Bug 206967

Summary: [WebAuthn] Turn on local authenticator by default
Product: WebKit Reporter: Jiewen Tan <jiewen_tan>
Component: WebKit Misc.Assignee: Nobody <webkit-unassigned>
Status: RESOLVED CONFIGURATION CHANGED    
Severity: Normal CC: agektmr, eirbjo, jiewen_tan, kieun.shin, ryan, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
Bug Depends on:    
Bug Blocks: 181943    

Description Jiewen Tan 2020-01-29 14:20:36 PST
Local authenticator is currently only available as an internal experimental feature. We should consider turn it on by default when it is ready for the public.
Comment 1 Radar WebKit Bug Importer 2020-01-29 14:21:59 PST
<rdar://problem/59006587>
Comment 2 ryan 2020-04-06 22:14:40 PDT
support already exists for roaming authenticators; is there anything we can do to help get support for local (platform) authenticators? 

This is significant as it frees users from dongles :)
Comment 3 eirbjo 2020-05-26 03:10:06 PDT
LocalAuthenticator seems to be broken on Safari Technology Preview 106 (and may be been a few versions back).

I have enabled "Web Authentication Local Authenticator" in Develop / Experimental Featurs. Fingers are enrolled on the account. Chrome Touch ID authenticator works fine.

IUVPA returns false on webauthndemo.appspot.com.

Unfortunately I only have one Mac with Touch ID, so cannot confirm whether this is only a local problem.

Would be nice if someone can confirm whether LocalAuthenticator works for them in Safari TP 106. 

Thanks,
Eirik.
Comment 4 eirbjo 2020-05-26 04:13:58 PDT
(In reply to eirbjo from comment #3)
> LocalAuthenticator seems to be broken on Safari Technology Preview 106 (and
> may be been a few versions back).

I reinstalled some earlier TPs and can confirm that LocalAuthenticator works in Safari Technology Preview 102 (where LA was introduced), but not in 103 and later versions.

Is this simply a regression or did 103 introduce some new constraint that my setup does not meet?

Cheers,
Eirik.
Comment 5 Jiewen Tan 2020-05-26 11:05:21 PDT
(In reply to eirbjo from comment #4)
> (In reply to eirbjo from comment #3)
> > LocalAuthenticator seems to be broken on Safari Technology Preview 106 (and
> > may be been a few versions back).
> 
> I reinstalled some earlier TPs and can confirm that LocalAuthenticator works
> in Safari Technology Preview 102 (where LA was introduced), but not in 103
> and later versions.
> 
> Is this simply a regression or did 103 introduce some new constraint that my
> setup does not meet?
> 
> Cheers,
> Eirik.

As explained in the description, the option is there for internal testing. If it somehow works for you, then it works. Otherwise, it doesn't.
Comment 6 Jiewen Tan 2020-06-25 11:51:44 PDT
It's turned on by default in iOS, iPadOS 14 and macOS Big Sur.