Bug 226171 - [WebAuthn] User verification flag not honored during registration
Summary: [WebAuthn] User verification flag not honored during registration
Status: NEW
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebCore Misc. (show other bugs)
Version: Safari 14
Hardware: Mac (Intel) macOS 11
: P2 Normal
Assignee: Nobody
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2021-05-24 02:31 PDT by pvanstaden
Modified: 2023-06-08 14:16 PDT (History)
4 users (show)

See Also:

Attachments
Expected dialog. (12.94 KB, image/png)
2021-05-24 02:31 PDT, pvanstaden 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description pvanstaden 2021-05-24 02:31:42 PDT 
Created attachment 429515 [details]
Expected dialog.

When using the `navigator.credentials.create` call and passing in `authenticatorSelection.userVerification` as `required` there is divergent behavior.

Start with a token that have already been registered, it works fine.

If you have a token that have not yet been initialized, the browser is supposed to show a set pin screen. As shown here in attachment called `Expected dialog`

Safari seems to return the userVerification flag as false when an uninitialized token is used.
Comment 1 Radar WebKit Bug Importer 2021-05-31 02:32:16 PDT 
<rdar://problem/78681731>