Bug 214076
| Summary: | [WebAuthn] The UV with built-in UserVerification method is not used first before clientPin | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | nuno.sung <nuno.sung> |
| Component: | WebKit Misc. | Assignee: | Nobody <webkit-unassigned> |
| Status: | RESOLVED DUPLICATE | ||
| Severity: | Normal | CC: | bfulgham, jiewen_tan, webkit-bug-importer, webkit-unassigned |
| Priority: | P2 | Keywords: | InRadar |
| Version: | Safari Technology Preview | ||
| Hardware: | Mac | ||
| OS: | macOS 10.15 | ||
| Bug Depends on: | |||
| Bug Blocks: | 181943 | ||
nuno.sung
[Environment]
Test Device: MacBook Pro (2013)
OS: macOS 10.15.5
Safari Technology Preview Release 109
[Repro Steps]
0. Setup a security key with clientPin support and built-in UserVerification method like fingerprint sensor
1. Test https://webauthntest.azurewebsites.net/#
2. Create a credential with UV=Required
3. Run Get credential with default settings.
4. The pin prompt dialog will be showed up for pin
[Expected behavior]
The built-in UserVerification method should be tried first before using PIN if the secuirty key's getInfo's options have uv=true.
| Attachments | ||
|---|---|---|
| Add attachment proposed patch, testcase, etc. |
nuno.sung
Safari@iPadOS 14 beta 2 also has thisissue.
Alexey Proskuryakov
Since there is no Radar linked, temporarily removing the InRadar keyword to have this bug re-import.
Radar WebKit Bug Importer
<rdar://problem/65359269>
Jiewen Tan
*** This bug has been marked as a duplicate of bug 213903 ***