<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>236698</bug_id>
          
          <creation_ts>2022-02-16 02:05:15 -0800</creation_ts>
          <short_desc>[WebAuthN] Registration fails The operation can’t be completed.</short_desc>
          <delta_ts>2022-03-22 14:12:31 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>WebKit Misc.</component>
          <version>Safari 15</version>
          <rep_platform>Mac (Apple Silicon)</rep_platform>
          <op_sys>macOS 12</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>DUPLICATE</resolution>
          <dup_id>237223</dup_id>
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter>zooms_vote_0t</reporter>
          <assigned_to name="Nobody">webkit-unassigned</assigned_to>
          <cc>bfulgham</cc>
    
    <cc>pascoe</cc>
    
    <cc>webkit-bug-importer</cc>
    
    <cc>zooms_vote_0t</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1842189</commentid>
    <comment_count>0</comment_count>
    <who name="">zooms_vote_0t</who>
    <bug_when>2022-02-16 02:05:15 -0800</bug_when>
    <thetext>As a registered user in http://admin.gandi.net , when registering a new security key for the account using TouchID WebAuthn in account security settings, the registration fails with error.

Reproduction:

 1. In account security settings, &quot;Manage your security key authentication&quot;

 2. In Register your security key: enter New token name: (I used &quot;jessi TouchID&quot;, should not matter)

 3. Do you want to allow “gandi.net” to use Touch ID? Or you can use a security key. : Ok.

 4. Safari: &quot;Safari&quot; would like to use Touch ID for &quot;gandi.net&quot;. Touch ID to allow this.

Actual behavior:

 5. Error dialog: &quot;The operation can’t be completed.

Expected behavior:

 5. Successful registration.


The gandi.net WebAuthn registration works however on iOS (15.3.1) using FaceID.

I did some investigation using Inspector and obtained the parameters for publicKey

Object = $4
  O publickey: Object
    S attestation: &quot;direct&quot;
    &gt;O challenge: Uint8Array [ ... ] (32)
    &gt;O excludeCredentials: [Object, Object, Object] (3)
    &gt;O extensions: {appidExclude: &quot;https://account.gandi.net/api/u2f/trusted_facets.ison&quot;]
    &gt;O pubKeyCredparams: [ ... ]
    &gt;O rp: {id: &quot;gandi.net&quot;, name: &quot;Gandi.net&quot;}

https://twitter.com/joneskoo_yx/status/1492921076841603074?s=20


I can reproduce the error message if I go to https://webauthn.io and register selecting attestation: direct.

I believe the cause for the failure on Mac (but not iOS) may be that gandi sets in registration options: attestation: direct.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1842717</commentid>
    <comment_count>1</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2022-02-16 22:33:05 -0800</bug_when>
    <thetext>&lt;rdar://problem/89069228&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1853894</commentid>
    <comment_count>2</comment_count>
    <who name="Brent Fulgham">bfulgham</who>
    <bug_when>2022-03-22 14:12:31 -0700</bug_when>
    <thetext>

*** This bug has been marked as a duplicate of bug 237223 ***</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>