Bug 241126 - Error after calling navigator.credentials.get() twice
Summary: Error after calling navigator.credentials.get() twice
Status: NEW
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebKit Misc. (show other bugs)
Version: Safari 15
Hardware: iPhone / iPad iOS 15
: P2 Major
Assignee: pascoe@apple.com
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2022-05-31 05:46 PDT by Simon Bluhm
Modified: 2022-06-01 15:40 PDT (History)
6 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Simon Bluhm 2022-05-31 05:46:50 PDT 
I recently noticed that users of my web app are no longer able to signin using WebAuthn TouchID / fingerprint on iOS 15.5. The problem seems to be calling navigator.credentials.get() more than once. The first attempt is successful but calling navigator.credentials.get() a second time will result in the following error:

"This request has been cancelled by the user".

The only way to get around this is for the user to reload the website. This is problematic for Single Page Apps, especially if standalone, as the browser UI and refresh button are hidden.

The bug is also reproducible here: https://try-webauthn.appspot.com/
Comment 1 Radar WebKit Bug Importer 2022-05-31 14:39:58 PDT 
<rdar://problem/94178936>
Comment 2 pascoe@apple.com 2022-05-31 14:47:17 PDT 
It looks like we aren't registering the user gestures as being associated with navigator.credentials calls with this sample site. Looking into why this happens.