In the current spec, userPresence is suggested to set to the inverse of userVerification, which doesn't comply with the CTAP spec. Details in: https://github.com/w3c/webauthn/issues/1123.
<rdar://problem/46538788>
Created attachment 357908 [details] Patch
Created attachment 357909 [details] Patch
My suggestion is seconded by Yubico and Microsoft directly on GitHub, and Google via email.
Comment on attachment 357909 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=357909&action=review r=me > Source/WebCore/ChangeLog:11 > + The change is made to follow my suggestion in the issue as no one has objected it. "After discussing with other members of the working group, we decided to make userPresence always default to true."
Comment on attachment 357909 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=357909&action=review Thanks Brent for r+ this patch. >> Source/WebCore/ChangeLog:11 >> + The change is made to follow my suggestion in the issue as no one has objected it. > > "After discussing with other members of the working group, we decided to make userPresence always default to true." Fixed.
Created attachment 357983 [details] Patch for landing
Comment on attachment 357983 [details] Patch for landing Clearing flags on attachment: 357983 Committed r239523: <https://trac.webkit.org/changeset/239523>