264097 2023-11-02 10:10:12 -0700 [WebAuthn] Navigator matches excludedCredentials for deleted passkeys in 30 day grace period 2024-05-28 14:41:52 -0700 1 1 1 Unclassified WebKit WebCore JavaScript Safari 17 Unspecified Unspecified REOPENED InRadar P2 Normal --- 1 stephen pascoe bfulgham pascoe webkit-bug-importer wilander oldest_to_newest 1989427 0 stephen 2023-11-02 10:10:12 -0700 If a passkey is deleted (and within the 30 day undelete grace period) by the user in the Safari password manager and the user attempts to re-enroll the platform navigator using webauthn, we get: InvalidStateError: At least one credential matches an entry of the excludeCredentials list in the platform attached authenticator. This seems pretty confusing because the user has deleted the passkey and it's not usable to authenticate anymore, so it shouldn't be matched against the excludedCredentials list. The user can workaround this by going into "Recently deleted" in the password manager and permanently deleting the offending credential. 1991202 1 webkit-bug-importer 2023-11-09 09:11:13 -0800 <rdar://problem/118182303> 2018860 2 pascoe 2024-03-05 12:56:00 -0800 Pull request: https://github.com/WebKit/WebKit/pull/25499 2018900 3 ews-feeder 2024-03-05 14:59:47 -0800 Committed 275711@main (c0e1cd6ea54e): <https://commits.webkit.org/275711@main> Reviewed commits have been landed. Closing PR #25499 and removing active labels. 2034457 4 ews-feeder 2024-05-09 18:21:31 -0700 Committed 272448.1008@safari-7618-branch (b5489fabf4aa): <https://commits.webkit.org/272448.1008@safari-7618-branch> Reviewed commits have been landed. Closing PR #1276 and removing active labels. 2034595 5 ews-feeder 2024-05-10 12:55:04 -0700 Committed 272448.1011@safari-7618-branch (d868e430dea8): <https://commits.webkit.org/272448.1011@safari-7618-branch> Reviewed commits have been landed. Closing PR #1279 and removing active labels. 2038287 6 jenner 2024-05-28 14:41:52 -0700 Reopened Bugzilla. [WebAuthn] Navigator matches excludedCredentials for deleted passkeys in 30 day grace period, tracking revert in https://bugs.webkit.org/show_bug.cgi?id=264097.