Geolocation api breaks web authentication with Touch ID/Face ID

[Levon Karapetyan]

When a geolocation API is used between user click and WebAuthn call, then Safari on iOS 14 restricts Touch ID/Face ID usage.

Here is a code example:
document.getElementById("mybutton").onclick = function() {
    navigator.geolocation.getCurrentPosition(register, register);
}

function register() {
    var options = {...};
    navigator.credentials.create({
        publicKey: options
    })
    .then(console.log)
    .catch(console.error);
}

[Radar WebKit Bug Importer]

<rdar://problem/71258803>