fixed validator for extensions

Author: HSMDBC

lib/validator.js

@@ -613,6 +613,20 @@ async function validatePublicKey() {
 	return true;
 }
 
+function validateExtensions() {
+	const extensions = this.authnrData.get("webAuthnExtensions");
+
+	if (extensions === undefined ||
+		Array.isArray(extensions) &&
+		extensions.every(item => typeof item === "object")
+	) {
+		this.audit.journal.add("webAuthnExtensions");
+		return true;
+	}
+
+	throw new Error("unable to validate webAuthnExtensions");
+}
+
 async function validateUserHandle() {
 	let userHandle = this.authnrData.get("userHandle");
 
@@ -706,6 +720,7 @@ function attach(o) {
 		validateAaguid,
 		validateCredId,
 		validatePublicKey,
+		validateExtensions,
 		validateFlags,
 		validateUserHandle,
 		validateCounter,