS)	234	#endif // ENABLE(GPU_PROCESS)
234		235
		236	#if ENABLE(WEB_AUTHN)
		237	WebAuthnProcessConnection& ensureWebAuthnProcessConnection();
		238	void webAuthnProcessConnectionClosed(WebAuthnProcessConnection*);
		239	WebAuthnProcessConnection* existingWebAuthnProcessConnection() { return m_webAuthnProcessConnection.get(); }
		240	#endif
		241
235	LibWebRTCNetwork& libWebRTCNetwork();	242	LibWebRTCNetwork& libWebRTCNetwork();
236		243
237	void setCacheModel(CacheModel);	244	void setCacheModel(CacheModel);
Lines 586-591 private: a/Source/WebKit/WebProcess/WebProcess.h_sec3
586	#endif	593	#endif
587	#endif	594	#endif
588		595
		596	#if ENABLE(WEB_AUTHN)
		597	RefPtr<WebAuthnProcessConnection> m_webAuthnProcessConnection;
		598	#endif
		599
589	Ref<WebCacheStorageProvider> m_cacheStorageProvider;	600	Ref<WebCacheStorageProvider> m_cacheStorageProvider;
590	Ref<WebCookieJar> m_cookieJar;	601	Ref<WebCookieJar> m_cookieJar;
591	WebSocketChannelManager m_webSocketChannelManager;	602	WebSocketChannelManager m_webSocketChannelManager;

Return to Bug 217559

Lines 1-3 a/Source/WebCore/ChangeLog_sec1
- a/Source/WebCore/ChangeLog +13 lines
		1	2020-10-14 Jiewen Tan <jiewen_tan@apple.com>
		2
		3	[WebAuthn] Implement a dummy WebAuthnProcess
		4	https://bugs.webkit.org/show_bug.cgi?id=217559
		5	<rdar://problem/70168749>
		6
		7	Reviewed by Brent Fulgham.
		8
		9	No tests.
		10
		11	* en.lproj/Localizable.strings:
		12	Provides a name for the WebAuthn process.
		13
1	2020-10-15 Keith Rollin <krollin@apple.com>	14	2020-10-15 Keith Rollin <krollin@apple.com>
2		15
3	Lessen the reliance on VPATH in WebCore/DerivedSources.make	16	Lessen the reliance on VPATH in WebCore/DerivedSources.make

Lines 1-3 a/Source/WebKit/ChangeLog_sec1
- a/Source/WebKit/ChangeLog +154 lines
		1	2020-10-14 Jiewen Tan <jiewen_tan@apple.com>
		2
		3	[WebAuthn] Implement a dummy WebAuthnProcess
		4	https://bugs.webkit.org/show_bug.cgi?id=217559
		5	<rdar://problem/70168749>
		6
		7	Reviewed by Brent Fulgham.
		8
		9	Previous patch r268248 introduces a new daemon to handle all WebAuthn requests. However, after more deeper investigations, the daemon
		10	story is not very compelling for WebKit. Here are the two major road blockers:
		11	1) The major one is on macOS. New daemons cannot be installed without a system update. It means relocatable Safari (e.g. STP)
		12	and staged Safari on downlevel OSes will not get this feature. And relocatable STP can only utilize the system daemon. This
		13	seems a bummer especially for the STP case given it is heavily used to test latest web features.
		14	2) Additional plumbing is needed for testing and engineering builds. This problem is specific to WebKit and is on both macOS and iOS.
		15	WebKit doesn't build roots to test engineering builds, which is required to update the plist on the above location. Hence, a separate
		16	configuration is needed to generate a different plist that points to the right engineering binary and additional scripts will be needed
		17	to ask launchd to load the plist before running any tests. Some extra exercises are probably needed to not confuse launchd about the
		18	engineering binary and system binary as well.
		19
		20	Given the above constraints, a new architecture is proposed to make the daemon a WebKit XPC service/process instead and leave the launchd
		21	event handler to a new Safari daemon. The launchd related feature is only on iOS and therefore it really doesn't make sense to overcome
		22	all the above macOS constraints. Having different architectures on iOS (a daemon) and on macOS (a XPC service) accordingly will introduce
		23	tons of overhead for maintainance as well. That's why relying on a Safari daemon to do the job is the most reasonable option.
		24
		25	This patch therefore focuses on making the WebAuthn process happen and removes the WebAuthn daemon.
		26
		27	* CMakeLists.txt:
		28	* Configurations/WebAuthnService.xcconfig: Renamed from Source/WebKit/Configurations/WebAuthenticationAgent.xcconfig.
		29	* Configurations/WebKit.xcconfig:
		30	* Daemons/WebAuthenticationAgent/WebAuthenticationAgent.entitlements: Removed.
		31	* Daemons/WebAuthenticationAgent/com.apple.webkit.WebAuthenticationAgent.plist: Removed.
		32	* DerivedSources-input.xcfilelist:
		33	* DerivedSources-output.xcfilelist:
		34	* DerivedSources.make:
		35	Paperwork for building the new WebAuthn process.
		36
		37	* Platform/ExtraPrivateSymbolsForTAPI.h:
		38	* Shared/AuxiliaryProcess.h:
		39	* Shared/EntryPointUtilities/Cocoa/XPCService/XPCServiceEntryPoint.h:
		40	* Shared/EntryPointUtilities/Cocoa/XPCService/XPCServiceMain.mm:
		41	(WebKit::XPCServiceEventHandler):
		42	* Shared/mac/AuxiliaryProcessMac.mm:
		43	(WebKit::processStorageClass):
		44	(WebKit::sandboxDirectory):
		45	Paperwork for introducing the new WebAuthn process. Mostly copied from GPU process.
		46
		47	* Sources.txt:
		48	* SourcesCocoa.txt:
		49	Paperwork for building the new WebAuthn process.
		50
		51	* UIProcess/AuxiliaryProcessProxy.cpp:
		52	(WebKit::AuxiliaryProcessProxy::getLaunchOptions):
		53	* UIProcess/Launcher/ProcessLauncher.h:
		54	* UIProcess/Launcher/mac/ProcessLauncherMac.mm:
		55	(WebKit::serviceName):
		56	(WebKit::shouldLeakBoost):
		57	* UIProcess/WebAuthentication/WebAuthnProcessProxy.cpp: Added.
		58	(WebKit::WebAuthnProcessProxy::singleton):
		59	(WebKit::WebAuthnProcessProxy::WebAuthnProcessProxy):
		60	(WebKit::WebAuthnProcessProxy::getLaunchOptions):
		61	(WebKit::WebAuthnProcessProxy::connectionWillOpen):
		62	(WebKit::WebAuthnProcessProxy::processWillShutDown):
		63	(WebKit::WebAuthnProcessProxy::getWebAuthnProcessConnection):
		64	(WebKit::WebAuthnProcessProxy::webAuthnProcessCrashed):
65	(WebKit::WebAuthnProcessProxy::didClose):
66	(WebKit::WebAuthnProcessProxy::didReceiveInvalidMessage):
67	(WebKit::WebAuthnProcessProxy::didFinishLaunching):
68	(WebKit::WebAuthnProcessProxy::updateProcessAssertion):
69	* UIProcess/WebAuthentication/WebAuthnProcessProxy.h: Added.
70	* UIProcess/WebAuthentication/WebAuthnProcessProxy.messages.in: Added.
71	* UIProcess/WebProcessPool.cpp:
72	(WebKit::WebProcessPool::getWebAuthnProcessConnection):
73	* UIProcess/WebProcessPool.h:
74	* UIProcess/WebProcessProxy.cpp:
75	(WebKit::WebProcessProxy::getWebAuthnProcessConnection):
76	* UIProcess/WebProcessProxy.h:
77	* UIProcess/WebProcessProxy.messages.in:
78	* WebAuthnProcess/EntryPoint/Cocoa/XPCService/WebAuthnService/Info-OSX.plist: Copied from Source/WebKit/Daemons/WebAuthenticationAgent/Info.plist.
79	* WebAuthnProcess/EntryPoint/Cocoa/XPCService/WebAuthnService/Info-iOS.plist: Renamed from Source/WebKit/Daemons/WebAuthenticationAgent/Info.plist.
80	* WebAuthnProcess/EntryPoint/Cocoa/XPCService/WebAuthnServiceEntryPoint.mm: Copied from Source/WebKit/Daemons/WebAuthenticationAgent/main.mm.
81	(WebKit::WebAuthnServiceInitializerDelegate::WebAuthnServiceInitializerDelegate):
82	(WebKit::initializeAuxiliaryProcess<WebAuthnProcess>):
83	(WEBAUTHEN_SERVICE_INITIALIZER):
84	* WebAuthnProcess/WebAuthnConnectionToWebProcess.cpp: Added.
85	(WebKit::WebAuthnConnectionToWebProcess::create):
86	(WebKit::WebAuthnConnectionToWebProcess::WebAuthnConnectionToWebProcess):
87	(WebKit::WebAuthnConnectionToWebProcess::~WebAuthnConnectionToWebProcess):
88	(WebKit::WebAuthnConnectionToWebProcess::didClose):
89	(WebKit::WebAuthnConnectionToWebProcess::didReceiveInvalidMessage):
90	* WebAuthnProcess/WebAuthnConnectionToWebProcess.h: Copied from Source/WebKit/Daemons/WebAuthenticationAgent/main.mm.
91	(WebKit::WebAuthnConnectionToWebProcess::connection):
92	(WebKit::WebAuthnConnectionToWebProcess::WebAuthnProcessProcess):
93	(WebKit::WebAuthnConnectionToWebProcess::webProcessIdentifier const):
94	* WebAuthnProcess/WebAuthnConnectionToWebProcess.messages.in: Added.
95	* WebAuthnProcess/WebAuthnProcess.cpp: Added.
96	(WebKit::WebAuthnProcess::WebAuthnProcess):
97	(WebKit::WebAuthnProcess::~WebAuthnProcess):
98	(WebKit::WebAuthnProcess::createWebAuthnConnectionToWebProcess):
99	(WebKit::WebAuthnProcess::removeWebAuthnConnectionToWebProcess):
100	(WebKit::WebAuthnProcess::connectionToWebProcessClosed):
101	(WebKit::WebAuthnProcess::shouldTerminate):
102	(WebKit::WebAuthnProcess::didClose):
103	(WebKit::WebAuthnProcess::lowMemoryHandler):
104	(WebKit::WebAuthnProcess::initializeWebAuthnProcess):
105	(WebKit::WebAuthnProcess::prepareToSuspend):
106	(WebKit::WebAuthnProcess::processDidResume):
107	(WebKit::WebAuthnProcess::resume):
108	(WebKit::WebAuthnProcess::processDidTransitionToForeground):
109	(WebKit::WebAuthnProcess::processDidTransitionToBackground):
110	(WebKit::WebAuthnProcess::webProcessConnection const):
111	* WebAuthnProcess/WebAuthnProcess.h: Added.
112	* WebAuthnProcess/WebAuthnProcess.messages.in: Added.
113	* WebAuthnProcess/WebAuthnProcessCreationParameters.cpp: Copied from Source/WebKit/Daemons/WebAuthenticationAgent/main.mm.
114	(WebKit::WebAuthnProcessCreationParameters::encode const):
115	(WebKit::WebAuthnProcessCreationParameters::decode):
116	* WebAuthnProcess/WebAuthnProcessCreationParameters.h: Copied from Source/WebKit/Daemons/WebAuthenticationAgent/main.mm.
117	* WebAuthnProcess/ios/WebAuthnProcessIOS.mm: Copied from Source/WebKit/Daemons/WebAuthenticationAgent/main.mm.
118	(WebKit::WebAuthnProcess::initializeProcess):
119	(WebKit::WebAuthnProcess::initializeProcessName):
120	(WebKit::WebAuthnProcess::initializeSandbox):
121	* WebAuthnProcess/mac/WebAuthnProcessMac.mm: Added.
122	(WebKit::WebAuthnProcess::initializeProcess):
123	(WebKit::WebAuthnProcess::initializeProcessName):
124	(WebKit::WebAuthnProcess::initializeSandbox):
125	Paperwork for introducing the new WebAuthn process. Mostly copied from GPU process.
126
127	* WebAuthnProcess/mac/com.apple.WebKit.WebAuthnProcess.sb.in: Added.
128	The sandbox profile is originally from the GPU Process with IOKit related rules removed. Will tighten it again after the process is fully functional.
129
130	* WebKit.xcodeproj/project.pbxproj:
131	Paperwork for building the new WebAuthn process.
132
133	* WebProcess/WebAuthentication/WebAuthnProcessConnection.cpp: Copied from Source/WebKit/Daemons/WebAuthenticationAgent/main.mm.
134	(WebKit::WebAuthnProcessConnection::WebAuthnProcessConnection):
135	(WebKit::WebAuthnProcessConnection::~WebAuthnProcessConnection):
136	(WebKit::WebAuthnProcessConnection::didClose):
137	(WebKit::WebAuthnProcessConnection::didReceiveInvalidMessage):
138	* WebProcess/WebAuthentication/WebAuthnProcessConnection.h: Renamed from Source/WebKit/Daemons/WebAuthenticationAgent/main.mm.
139	(WebKit::WebAuthnProcessConnection::create):
140	(WebKit::WebAuthnProcessConnection::connection):
141	* WebProcess/WebAuthentication/WebAuthnProcessConnection.messages.in: Added.
142	* WebProcess/WebAuthentication/WebAuthnProcessConnectionInfo.h: Added.
143	(WebKit::WebAuthnProcessConnectionInfo::identifier const):
144	(WebKit::WebAuthnProcessConnectionInfo::releaseIdentifier):
145	(WebKit::WebAuthnProcessConnectionInfo::encode const):
146	(WebKit::WebAuthnProcessConnectionInfo::decode):
147	* WebProcess/WebProcess.cpp:
148	(WebKit::getWebAuthnProcessConnection):
149	(WebKit::WebProcess::ensureWebAuthnProcessConnection):
150	(WebKit::WebProcess::webAuthnProcessConnectionClosed):
151	* WebProcess/WebProcess.h:
152	(WebKit::WebProcess::existingWebAuthnProcessConnection):
153	Paperwork for introducing the new WebAuthn process. Mostly copied from GPU process.
154
1	2020-10-15 Jiewen Tan <jiewen_tan@apple.com>	155	2020-10-15 Jiewen Tan <jiewen_tan@apple.com>
2		156
3	[WebAuthn] Move AppAttestInternal related code from WKA to OpenSource	157	[WebAuthn] Move AppAttestInternal related code from WKA to OpenSource

Lines 1-37 a/Source/WebKit/Configurations/WebAuthenticationAgent.xcconfig_sec1
- a/Source/WebKit/Configurations/WebAuthenticationAgent.xcconfig -37 lines
1	// Copyright (C) 2020 Apple Inc. All rights reserved.
2	//
3	// Redistribution and use in source and binary forms, with or without
4	// modification, are permitted provided that the following conditions
5	// are met:
6	// 1. Redistributions of source code must retain the above copyright
7	// notice, this list of conditions and the following disclaimer.
8	// 2. Redistributions in binary form must reproduce the above copyright
9	// notice, this list of conditions and the following disclaimer in the
10	// documentation and/or other materials provided with the distribution.
11	//
12	// THIS SOFTWARE IS PROVIDED BY APPLE INC. ``AS IS'' AND ANY
13	// EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
14	// IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
15	// PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR
16	// CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
17	// EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
18	// PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
19	// PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY
20	// OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
21	// (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
22	// OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
23
24	#include "BaseXPCService.xcconfig"
25
26	PRODUCT_NAME = com.apple.WebKit.WebAuthenticationAgent;
27	PRODUCT_BUNDLE_IDENTIFIER = $(PRODUCT_NAME);
28	INFOPLIST_FILE = Daemons/WebAuthenticationAgent/Info.plist;
29
30	OTHER_LDFLAGS = $(inherited) $(OTHER_LDFLAGS_VERSIONED_FRAMEWORK_PATH) $(WK_RELOCATABLE_FRAMEWORKS_LDFLAGS);
31
32	ENTITLEMENTS_REQUIRED = $(ENTITLEMENTS_REQUIRED_USE_INTERNAL_SDK_$(USE_INTERNAL_SDK))
33	ENTITLEMENTS_REQUIRED_USE_INTERNAL_SDK_ = NO;
34	ENTITLEMENTS_REQUIRED_USE_INTERNAL_SDK_NO = NO;
35	ENTITLEMENTS_REQUIRED_USE_INTERNAL_SDK_YES = $(ENTITLEMENTS_REQUIRED);
36
37	CODE_SIGN_ENTITLEMENTS = Daemons/WebAuthenticationAgent/WebAuthenticationAgent.entitlements;

Lines 1-37 a/Source/WebKit/Daemons/WebAuthenticationAgent/main.mm_sec1
- a/Source/WebKit/Daemons/WebAuthenticationAgent/main.mm -37 lines
1	/*
2	* Copyright (C) 2020 Apple Inc. All rights reserved.
3	*
4	* Redistribution and use in source and binary forms, with or without
5	* modification, are permitted provided that the following conditions
6	* are met:
7	* 1. Redistributions of source code must retain the above copyright
8	* notice, this list of conditions and the following disclaimer.
9	* 2. Redistributions in binary form must reproduce the above copyright
10	* notice, this list of conditions and the following disclaimer in the
11	* documentation and/or other materials provided with the distribution.
12	*
13	* THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
14	* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
15	* THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
16	* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
17	* BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
18	* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
19	* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
20	* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
21	* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
22	* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
23	* THE POSSIBILITY OF SUCH DAMAGE.
24	*/
25
26	#import "config.h"
27
28	int main(int argc, const char* argv[])
29	{
30	@autoreleasepool {
31	WTFLogAlways("com.apple.webkit.WebAuthenticationAgent started.");
32	}
33
34	[[NSRunLoop mainRunLoop] run];
35
36	return 0;
37	}

Lines 105-110 $(PROJECT_DIR)/UIProcess/UserContent/WebUserContentControllerProxy.messages.in a/Source/WebKit/DerivedSources-input.xcfilelist_sec1
- a/Source/WebKit/DerivedSources-input.xcfilelist +5 lines
105	$(PROJECT_DIR)/UIProcess/ViewGestureController.messages.in	105	$(PROJECT_DIR)/UIProcess/ViewGestureController.messages.in
106	$(PROJECT_DIR)/UIProcess/VisitedLinkStore.messages.in	106	$(PROJECT_DIR)/UIProcess/VisitedLinkStore.messages.in
107	$(PROJECT_DIR)/UIProcess/WebAuthentication/WebAuthenticatorCoordinatorProxy.messages.in	107	$(PROJECT_DIR)/UIProcess/WebAuthentication/WebAuthenticatorCoordinatorProxy.messages.in
		108	$(PROJECT_DIR)/UIProcess/WebAuthentication/WebAuthnProcessProxy.messages.in
108	$(PROJECT_DIR)/UIProcess/WebCookieManagerProxy.messages.in	109	$(PROJECT_DIR)/UIProcess/WebCookieManagerProxy.messages.in
109	$(PROJECT_DIR)/UIProcess/WebFullScreenManagerProxy.messages.in	110	$(PROJECT_DIR)/UIProcess/WebFullScreenManagerProxy.messages.in
110	$(PROJECT_DIR)/UIProcess/WebGeolocationManagerProxy.messages.in	111	$(PROJECT_DIR)/UIProcess/WebGeolocationManagerProxy.messages.in
Lines 116-121 $(PROJECT_DIR)/UIProcess/ios/EditableImageController.messages.in a/Source/WebKit/DerivedSources-input.xcfilelist_sec2
116	$(PROJECT_DIR)/UIProcess/ios/SmartMagnificationController.messages.in	117	$(PROJECT_DIR)/UIProcess/ios/SmartMagnificationController.messages.in
117	$(PROJECT_DIR)/UIProcess/ios/WebDeviceOrientationUpdateProviderProxy.messages.in	118	$(PROJECT_DIR)/UIProcess/ios/WebDeviceOrientationUpdateProviderProxy.messages.in
118	$(PROJECT_DIR)/UIProcess/mac/SecItemShimProxy.messages.in	119	$(PROJECT_DIR)/UIProcess/mac/SecItemShimProxy.messages.in
		120	$(PROJECT_DIR)/WebAuthnProcess/WebAuthnConnectionToWebProcess.messages.in
		121	$(PROJECT_DIR)/WebAuthnProcess/WebAuthnProcess.messages.in
		122	$(PROJECT_DIR)/WebAuthnProcess/mac/com.apple.WebKit.WebAuthnProcess.sb.in
119	$(PROJECT_DIR)/WebProcess/ApplePay/WebPaymentCoordinator.messages.in	123	$(PROJECT_DIR)/WebProcess/ApplePay/WebPaymentCoordinator.messages.in
120	$(PROJECT_DIR)/WebProcess/Automation/WebAutomationSessionProxy.js	124	$(PROJECT_DIR)/WebProcess/Automation/WebAutomationSessionProxy.js
121	$(PROJECT_DIR)/WebProcess/Automation/WebAutomationSessionProxy.messages.in	125	$(PROJECT_DIR)/WebProcess/Automation/WebAutomationSessionProxy.messages.in
Lines 154-159 $(PROJECT_DIR)/WebProcess/Storage/WebSWClientConnection.messages.in a/Source/WebKit/DerivedSources-input.xcfilelist_sec3
154	$(PROJECT_DIR)/WebProcess/Storage/WebSWContextManagerConnection.messages.in	158	$(PROJECT_DIR)/WebProcess/Storage/WebSWContextManagerConnection.messages.in
155	$(PROJECT_DIR)/WebProcess/UserContent/WebUserContentController.messages.in	159	$(PROJECT_DIR)/WebProcess/UserContent/WebUserContentController.messages.in
156	$(PROJECT_DIR)/WebProcess/WebAuthentication/WebAuthenticatorCoordinator.messages.in	160	$(PROJECT_DIR)/WebProcess/WebAuthentication/WebAuthenticatorCoordinator.messages.in
		161	$(PROJECT_DIR)/WebProcess/WebAuthentication/WebAuthnProcessConnection.messages.in
157	$(PROJECT_DIR)/WebProcess/WebCoreSupport/WebDeviceOrientationUpdateProvider.messages.in	162	$(PROJECT_DIR)/WebProcess/WebCoreSupport/WebDeviceOrientationUpdateProvider.messages.in
158	$(PROJECT_DIR)/WebProcess/WebPage/Cocoa/TextCheckingControllerProxy.messages.in	163	$(PROJECT_DIR)/WebProcess/WebPage/Cocoa/TextCheckingControllerProxy.messages.in
159	$(PROJECT_DIR)/WebProcess/WebPage/DrawingArea.messages.in	164	$(PROJECT_DIR)/WebProcess/WebPage/DrawingArea.messages.in

Lines 289-294 $(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthenticatorCoordinatorMessages a/Source/WebKit/DerivedSources-output.xcfilelist_sec1
- a/Source/WebKit/DerivedSources-output.xcfilelist +13 lines
289	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthenticatorCoordinatorProxyMessageReceiver.cpp	289	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthenticatorCoordinatorProxyMessageReceiver.cpp
290	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthenticatorCoordinatorProxyMessages.h	290	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthenticatorCoordinatorProxyMessages.h
291	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthenticatorCoordinatorProxyMessagesReplies.h	291	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthenticatorCoordinatorProxyMessagesReplies.h
		292	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthnConnectionToWebProcessMessageReceiver.cpp
		293	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthnConnectionToWebProcessMessages.h
		294	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthnConnectionToWebProcessMessagesReplies.h
		295	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthnProcessConnectionMessageReceiver.cpp
		296	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthnProcessConnectionMessages.h
		297	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthnProcessConnectionMessagesReplies.h
		298	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthnProcessMessageReceiver.cpp
		299	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthnProcessMessages.h
		300	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthnProcessMessagesReplies.h
		301	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthnProcessProxyMessageReceiver.cpp
		302	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthnProcessProxyMessages.h
		303	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAuthnProcessProxyMessagesReplies.h
292	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAutomationSessionMessageReceiver.cpp	304	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAutomationSessionMessageReceiver.cpp
293	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAutomationSessionMessages.h	305	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAutomationSessionMessages.h
294	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAutomationSessionMessagesReplies.h	306	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebAutomationSessionMessagesReplies.h
Lines 422-426 $(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebUserContentControllerProxyMessag a/Source/WebKit/DerivedSources-output.xcfilelist_sec2
422	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebUserContentControllerProxyMessagesReplies.h	434	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/WebUserContentControllerProxyMessagesReplies.h
423	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/com.apple.WebKit.GPUProcess.sb	435	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/com.apple.WebKit.GPUProcess.sb
424	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/com.apple.WebKit.NetworkProcess.sb	436	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/com.apple.WebKit.NetworkProcess.sb
		437	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/com.apple.WebKit.WebAuthnProcess.sb
425	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/com.apple.WebKit.plugin-common.sb	438	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/com.apple.WebKit.plugin-common.sb
426	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/com.apple.WebProcess.sb	439	$(BUILT_PRODUCTS_DIR)/DerivedSources/WebKit2/com.apple.WebProcess.sb

Lines 472-483 UIProcess/WebAuthentication/AuthenticatorTransportService.cpp a/Source/WebKit/Sources.txt_sec1
- a/Source/WebKit/Sources.txt +6 lines
472	UIProcess/WebAuthentication/Authenticator.cpp	472	UIProcess/WebAuthentication/Authenticator.cpp
473	UIProcess/WebAuthentication/WebAuthenticatorCoordinatorProxy.cpp	473	UIProcess/WebAuthentication/WebAuthenticatorCoordinatorProxy.cpp
474	UIProcess/WebAuthentication/WebAuthenticationRequestData.cpp	474	UIProcess/WebAuthentication/WebAuthenticationRequestData.cpp
		475	UIProcess/WebAuthentication/WebAuthnProcessProxy.cpp
475		476
476	UIProcess/WebsiteData/WebDeviceOrientationAndMotionAccessController.cpp	477	UIProcess/WebsiteData/WebDeviceOrientationAndMotionAccessController.cpp
477	UIProcess/WebsiteData/WebsiteDataRecord.cpp	478	UIProcess/WebsiteData/WebsiteDataRecord.cpp
478	UIProcess/WebsiteData/WebsiteDataStore.cpp	479	UIProcess/WebsiteData/WebsiteDataStore.cpp
479	UIProcess/WebsiteData/WebsiteDataStoreConfiguration.cpp	480	UIProcess/WebsiteData/WebsiteDataStoreConfiguration.cpp
480		481
		482	WebAuthnProcess/WebAuthnConnectionToWebProcess.cpp
		483	WebAuthnProcess/WebAuthnProcess.cpp
		484	WebAuthnProcess/WebAuthnProcessCreationParameters.cpp
		485
481	WebProcess/WebConnectionToUIProcess.cpp	486	WebProcess/WebConnectionToUIProcess.cpp
482	WebProcess/WebProcess.cpp	487	WebProcess/WebProcess.cpp
483	WebProcess/WebSleepDisablerClient.cpp	488	WebProcess/WebSleepDisablerClient.cpp
Lines 626-631 WebProcess/Storage/WebServiceWorkerProvider.cpp a/Source/WebKit/Sources.txt_sec2
626	WebProcess/UserContent/WebUserContentController.cpp	631	WebProcess/UserContent/WebUserContentController.cpp
627		632
628	WebProcess/WebAuthentication/WebAuthenticatorCoordinator.cpp	633	WebProcess/WebAuthentication/WebAuthenticatorCoordinator.cpp
		634	WebProcess/WebAuthentication/WebAuthnProcessConnection.cpp
629		635
630	WebProcess/WebCoreSupport/SessionStateConversion.cpp	636	WebProcess/WebCoreSupport/SessionStateConversion.cpp
631	WebProcess/WebCoreSupport/WebChromeClient.cpp	637	WebProcess/WebCoreSupport/WebChromeClient.cpp

Line 0 a/Source/WebKit/UIProcess/WebAuthentication/WebAuthnProcessProxy.cpp_sec1
- a/Source/WebKit/UIProcess/WebAuthentication/WebAuthnProcessProxy.cpp +189 lines
		1	/*
		2	* Copyright (C) 2020 Apple Inc. All rights reserved.
		3	*
		4	* Redistribution and use in source and binary forms, with or without
		5	* modification, are permitted provided that the following conditions
		6	* are met:
		7	* 1. Redistributions of source code must retain the above copyright
		8	* notice, this list of conditions and the following disclaimer.
		9	* 2. Redistributions in binary form must reproduce the above copyright
		10	* notice, this list of conditions and the following disclaimer in the
		11	* documentation and/or other materials provided with the distribution.
		12	*
		13	* THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
		14	* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
		15	* THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
		16	* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
		17	* BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
		18	* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
		19	* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
		20	* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
		21	* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
		22	* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
		23	* THE POSSIBILITY OF SUCH DAMAGE.
		24	*/
		25
		26	#include "config.h"
		27	#include "WebAuthnProcessProxy.h"
		28
		29	#if ENABLE(WEB_AUTHN)
		30
		31	#include "Logging.h"
		32	#include "WebAuthnProcessConnectionInfo.h"
		33	#include "WebAuthnProcessCreationParameters.h"
		34	#include "WebAuthnProcessMessages.h"
		35	#include "WebAuthnProcessProxyMessages.h"
		36	#include "WebPageMessages.h"
		37	#include "WebPageProxy.h"
		38	#include "WebProcessMessages.h"
		39	#include "WebProcessPool.h"
		40	#include "WebProcessProxy.h"
		41	#include "WebProcessProxyMessages.h"
		42	#include <WebCore/RuntimeApplicationChecks.h>
		43	#include <wtf/CompletionHandler.h>
		44
		45	#if PLATFORM(IOS_FAMILY)
		46	#include <wtf/spi/darwin/XPCSPI.h>
		47	#endif
		48
		49	#define MESSAGE_CHECK(assertion) MESSAGE_CHECK_BASE(assertion, this->connection())
		50
		51	namespace WebKit {
		52	using namespace WebCore;
		53
		54	WebAuthnProcessProxy& WebAuthnProcessProxy::singleton()
		55	{
		56	ASSERT(RunLoop::isMain());
		57
		58	static std::once_flag onceFlag;
		59	static LazyNeverDestroyed<WebAuthnProcessProxy> webAuthnProcess;
		60
		61	std::call_once(onceFlag, [] {
		62	webAuthnProcess.construct();
		63
		64	WebAuthnProcessCreationParameters parameters;
65
66	// Initialize the WebAuthn process.
67	webAuthnProcess->send(Messages::WebAuthnProcess::InitializeWebAuthnProcess(parameters), 0);
68	webAuthnProcess->updateProcessAssertion();
69	});
70
71	return webAuthnProcess.get();
72	}
73
74	WebAuthnProcessProxy::WebAuthnProcessProxy()
75	: AuxiliaryProcessProxy()
76	, m_throttler(*this, false)
77	{
78	connect();
79	}
80
81	WebAuthnProcessProxy::~WebAuthnProcessProxy() = default;
82
83	void WebAuthnProcessProxy::getLaunchOptions(ProcessLauncher::LaunchOptions& launchOptions)
84	{
85	launchOptions.processType = ProcessLauncher::ProcessType::WebAuthn;
86	AuxiliaryProcessProxy::getLaunchOptions(launchOptions);
87	}
88
89	void WebAuthnProcessProxy::connectionWillOpen(IPC::Connection&)
90	{
91	}
92
93	void WebAuthnProcessProxy::processWillShutDown(IPC::Connection& connection)
94	{
95	ASSERT_UNUSED(connection, this->connection() == &connection);
96	}
97
98	void WebAuthnProcessProxy::getWebAuthnProcessConnection(WebProcessProxy& webProcessProxy, Messages::WebProcessProxy::GetWebAuthnProcessConnection::DelayedReply&& reply)
99	{
100	RELEASE_LOG(ProcessSuspension, "%p - WebAuthnProcessProxy is taking a background assertion because a web process is requesting a connection", this);
101	sendWithAsyncReply(Messages::WebAuthnProcess::CreateWebAuthnConnectionToWebProcess { webProcessProxy.coreProcessIdentifier() }, [this, weakThis = makeWeakPtr(*this), reply = WTFMove(reply)](auto&& identifier) mutable {
102	if (!weakThis) {
103	RELEASE_LOG_ERROR(Process, "WebAuthnProcessProxy::getWebAuthnProcessConnection: WebAuthnProcessProxy deallocated during connection establishment");
104	return reply({ });
105	}
106
107	if (!identifier) {
108	RELEASE_LOG_ERROR(Process, "WebAuthnProcessProxy::getWebAuthnProcessConnection: connection identifier is empty");
109	return reply({ });
110	}
111
112	MESSAGE_CHECK(MACH_PORT_VALID(identifier->port()));
113	reply(WebAuthnProcessConnectionInfo { IPC::Attachment { identifier->port(), MACH_MSG_TYPE_MOVE_SEND } });
114	}, 0, IPC::SendOption::DispatchMessageEvenWhenWaitingForSyncReply);
115	}
116
117	void WebAuthnProcessProxy::webAuthnProcessCrashed()
118	{
119	for (auto& processPool : WebProcessPool::allProcessPools())
120	processPool->terminateAllWebContentProcesses();
121	}
122
123	void WebAuthnProcessProxy::didClose(IPC::Connection&)
124	{
125	// This will cause us to be deleted.
126	webAuthnProcessCrashed();
127	}
128
129	void WebAuthnProcessProxy::didReceiveInvalidMessage(IPC::Connection& connection, IPC::MessageName messageName)
130	{
131	logInvalidMessage(connection, messageName);
132
133	WebProcessPool::didReceiveInvalidMessage(messageName);
134
135	// Terminate the WebAuthn process.
136	terminate();
137
138	// Since we've invalidated the connection we'll never get a IPC::Connection::Client::didClose
139	// callback so we'll explicitly call it here instead.
140	didClose(connection);
141	}
142
143	void WebAuthnProcessProxy::didFinishLaunching(ProcessLauncher* launcher, IPC::Connection::Identifier connectionIdentifier)
144	{
145	AuxiliaryProcessProxy::didFinishLaunching(launcher, connectionIdentifier);
146
147	if (!IPC::Connection::identifierIsValid(connectionIdentifier)) {
148	webAuthnProcessCrashed();
149	return;
150	}
151
152	#if PLATFORM(IOS_FAMILY)
153	if (xpc_connection_t connection = this->connection()->xpcConnection())
154	m_throttler.didConnectToProcess(xpc_connection_get_pid(connection));
155	#endif
156	}
157
158	void WebAuthnProcessProxy::updateProcessAssertion()
159	{
160	bool hasAnyForegroundWebProcesses = false;
161	bool hasAnyBackgroundWebProcesses = false;
162
163	for (auto& processPool : WebProcessPool::allProcessPools()) {
164	hasAnyForegroundWebProcesses \|= processPool->hasForegroundWebProcesses();
165	hasAnyBackgroundWebProcesses \|= processPool->hasBackgroundWebProcesses();
166	}
167
168	if (hasAnyForegroundWebProcesses) {
169	if (!ProcessThrottler::isValidForegroundActivity(m_activityFromWebProcesses)) {
170	m_activityFromWebProcesses = throttler().foregroundActivity("WebAuthn for foreground view(s)"_s);
171	send(Messages::WebAuthnProcess::ProcessDidTransitionToForeground(), 0);
172	}
173	return;
174	}
175	if (hasAnyBackgroundWebProcesses) {
176	if (!ProcessThrottler::isValidBackgroundActivity(m_activityFromWebProcesses)) {
177	m_activityFromWebProcesses = throttler().backgroundActivity("WebAuthn for background view(s)"_s);
178	send(Messages::WebAuthnProcess::ProcessDidTransitionToBackground(), 0);
179	}
180	return;
181	}
182	m_activityFromWebProcesses = nullptr;
183	}
184
185	} // namespace WebKit
186
187	#undef MESSAGE_CHECK
188
189	#endif // ENABLE(WEB_AUTHN)

Line 0 a/Source/WebKit/UIProcess/WebAuthentication/WebAuthnProcessProxy.messages.in_sec1
- a/Source/WebKit/UIProcess/WebAuthentication/WebAuthnProcessProxy.messages.in +28 lines
	1	# Copyright (C) 2020 Apple Inc. All rights reserved.
	2	#
	3	# Redistribution and use in source and binary forms, with or without
	4	# modification, are permitted provided that the following conditions
	5	# are met:
	6	# 1. Redistributions of source code must retain the above copyright
	7	# notice, this list of conditions and the following disclaimer.
	8	# 2. Redistributions in binary form must reproduce the above copyright
	9	# notice, this list of conditions and the following disclaimer in the
	10	# documentation and/or other materials provided with the distribution.
	11	#
	12	# THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS'' AND
	13	# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
	14	# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
	15	# DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS BE LIABLE FOR
	16	# ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
	17	# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
	18	# SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
	19	# CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
	20	# OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
	21	# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
	22
	23	#if ENABLE(WEB_AUTHN)
	24
	25	messages -> WebAuthnProcessProxy NotRefCounted {
	26	}
	27
	28	#endif // ENABLE(WEB_AUTHN)

Lines 116-121 a/Source/WebKit/UIProcess/WebProcessPool.cpp_sec1
- a/Source/WebKit/UIProcess/WebProcessPool.cpp +19 lines
116	#include "GPUProcessProxy.h"	116	#include "GPUProcessProxy.h"
117	#endif	117	#endif
118		118
		119	#if ENABLE(WEB_AUTHN)
		120	#include "WebAuthnProcessConnectionInfo.h"
		121	#include "WebAuthnProcessProxy.h"
		122	#endif
		123
119	#if ENABLE(REMOTE_INSPECTOR)	124	#if ENABLE(REMOTE_INSPECTOR)
120	#include <JavaScriptCore/RemoteInspector.h>	125	#include <JavaScriptCore/RemoteInspector.h>
121	#endif	126	#endif
Lines 496-501 void WebProcessPool::getGPUProcessConnection(WebProcessProxy& webProcessProxy, M a/Source/WebKit/UIProcess/WebProcessPool.cpp_sec2
496	}	501	}
497	#endif	502	#endif
498		503
		504	#if ENABLE(WEB_AUTHN)
		505	void WebProcessPool::getWebAuthnProcessConnection(WebProcessProxy& webProcessProxy, Messages::WebProcessProxy::GetWebAuthnProcessConnection::DelayedReply&& reply)
		506	{
		507	WebAuthnProcessProxy::singleton().getWebAuthnProcessConnection(webProcessProxy, [this, weakThis = makeWeakPtr(*this), webProcessProxy = makeWeakPtr(webProcessProxy), reply = WTFMove(reply)] (auto& connectionInfo) mutable {
		508	if (UNLIKELY(!IPC::Connection::identifierIsValid(connectionInfo.identifier()) && webProcessProxy && weakThis)) {
		509	WEBPROCESSPOOL_RELEASE_LOG_ERROR(Process, "getWebAuthnProcessConnection: Failed first attempt, retrying");
		510	WebAuthnProcessProxy::singleton().getWebAuthnProcessConnection(*webProcessProxy, WTFMove(reply));
		511	return;
		512	}
		513	reply(connectionInfo);
		514	});
		515	}
		516	#endif
		517
499	bool WebProcessPool::s_useSeparateServiceWorkerProcess = false;	518	bool WebProcessPool::s_useSeparateServiceWorkerProcess = false;
500		519
501	#if ENABLE(SERVICE_WORKER)	520	#if ENABLE(SERVICE_WORKER)

Line 0 a/Source/WebKit/WebAuthnProcess/EntryPoint/Cocoa/XPCService/WebAuthnService/Info-OSX.plist_sec1
- a/Source/WebKit/WebAuthnProcess/EntryPoint/Cocoa/XPCService/WebAuthnService/Info-OSX.plist +43 lines
	1	<?xml version="1.0" encoding="UTF-8"?>
	2	<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
	3	<plist version="1.0">
	4	<dict>
	5	<key>CFBundleGetInfoString</key>
	6	<string>${BUNDLE_VERSION}, Copyright 2003-2020 Apple Inc.</string>
	7	<key>CFBundleDevelopmentRegion</key>
	8	<string>English</string>
	9	<key>CFBundleExecutable</key>
	10	<string>${EXECUTABLE_NAME}</string>
	11	<key>CFBundleIdentifier</key>
	12	<string>${PRODUCT_BUNDLE_IDENTIFIER}</string>
	13	<key>CFBundleInfoDictionaryVersion</key>
	14	<string>6.0</string>
	15	<key>CFBundleName</key>
	16	<string>${PRODUCT_NAME}</string>
	17	<key>CFBundlePackageType</key>
	18	<string>XPC!</string>
	19	<key>CFBundleShortVersionString</key>
	20	<string>${SHORT_VERSION_STRING}</string>
	21	<key>CFBundleSignature</key>
	22	<string>????</string>
	23	<key>CFBundleVersion</key>
	24	<string>${BUNDLE_VERSION}</string>
	25	<key>LSFileQuarantineEnabled</key>
	26	<true/>
	27	<key>NSPrincipalClass</key>
	28	<string>NSApplication</string>
	29	<key>LSUIElement</key>
	30	<true/>
	31	<key>XPCService</key>
	32	<dict>
	33	<key>ServiceType</key>
	34	<string>Application</string>
	35	<key>JoinExistingSession</key>
	36	<true/>
	37	<key>RunLoopType</key>
	38	<string>NSRunLoop</string>
	39	<key>_MultipleInstances</key>
	40	<true/>
	41	</dict>
	42	</dict>
	43	</plist>

Line 0 a/Source/WebKit/WebAuthnProcess/WebAuthnConnectionToWebProcess.cpp_sec1
- a/Source/WebKit/WebAuthnProcess/WebAuthnConnectionToWebProcess.cpp +67 lines
		1	/*
		2	* Copyright (C) 2020 Apple Inc. All rights reserved.
		3	*
		4	* Redistribution and use in source and binary forms, with or without
		5	* modification, are permitted provided that the following conditions
		6	* are met:
		7	* 1. Redistributions of source code must retain the above copyright
		8	* notice, this list of conditions and the following disclaimer.
		9	* 2. Redistributions in binary form must reproduce the above copyright
		10	* notice, this list of conditions and the following disclaimer in the
		11	* documentation and/or other materials provided with the distribution.
		12	*
		13	* THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
		14	* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
		15	* THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
		16	* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
		17	* BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
		18	* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
		19	* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
		20	* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
		21	* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
		22	* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
		23	* THE POSSIBILITY OF SUCH DAMAGE.
		24	*/
		25
		26	#include "config.h"
		27	#include "WebAuthnConnectionToWebProcess.h"
		28
		29	#if ENABLE(WEB_AUTHN)
		30
		31	namespace WebKit {
		32	using namespace WebCore;
		33
		34	Ref<WebAuthnConnectionToWebProcess> WebAuthnConnectionToWebProcess::create(WebAuthnProcess& WebAuthnProcess, WebCore::ProcessIdentifier webProcessIdentifier, IPC::Connection::Identifier connectionIdentifier)
		35	{
		36	return adoptRef(*new WebAuthnConnectionToWebProcess(WebAuthnProcess, webProcessIdentifier, connectionIdentifier));
		37	}
		38
		39	WebAuthnConnectionToWebProcess::WebAuthnConnectionToWebProcess(WebAuthnProcess& WebAuthnProcess, WebCore::ProcessIdentifier webProcessIdentifier, IPC::Connection::Identifier connectionIdentifier)
		40	: m_connection(IPC::Connection::createServerConnection(connectionIdentifier, *this))
		41	, m_WebAuthnProcess(WebAuthnProcess)
		42	, m_webProcessIdentifier(webProcessIdentifier)
		43	{
		44	RELEASE_ASSERT(RunLoop::isMain());
		45	m_connection->open();
		46	}
		47
		48	WebAuthnConnectionToWebProcess::~WebAuthnConnectionToWebProcess()
		49	{
		50	RELEASE_ASSERT(RunLoop::isMain());
		51
		52	m_connection->invalidate();
		53	}
		54
		55	void WebAuthnConnectionToWebProcess::didClose(IPC::Connection&)
		56	{
		57	}
		58
		59	void WebAuthnConnectionToWebProcess::didReceiveInvalidMessage(IPC::Connection& connection, IPC::MessageName messageName)
		60	{
		61	WTFLogAlways("Received an invalid message \"%s\" from the web process.\n", description(messageName));
		62	CRASH();
		63	}
		64
65	} // namespace WebKit
66
67	#endif // ENABLE(WEB_AUTHN)

Line 0 a/Source/WebKit/WebAuthnProcess/WebAuthnProcess.messages.in_sec1
- a/Source/WebKit/WebAuthnProcess/WebAuthnProcess.messages.in +36 lines
	1	# Copyright (C) 2019-2020 Apple Inc. All rights reserved.
	2	#
	3	# Redistribution and use in source and binary forms, with or without
	4	# modification, are permitted provided that the following conditions
	5	# are met:
	6	# 1. Redistributions of source code must retain the above copyright
	7	# notice, this list of conditions and the following disclaimer.
	8	# 2. Redistributions in binary form must reproduce the above copyright
	9	# notice, this list of conditions and the following disclaimer in the
	10	# documentation and/or other materials provided with the distribution.
	11	#
	12	# THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS'' AND
	13	# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
	14	# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
	15	# DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS BE LIABLE FOR
	16	# ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
	17	# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
	18	# SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
	19	# CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
	20	# OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
	21	# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
	22
	23	#if ENABLE(WEB_AUTHN)
	24
	25	messages -> WebAuthnProcess {
	26	# Initializes the WebAuthn process.
	27	InitializeWebAuthnProcess(struct WebKit::WebAuthnProcessCreationParameters processCreationParameters)
	28
	29	# Creates a connection for communication with a WebProcess
	30	CreateWebAuthnConnectionToWebProcess(WebCore::ProcessIdentifier processIdentifier) -> (Optional<IPC::Attachment> connectionIdentifier) Async
	31
	32	ProcessDidTransitionToForeground()
	33	ProcessDidTransitionToBackground()
	34	}
	35
	36	#endif // ENABLE(WEB_AUTHN)

Line 0 a/Source/WebKit/WebAuthnProcess/ios/WebAuthnProcessIOS.mm_sec1
- a/Source/WebKit/WebAuthnProcess/ios/WebAuthnProcessIOS.mm +53 lines
	1	/*
	2	* Copyright (C) 2020 Apple Inc. All rights reserved.
	3	*
	4	* Redistribution and use in source and binary forms, with or without
	5	* modification, are permitted provided that the following conditions
	6	* are met:
	7	* 1. Redistributions of source code must retain the above copyright
	8	* notice, this list of conditions and the following disclaimer.
	9	* 2. Redistributions in binary form must reproduce the above copyright
	10	* notice, this list of conditions and the following disclaimer in the
	11	* documentation and/or other materials provided with the distribution.
	12	*
	13	* THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
	14	* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
	15	* THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
	16	* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
	17	* BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
	18	* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
	19	* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
	20	* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
	21	* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
	22	* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
	23	* THE POSSIBILITY OF SUCH DAMAGE.
	24	*/
	25
	26	#import "config.h"
	27	#import "WebAuthnProcess.h"
	28
	29	#if ENABLE(WEB_AUTHN) && PLATFORM(IOS_FAMILY)
	30
	31	#import <WebCore/NotImplemented.h>
	32	#import <WebCore/WebCoreThreadSystemInterface.h>
	33
	34	namespace WebKit {
	35	using namespace WebCore;
	36
	37	void WebAuthnProcess::initializeProcess(const AuxiliaryProcessInitializationParameters&)
	38	{
	39	InitWebCoreThreadSystemInterface();
	40	}
	41
	42	void WebAuthnProcess::initializeProcessName(const AuxiliaryProcessInitializationParameters&)
	43	{
	44	notImplemented();
	45	}
	46
	47	void WebAuthnProcess::initializeSandbox(const AuxiliaryProcessInitializationParameters&, SandboxInitializationParameters&)
	48	{
	49	}
	50
	51	} // namespace WebKit
	52
	53	#endif // ENABLE(WEB_AUTHN) && PLATFORM(IOS_FAMILY)

Line 0 a/Source/WebKit/WebAuthnProcess/mac/WebAuthnProcessMac.mm_sec1
- a/Source/WebKit/WebAuthnProcess/mac/WebAuthnProcessMac.mm +71 lines
		1	/*
		2	* Copyright (C) 2020 Apple Inc. All rights reserved.
		3	*
		4	* Redistribution and use in source and binary forms, with or without
		5	* modification, are permitted provided that the following conditions
		6	* are met:
		7	* 1. Redistributions of source code must retain the above copyright
		8	* notice, this list of conditions and the following disclaimer.
		9	* 2. Redistributions in binary form must reproduce the above copyright
		10	* notice, this list of conditions and the following disclaimer in the
		11	* documentation and/or other materials provided with the distribution.
		12	*
		13	* THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
		14	* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
		15	* THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
		16	* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
		17	* BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
		18	* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
		19	* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
		20	* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
		21	* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
		22	* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
		23	* THE POSSIBILITY OF SUCH DAMAGE.
		24	*/
		25
		26	#import "config.h"
		27	#import "WebAuthnProcess.h"
		28
		29	#if ENABLE(WEB_AUTHN) && PLATFORM(MAC)
		30
		31	#import "SandboxInitializationParameters.h"
		32	#import "WKFoundation.h"
		33	#import "WebAuthnProcessCreationParameters.h"
		34	#import <WebCore/LocalizedStrings.h>
		35	#import <pal/spi/cocoa/LaunchServicesSPI.h>
		36	#import <pal/spi/mac/HIServicesSPI.h>
		37	#import <sysexits.h>
		38	#import <wtf/MemoryPressureHandler.h>
		39	#import <wtf/text/WTFString.h>
		40
		41	namespace WebKit {
		42	using namespace WebCore;
		43
		44	void WebAuthnProcess::initializeProcess(const AuxiliaryProcessInitializationParameters&)
		45	{
		46	// Having a window server connection in this process would result in spin logs (<rdar://problem/13239119>).
		47	OSStatus error = SetApplicationIsDaemon(true);
		48	ASSERT_UNUSED(error, error == noErr);
		49
		50	launchServicesCheckIn();
		51	}
		52
		53	void WebAuthnProcess::initializeProcessName(const AuxiliaryProcessInitializationParameters& parameters)
		54	{
		55	NSString applicationName = [NSString stringWithFormat:WEB_UI_STRING("%@ Web Authentication", "visible name of the WebAuthn process. The argument is the application name."), (NSString )parameters.uiProcessName];
		56	_LSSetApplicationInformationItem(kLSDefaultSessionID, _LSGetCurrentApplicationASN(), _kLSDisplayNameKey, (CFStringRef)applicationName, nullptr);
		57	}
		58
		59	void WebAuthnProcess::initializeSandbox(const AuxiliaryProcessInitializationParameters& parameters, SandboxInitializationParameters& sandboxParameters)
		60	{
		61	// Need to override the default, because service has a different bundle ID.
		62	NSBundle *webKit2Bundle = [NSBundle bundleForClass:NSClassFromString(@"WKWebView")];
		63
		64	sandboxParameters.setOverrideSandboxProfilePath([webKit2Bundle pathForResource:@"com.apple.WebKit.WebAuthnProcess" ofType:@"sb"]);
65
66	AuxiliaryProcess::initializeSandbox(parameters, sandboxParameters);
67	}
68
69	} // namespace WebKit
70
71	#endif // ENABLE(WEB_AUTHN)

Line 0 a/Source/WebKit/WebAuthnProcess/mac/com.apple.WebKit.WebAuthnProcess.sb.in_sec1
- a/Source/WebKit/WebAuthnProcess/mac/com.apple.WebKit.WebAuthnProcess.sb.in +440 lines
		1	; Copyright (C) 2010-2020 Apple Inc. All rights reserved.
		2	;
		3	; Redistribution and use in source and binary forms, with or without
		4	; modification, are permitted provided that the following conditions
		5	; are met:
		6	; 1. Redistributions of source code must retain the above copyright
		7	; notice, this list of conditions and the following disclaimer.
		8	; 2. Redistributions in binary form must reproduce the above copyright
		9	; notice, this list of conditions and the following disclaimer in the
		10	; documentation and/or other materials provided with the distribution.
		11	;
		12	; THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
		13	; AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
		14	; THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
		15	; PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
		16	; BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
		17	; CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
		18	; SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
		19	; INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
		20	; CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
		21	; ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
		22	; THE POSSIBILITY OF SUCH DAMAGE.
		23
		24	(version 1)
		25	(deny default (with partial-symbolication))
		26	(allow system-audit file-read-metadata)
		27
		28	;;;
		29	;;; The following rules were originally contained in 'system.sb'. We are duplicating them here so we can
		30	;;; remove unneeded sandbox extensions.
		31	;;;
		32
		33	;;; Allow registration of per-pid services.
		34	(allow mach-register (local-name-prefix ""))
		35
		36	;;; Allow read access to standard system paths.
		37	(allow file-read*
		38	(require-all (file-mode #o0004)
		39	(require-any (subpath "/Library/Filesystems/NetFSPlugins")
		40	(subpath "/Library/Apple/System")
		41	(subpath "/Library/Preferences/Logging") ; Logging Rethink
		42	(subpath "/System")
		43	(subpath "/private/var/db/dyld")
		44	(subpath "/private/var/db/timezone")
		45	(subpath "/usr/lib")
		46	(subpath "/usr/share"))))
		47
		48	;;; Allow reading internal profiles on development builds
		49	(allow file-read*
		50	(require-all (file-mode #o0004)
		51	(subpath "/AppleInternal/Library/Preferences/Logging")
		52	(system-attribute apple-internal)))
		53
		54	;;; Allow mapping of system frameworks + dylibs
		55	(allow file-map-executable
		56	(subpath "/Library/Apple/System/Library/Frameworks")
		57	(subpath "/Library/Apple/System/Library/PrivateFrameworks")
		58	(subpath "/System/Library/Frameworks")
		59	(subpath "/System/Library/PrivateFrameworks")
		60	(subpath "/usr/lib")
		61	(subpath "/usr/appleinternal/lib/sanitizers"))
		62
		63	(allow file-read-metadata
		64	(literal "/etc")
65	(literal "/tmp")
66	(literal "/var")
67	(literal "/private/etc/localtime"))
68
69
70	;;; Allow access to standard special files.
71	(allow file-read*
72	(literal "/dev/autofs_nowait")
73	(literal "/dev/random")
74	(literal "/dev/urandom")
75	(literal "/private/etc/master.passwd")
76	(literal "/private/etc/passwd"))
77
78	(allow file-read*
79	file-write-data
80	(literal "/dev/null")
81	(literal "/dev/zero"))
82
83	(allow file-read*
84	file-write-data
85	file-ioctl
86	(literal "/dev/dtracehelper"))
87
88	;;; Allow creation of core dumps.
89	(allow file-write-create
90	(require-all (prefix "/cores/")
91	(vnode-type REGULAR-FILE)))
92
93	;;; Allow IPC to standard system agents.
94	(allow ipc-posix-shm-read*
95	(ipc-posix-name "apple.shm.notification_center")
96	(ipc-posix-name-prefix "apple.cfprefs."))
97
98	;;;
99	;;; End rules originally copied from 'system.sb'
100	;;;
101
102	;;; process-info* defaults to allow; deny it and then allow operations we actually need.
103	(deny process-info*)
104	(allow process-info-pidinfo)
105	(allow process-info-setcontrol (target self))
106	(allow process-codesigning-status*)
107
108	(deny sysctl*)
109	(allow sysctl-read
110	(sysctl-name
111	"hw.byteorder"
112	"hw.busfrequency_max"
113	"hw.cputype"
114	"hw.machine"
115	"hw.memsize"
116	"hw.model"
117	"hw.ncpu"
118	"hw.vectorunit"
119	"kern.bootargs" ;; <rdar://problem/47738015>
120	"kern.hostname"
121	"kern.maxfilesperproc"
122	"kern.memorystatus_level"
123	"kern.osproductversion" ;; <rdar://problem/51756739>
124	"kern.osversion"
125	"kern.safeboot"
126	"kern.version"
127	"machdep.cpu.brand_string"
128	"security.mac.sandbox.sentinel"
129	"kern.tcsm_enable"
130	"kern.tcsm_available"
131	"vm.footprint_suspend")
132	(sysctl-name-regex #"^hw.(active\|avail)cpu")
133	(sysctl-name-regex #"^hw.(busfrequency\|cachelinesize\|cpufrequency(\|_max)\|pagesize\|tbfrequency)(\|_compat)")
134	(sysctl-name-regex #"^hw.l.+cachesize")
135	(sysctl-name-regex #"^hw.(logical\|physical)cpu_max")
136	(sysctl-name-regex #"^hw.optional\.")
137	(sysctl-name-regex #"^kern.os(release\|type\|variant_status\|version)")
138	(sysctl-name-regex #"^net.routetable")
139	)
140
141	(allow sysctl-write
142	(sysctl-name
143	"kern.tcsm_enable"))
144
145	(deny mach-lookup (xpc-service-name-prefix ""))
146	(allow mach-lookup
147	(xpc-service-name "com.apple.PerformanceAnalysis.animationperfd")
148	(xpc-service-name "com.apple.accessibility.mediaaccessibilityd")
149	(xpc-service-name "com.apple.audio.SandboxHelper")
150	(xpc-service-name "com.apple.coremedia.videodecoder")
151	(xpc-service-name "com.apple.coremedia.videoencoder")
152	(xpc-service-name "com.apple.hiservices-xpcservice")
153	(xpc-service-name "com.apple.print.normalizerd")
154	)
155
156	;; Utility functions for home directory relative path filters
157	(define (home-regex home-relative-regex)
158	(regex (string-append "^" (regex-quote (param "HOME_DIR")) home-relative-regex)))
159
160	(define (home-subpath home-relative-subpath)
161	(subpath (string-append (param "HOME_DIR") home-relative-subpath)))
162
163	(define (home-literal home-relative-literal)
164	(literal (string-append (param "HOME_DIR") home-relative-literal)))
165
166	(define (allow-read-directory-and-issue-read-extensions path)
167	(if path
168	(begin
169	(allow file-read* (subpath path))
170	(allow file-issue-extension (require-all (extension-class "com.apple.app-sandbox.read") (subpath path))))))
171
172	(define (allow-read-write-directory-and-issue-read-write-extensions path)
173	(if path
174	(begin
175	(allow file-read* file-write* (subpath path))
176	(allow file-issue-extension (require-all (extension-class "com.apple.app-sandbox.read") (subpath path)))
177	(allow file-issue-extension (require-all (extension-class "com.apple.app-sandbox.read-write") (subpath path))))))
178
179	;; Remove when <rdar://problem/29646094> is fixed.
180	(define (HEX-pattern-match-generator pattern-descriptor)
181	(letrec ((pattern-string ""))
182	(for-each (lambda (repeat-count)
183	(if (zero? repeat-count)
184	(set! pattern-string (string-append pattern-string "-"))
185	(let appender ((count repeat-count))
186	(if (> count 0)
187	(begin
188	(set! pattern-string (string-append pattern-string "[0-9A-F]"))
189	(appender (- count 1)))))))
190	pattern-descriptor)
191	pattern-string))
192
193	;; return a regex pattern matching string for 8-4-4-4-12 UUIDs:
194	(define (uuid-HEX-pattern-match-string)
195	(HEX-pattern-match-generator '(8 0 4 0 4 0 4 0 12)))
196
197	;; global to hold the computed UUID matching pattern.
198	(define uuid-pattern "")
199
200	(define (uuid-regex-string)
201	(if (zero? (string-length uuid-pattern))
202	(set! uuid-pattern (uuid-HEX-pattern-match-string)))
203	uuid-pattern)
204
205	;; Read-only preferences and data
206	(allow file-read*
207	;; Basic system paths
208	(subpath "/Library/Dictionaries")
209	(subpath "/Library/Fonts")
210	(subpath "/Library/Frameworks")
211	(subpath "/Library/Managed Preferences")
212	(subpath "/Library/Speech/Synthesizers")
213	(regex #"^/private/etc/(hosts\|group\|passwd)$")
214
215	(literal "/Library/Application Support/CrashReporter/SubmitDiagInfo.domains")
216
217	;; System and user preferences
218	(home-literal "/.CFUserTextEncoding")
219
220	;; FIXME: This should be removed when <rdar://problem/8957845> is fixed.
221	(home-subpath "/Library/Fonts")
222
223	(subpath "/Library/Audio/Plug-Ins/HAL")
224
225	(home-subpath "/Library/Dictionaries"))
226
227	(allow file-read-data
228	(literal "/usr/local/lib/log") ; <rdar://problem/36629495>
229	;; Needed for AES3 support
230	(subpath "/Library/Audio/Plug-Ins/Components"))
231
232	;; Preferences support
233	(allow user-preference-read
234	(preference-domain
235	"kCFPreferencesAnyApplication"
236	"com.apple.Accessibility"
237	"com.apple.ATS"
238	"com.apple.CoreGraphics"
239	"com.apple.DownloadAssessment"
240	"com.apple.HIToolbox"
241	"com.apple.LaunchServices"
242	"com.apple.MultitouchSupport" ;; FIXME: Remove when <rdar://problem/13011633> is fixed.
243	"com.apple.ServicesMenu.Services" ;; Needed for NSAttributedString <rdar://problem/10844321>
244	"com.apple.ViewBridge" ;; Needed for Input elements.
245	"com.apple.WebFoundation"
246	"com.apple.avfoundation"
247	"com.apple.avfoundation.frecents" ;; <rdar://problem/33137029>
248	"com.apple.avfoundation.videoperformancehud" ;; <rdar://problem/31594568>
249	"com.apple.coremedia"
250	"com.apple.crypto"
251	"com.apple.driver.AppleBluetoothMultitouch.mouse"
252	"com.apple.driver.AppleBluetoothMultitouch.trackpad"
253	"com.apple.driver.AppleHIDMouse"
254	"com.apple.lookup.shared"
255	"com.apple.mediaaccessibility" ;; Needed for custom caption styles
256	"com.apple.networkConnect"
257	"com.apple.speech.voice.prefs"
258	"com.apple.systemsound"
259	"com.apple.universalaccess"
260	"edu.mit.Kerberos"
261	"pbs" ;; Needed for NSAttributedString <rdar://problem/10844321>
262	))
263
264	; (Temporary) backward compatibility with non-CFPreferences readers.
265	(allow file-read*
266	(literal "/Library/Preferences/com.apple.ViewBridge.plist"))
267
268	; FIXME: This is needed for some security framework calls (that use non-CFPreferences readers)
269	(allow file-read-data
270	(literal "/Library/Preferences/com.apple.security.plist")
271	(home-subpath "/Library/Preferences/com.apple.security.plist"))
272
273	;; On-disk WebKit2 framework location, to account for debug installations outside of /System/Library/Frameworks,
274	;; and to allow issuing extensions.
275	(allow-read-directory-and-issue-read-extensions (param "WEBKIT2_FRAMEWORK_DIR"))
276
277	;; Allow issuing extensions to system libraries that the Network process can already read.
278	;; This is to avoid warnings attempting to create extensions for these resources.
279	(allow-read-directory-and-issue-read-extensions "/System/Library/PrivateFrameworks/WebInspectorUI.framework")
280
281	;; Sandbox extensions
282	(define (apply-read-and-issue-extension op path-filter)
283	(op file-read* path-filter)
284	(op file-issue-extension (require-all (extension-class "com.apple.app-sandbox.read") path-filter)))
285	(define (apply-write-and-issue-extension op path-filter)
286	(op file-write* path-filter)
287	(op file-issue-extension (require-all (extension-class "com.apple.app-sandbox.read-write") path-filter)))
288	(define (read-only-and-issue-extensions path-filter)
289	(apply-read-and-issue-extension allow path-filter))
290	(define (read-write-and-issue-extensions path-filter)
291	(apply-read-and-issue-extension allow path-filter)
292	(apply-write-and-issue-extension allow path-filter))
293	(read-only-and-issue-extensions (extension "com.apple.app-sandbox.read"))
294	(read-write-and-issue-extensions (extension "com.apple.app-sandbox.read-write"))
295	(allow mach-lookup (extension "com.apple.app-sandbox.mach")) ;; FIXME: Should be removed when <rdar://problem/13066206> is fixed.
296
297	(allow mach-lookup
298	#if __MAC_OS_X_VERSION_MIN_REQUIRED >= 101500
299	(with report) (with telemetry)
300	#endif
301	(global-name "com.apple.audio.AudioComponentRegistrar")
302	(global-name "com.apple.awdd")
303	(global-name "com.apple.cfprefsd.agent")
304	(global-name "com.apple.cookied")
305	(global-name "com.apple.diagnosticd")
306	(global-name "com.apple.iconservices")
307	(global-name "com.apple.iconservices.store")
308	(global-name "com.apple.mobileassetd")
309	(global-name "com.apple.powerlog.plxpclogger.xpc")
310	(global-name "com.apple.system.logger")
311	)
312
313	;; Various services required by AppKit and other frameworks
314	(allow mach-lookup
315	#if __MAC_OS_X_VERSION_MIN_REQUIRED < 101400
316	(global-name "com.apple.FontObjectsServer")
317	#endif
318	(global-name "com.apple.PowerManagement.control")
319	(global-name "com.apple.SystemConfiguration.configd")
320	(global-name "com.apple.analyticsd")
321	(global-name "com.apple.assertiond.processassertionconnection")
322	(global-name "com.apple.audio.SystemSoundServer-OSX")
323	(global-name "com.apple.audio.audiohald")
324	(global-name "com.apple.cfprefsd.daemon")
325	(global-name "com.apple.coreservices.launchservicesd")
326	(global-name "com.apple.fonts")
327	(global-name "com.apple.mediaremoted.xpc")
328	(global-name "com.apple.logd")
329	(global-name "com.apple.logd.events")
330	(global-name "com.apple.lsd.mapdb")
331	(global-name "com.apple.lskdd") ;; <rdar://problem/49123855>
332	(global-name "com.apple.tccd")
333	(global-name "com.apple.tccd.system")
334	(global-name "com.apple.trustd.agent")
335	#if __MAC_OS_X_VERSION_MIN_REQUIRED >= 101400 \|\| PLATFORM(MACCATALYST)
336	(global-name "com.apple.CARenderServer") ; Needed for [CAContext remoteContextWithOptions]
337	#else
338	(global-name "com.apple.windowserver.active")
339	#endif
340	)
341
342	#if __MAC_OS_X_VERSION_MIN_REQUIRED >= 101400 \|\| PLATFORM(MACCATALYST)
343	;; <rdar://problem/47268166>
344	(allow mach-lookup (xpc-service-name "com.apple.MTLCompilerService"))
345	#endif
346
347	#if __MAC_OS_X_VERSION_MIN_REQUIRED >= 101400 \|\| PLATFORM(MACCATALYST)
348	(deny mach-lookup (with no-log)
349	(global-name "com.apple.CoreServices.coreservicesd")
350	(global-name "com.apple.DiskArbitration.diskarbitrationd")
351	(global-name "com.apple.ViewBridgeAuxiliary")
352	(global-name "com.apple.windowserver.active"))
353	#endif
354
355	;; Needed to support encrypted media playback <rdar://problem/40038478>
356	(allow mach-lookup
357	(global-name "com.apple.SecurityServer")
358	(global-name "com.apple.ocspd"))
359
360	(allow file-read* file-write* (subpath "/private/var/db/mds/system")) ;; FIXME: This should be removed when <rdar://problem/9538414> is fixed.
361
362	(allow file-read*
363	(subpath "/private/var/db/mds")
364	(literal "/private/var/db/DetachedSignatures"))
365
366	(allow ipc-posix-shm-read* ipc-posix-shm-write-data ipc-posix-shm-write-create
367	(ipc-posix-name "com.apple.AppleDatabaseChanged"))
368
369	;; CoreFoundation. We don't import com.apple.corefoundation.sb, because it allows unnecessary access to pasteboard.
370	(allow mach-lookup
371	(global-name-regex #"^com.apple.distributed_notifications")
372	#if !HAVE(CSCHECKFIXDISABLE)
373	(global-name "com.apple.CoreServices.coreservicesd")
374	#endif
375	)
376
377	(allow file-read-data
378	(literal "/dev/autofs_nowait")) ; Used by CF to circumvent automount triggers
379	(allow ipc-posix-shm
380	(ipc-posix-name-regex #"^CFPBS:")) ; <rdar://problem/13757475>
381	(allow system-fsctl (fsctl-command (_IO "h" 47)))
382
383	;; Graphics
384	(system-graphics)
385
386	;; Networking
387	(allow network-outbound
388	;; Local mDNSResponder for DNS, arbitrary outbound TCP
389	;; Note: This is needed for some media playback features. <rdar://problem/38191574>
390	;; Remove this permission when <rdar://problem/38240572> is fixed.
391	(literal "/private/var/run/mDNSResponder")
392	;; ObjC map_images needs to send logging data to syslog. <rdar://problem/39778918>
393	(literal "/private/var/run/syslog")
394	(remote tcp))
395
396	;; CFNetwork
397	(allow file-read-data (path "/private/var/db/nsurlstoraged/dafsaData.bin"))
398
399	#if PLATFORM(MAC)
400	;; FIXME should be removed when <rdar://problem/9347205> + related radar in Safari is fixed
401	(allow mach-lookup
402	(global-name "com.apple.system.logger")
403	(global-name "com.apple.system.notification_center"))
404	#endif
405
406	(if (defined? 'vnode-type)
407	(deny file-write-create (vnode-type SYMLINK)))
408
409	;; Reserve a namespace for additional protected extended attributes.
410	(deny file-read-xattr file-write-xattr (xattr-regex #"^com\.apple\.security\.private\."))
411
412	(deny file-read* file-write* (with no-log)
413	;; FIXME: Should be removed after <rdar://problem/10463881> is fixed.
414	(home-literal "/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2")
415	(home-literal "/Library/Preferences/com.apple.LaunchServices.QuarantineEventsV2-journal"))
416
417	;; Deny access needed for unnecessary NSApplication initialization.
418	;; FIXME: This can be removed once <rdar://problem/13011633> is fixed.
419	(deny file-read* (with no-log)
420	(subpath "/Library/InputManagers")
421	(home-subpath "/Library/InputManagers"))
422	(deny user-preference-read (with no-log)
423	(preference-domain "com.apple.speech.recognition.AppleSpeechRecognition.prefs"))
424	(deny mach-lookup (with no-log)
425	(global-name "com.apple.coreservices.appleevents")
426	(global-name "com.apple.pasteboard.1")
427	(global-name "com.apple.speech.recognitionserver"))
428	#if PLATFORM(MAC)
429	;; Also part of unnecessary NSApplication initialization, but we can't block access to these yet, see <rdar://problem/13869765>.
430	(allow file-read*
431	(subpath "/Library/Components")
432	(subpath "/Library/Keyboard Layouts")
433	(subpath "/Library/Input Methods")
434	(home-subpath "/Library/Components")
435	(home-subpath "/Library/Keyboard Layouts")
436	(home-subpath "/Library/Input Methods"))
437	#endif
438
439	;; Data Detectors
440	(allow file-read* (subpath "/private/var/db/datadetectors/sys"))

Line 0 a/Source/WebKit/WebProcess/WebAuthentication/WebAuthnProcessConnection.cpp_sec1
- a/Source/WebKit/WebProcess/WebAuthentication/WebAuthnProcessConnection.cpp +59 lines
	1	/*
	2	* Copyright (C) 2020 Apple Inc. All rights reserved.
	3	*
	4	* Redistribution and use in source and binary forms, with or without
	5	* modification, are permitted provided that the following conditions
	6	* are met:
	7	* 1. Redistributions of source code must retain the above copyright
	8	* notice, this list of conditions and the following disclaimer.
	9	* 2. Redistributions in binary form must reproduce the above copyright
	10	* notice, this list of conditions and the following disclaimer in the
	11	* documentation and/or other materials provided with the distribution.
	12	*
	13	* THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS''
	14	* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
	15	* THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
	16	* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS
	17	* BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
	18	* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
	19	* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
	20	* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
	21	* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
	22	* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
	23	* THE POSSIBILITY OF SUCH DAMAGE.
	24	*/
	25
	26	#include "config.h"
	27	#include "WebAuthnProcessConnection.h"
	28
	29	#if ENABLE(WEB_AUTHN)
	30
	31	#include "WebAuthnConnectionToWebProcessMessages.h"
	32	#include "WebPageMessages.h"
	33	#include "WebProcess.h"
	34
	35	namespace WebKit {
	36	using namespace WebCore;
	37
	38	WebAuthnProcessConnection::WebAuthnProcessConnection(IPC::Connection::Identifier connectionIdentifier)
	39	: m_connection(IPC::Connection::createClientConnection(connectionIdentifier, *this))
	40	{
	41	m_connection->open();
	42	}
	43
	44	WebAuthnProcessConnection::~WebAuthnProcessConnection()
	45	{
	46	m_connection->invalidate();
	47	}
	48
	49	void WebAuthnProcessConnection::didClose(IPC::Connection&)
	50	{
	51	}
	52
	53	void WebAuthnProcessConnection::didReceiveInvalidMessage(IPC::Connection&, IPC::MessageName)
	54	{
	55	}
	56
	57	} // namespace WebKit
	58
	59	#endif // ENABLE(WEB_AUTHN)

Line 0 a/Source/WebKit/WebProcess/WebAuthentication/WebAuthnProcessConnection.messages.in_sec1
- a/Source/WebKit/WebProcess/WebAuthentication/WebAuthnProcessConnection.messages.in +28 lines
	1	# Copyright (C) 2019 Apple Inc. All rights reserved.
	2	#
	3	# Redistribution and use in source and binary forms, with or without
	4	# modification, are permitted provided that the following conditions
	5	# are met:
	6	# 1. Redistributions of source code must retain the above copyright
	7	# notice, this list of conditions and the following disclaimer.
	8	# 2. Redistributions in binary form must reproduce the above copyright
	9	# notice, this list of conditions and the following disclaimer in the
	10	# documentation and/or other materials provided with the distribution.
	11	#
	12	# THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS'' AND
	13	# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
	14	# WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
	15	# DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS BE LIABLE FOR
	16	# ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
	17	# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
	18	# SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
	19	# CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
	20	# OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
	21	# OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
	22
	23	#if ENABLE(WEB_AUTHN)
	24
	25	messages -> WebAuthnProcessConnection {
	26	}
	27
	28	#endif // ENABLE(WEB_AUTHN)

Lines 165-170 a/Source/WebKit/WebProcess/WebProcess.cpp_sec1
- a/Source/WebKit/WebProcess/WebProcess.cpp +53 lines
165	#include "GPUProcessConnectionInfo.h"	165	#include "GPUProcessConnectionInfo.h"
166	#endif	166	#endif
167		167
		168	#if ENABLE(WEB_AUTHN)
		169	#include "WebAuthnConnectionToWebProcessMessages.h"
		170	#include "WebAuthnProcessConnection.h"
		171	#include "WebAuthnProcessConnectionInfo.h"
		172	#endif
		173
168	#if ENABLE(REMOTE_INSPECTOR)	174	#if ENABLE(REMOTE_INSPECTOR)
169	#include <JavaScriptCore/RemoteInspector.h>	175	#include <JavaScriptCore/RemoteInspector.h>
170	#endif	176	#endif
Lines 1316-1321 LibWebRTCCodecs& WebProcess::libWebRTCCodecs() a/Source/WebKit/WebProcess/WebProcess.cpp_sec2
1316		1322
1317	#endif // ENABLE(GPU_PROCESS)	1323	#endif // ENABLE(GPU_PROCESS)
1318		1324
		1325	#if ENABLE(WEB_AUTHN)
		1326
		1327	static WebAuthnProcessConnectionInfo getWebAuthnProcessConnection(IPC::Connection& connection)
		1328	{
		1329	WebAuthnProcessConnectionInfo connectionInfo;
		1330	if (!connection.sendSync(Messages::WebProcessProxy::GetWebAuthnProcessConnection(), Messages::WebProcessProxy::GetWebAuthnProcessConnection::Reply(connectionInfo), 0)) {
		1331	// If we failed the first time, retry once. The attachment may have become invalid
		1332	// before it was received by the web process if the network process crashed.
		1333	if (!connection.sendSync(Messages::WebProcessProxy::GetWebAuthnProcessConnection(), Messages::WebProcessProxy::GetWebAuthnProcessConnection::Reply(connectionInfo), 0))
		1334	CRASH();
		1335	}
		1336
		1337	return connectionInfo;
		1338	}
		1339
		1340	WebAuthnProcessConnection& WebProcess::ensureWebAuthnProcessConnection()
		1341	{
		1342	RELEASE_ASSERT(RunLoop::isMain());
		1343
		1344	// If we've lost our connection to the WebAuthn process (e.g. it crashed) try to re-establish it.
		1345	if (!m_webAuthnProcessConnection) {
		1346	auto connectionInfo = getWebAuthnProcessConnection(*parentProcessConnection());
		1347
		1348	// Retry once if the IPC to get the connectionIdentifier succeeded but the connectionIdentifier we received
		1349	// is invalid. This may indicate that the WebAuthn process has crashed.
		1350	if (!IPC::Connection::identifierIsValid(connectionInfo.identifier()))
		1351	connectionInfo = getWebAuthnProcessConnection(*parentProcessConnection());
		1352
		1353	if (!IPC::Connection::identifierIsValid(connectionInfo.identifier()))
		1354	CRASH();
		1355
		1356	m_webAuthnProcessConnection = WebAuthnProcessConnection::create(connectionInfo.releaseIdentifier());
		1357	}
		1358
		1359	return *m_webAuthnProcessConnection;
		1360	}
		1361
		1362	void WebProcess::webAuthnProcessConnectionClosed(WebAuthnProcessConnection* connection)
		1363	{
		1364	ASSERT(m_webAuthnProcessConnection);
		1365	ASSERT_UNUSED(connection, m_webAuthnProcessConnection == connection);
		1366
		1367	m_webAuthnProcessConnection = nullptr;
		1368	}
		1369
		1370	#endif // ENABLE(WEB_AUTHN)
		1371
1319	void WebProcess::setEnhancedAccessibility(bool flag)	1372	void WebProcess::setEnhancedAccessibility(bool flag)
1320	{	1373	{
1321	WebCore::AXObjectCache::setEnhancedUserInterfaceAccessibility(flag);	1374	WebCore::AXObjectCache::setEnhancedUserInterfaceAccessibility(flag);