Bug 250912 - "WKWebViews should correctly indicate whether passkeys are available"
Summary: "WKWebViews should correctly indicate whether passkeys are available"
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: New Bugs (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Jason Lee
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2023-01-20 12:53 PST by Jason Lee
Modified: 2023-01-23 17:06 PST (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Jason Lee 2023-01-20 12:53:55 PST 
"In WKWebView, we only allow passkeys to be used if it’s in an entitled web browser or has matching associated domain. However, isUserVerifyingPlatformAuthenticatorAvailable() and isConditionalMediationAvailable() will both return true in all WKWebViews regardless of this, which is incorrect. We should make these two calls respect whether passkeys are actually available."
Comment 1 Jason Lee 2023-01-20 12:54:06 PST 
<rdar://problem/104194528>
Comment 2 Jason Lee 2023-01-20 13:01:08 PST 
Pull request: https://github.com/WebKit/WebKit/pull/8891
Comment 3 EWS 2023-01-23 17:06:46 PST 
Committed 259253@main (0cf1f113fe36): <https://commits.webkit.org/259253@main>

Reviewed commits have been landed. Closing PR #8891 and removing active labels.