280630 2024-09-30 12:02:35 -0700 [iOS] navigator.credentials.get fails on newly-opened tab in non-Safari browsers 2025-01-13 14:02:26 -0800 1 1 1 Unclassified WebKit WebCore Misc. WebKit Nightly Build Unspecified Unspecified RESOLVED WONTFIX https://bugs.webkit.org/show_bug.cgi?id=226025 https://webauthn-new-tab-demo.glitch.me/ InRadar P2 Normal --- 226025 1 ajuma pascoe m_finkel nitinmahendru pascoe webkit-bug-importer wenson_hsieh wilander oldest_to_newest 2064305 0 ajuma 2024-09-30 12:02:35 -0700 Steps to reproduce: 1) Open a new tab using window.open() 2) Call navigator.credentials.get() to trigger WebAuthn-based authentication in the new tab Expected result: WebAuthn-based authentication flow is triggered Actual result: On non-Safari browsers on iOS, the call to navigator.credentials.get fails. On Safari, the call succeeds and authentication UI is triggered. Here's a test page that demonstrates the bug: https://webauthn-new-tab-demo.glitch.me/ The underlying problem is bug 226025. In non-Safari browsers, document.hasFocus() is false until the user interacts with the page, but in Safari it's true from the beginning. But having focus is a prerequisite for navigator.credentials.get(). 2064890 1 webkit-bug-importer 2024-10-02 10:18:03 -0700 <rdar://problem/137133084> 2065277 2 wilander 2024-10-03 15:10:27 -0700 Thanks for your report! I'll route this bug. 2065873 3 ajuma 2024-10-07 09:24:16 -0700 We've found in Chrome that we can make this work by calling `becomeFirstResponder` on the newly-created WKWebView. It might still be good for WebKit to handle this better somehow, since this will still be broken in other browsers (like Firefox on iOS), but please feel free to close this out if there's nothing more that WebKit can reasonably do. 2086874 4 pascoe 2025-01-13 14:01:49 -0800 For document.hasFocus() to work correctly, the WKWebView needs to be the firstResponder. This must be done by the application using the WKWebView, we understand this is a common bug and we are trying to improve documentation around this. This is similar to https://bugs.webkit.org/show_bug.cgi?id=269292.