WebKit Bugzilla
New
Browse
Log In
×
Sign in with GitHub
or
Remember my login
Create Account
·
Forgot Password
Forgotten password account recovery
RESOLVED CONFIGURATION CHANGED
214075
[WebAuthn] The webpage UI is blocked if entering 3 times of wrong clientPin
https://bugs.webkit.org/show_bug.cgi?id=214075
Summary
[WebAuthn] The webpage UI is blocked if entering 3 times of wrong clientPin
nuno.sung
Reported
2020-07-08 04:05:44 PDT
[Environment] Test Device: MacBook Pro (2013) OS: macOS 10.15.5 Safari Technology Preview Release 109 [Repro Steps] 0. Setup a security key with clientPin support 1. Test
https://webauthntest.azurewebsites.net/
# 2. Create a credential with UV=Required 3. Run Get credential with default settings. 4. Enter 3 times of wrong PIN 5. The page's UI is still in blocked mode and can just do F5 refresh the page.
Attachments
Add attachment
proposed patch, testcase, etc.
nuno.sung
Comment 1
2020-07-09 22:26:30 PDT
Safari@iPadOS 14 beta 2 has no this issue.
Alexey Proskuryakov
Comment 2
2020-07-10 13:09:29 PDT
Since there is no Radar linked, temporarily removing the InRadar keyword to have this bug re-import.
Radar WebKit Bug Importer
Comment 3
2020-07-10 13:09:40 PDT
Comment hidden (obsolete)
<
rdar://problem/65359256
>
Jiewen Tan
Comment 4
2020-07-28 01:06:16 PDT
Cannot reproduce on STP 110. You should see a dialog with the following text: "Your security key is temporarily locked. Please remove it and try again."
nuno.sung
Comment 5
2020-07-28 03:09:41 PDT
Sorry for my previous unclean information, the the problem I see on STP 110 is when using "Enter" key to end this kind of error dialogs, the webpage UI won't be returned correctly.
Jiewen Tan
Comment 6
2020-07-28 22:19:38 PDT
<
rdar://problem/64545047
>
Note
You need to
log in
before you can comment on or make changes to this bug.
Top of Page
Format For Printing
XML
Clone This Bug