commit a4ac527a4777da75ba6c44ed4a7e1837ed92693d
author Martin Kreichgauer <martinkr@google.com> Fri Aug 10 22:46:01 2018
committer Commit Bot <commit-bot@chromium.org> Fri Aug 10 22:46:01 2018
tree c2f77b4e3e7de2643bbc4272d9aeb6846b1e652d
parent 31634c4f1eae7d2fbac13a7542a0c939417d62f4

fido/mac: look up credential IDs before proceeding with GetAssertion requests

This changes the GetAssertion operation for the Touch ID authenticator
to locate credential IDs in the keychain at the beginning of the
request. If no matching credential exists, the user is not prompted for
a fingerprint. A method to locate a credential by ID is extracted from
the existing code and moved into the Keychain class.

This is done in anticipation of adding the WebAuthn UI. With the new UI,
GetAssertion requests will only be sent to the Touch ID authenticator,
if we know a matching credential ID to exist in the keychain.

Bug: 871370

Change-Id: Ie5e4916df2a68bc0e9d7552322d6b993069ce95b
Reviewed-on: https://chromium-review.googlesource.com/1163927
Commit-Queue: Martin Kreichgauer <martinkr@google.com>
Reviewed-by: Balazs Engedy <engedy@chromium.org>
Cr-Commit-Position: refs/heads/master@{#582369}