Bug 214076

Summary:	[WebAuthn] The UV with built-in UserVerification method is not used first before clientPin
Product:	WebKit	Reporter:	nuno.sung <nuno.sung>
Component:	WebKit Misc.	Assignee:	Nobody <webkit-unassigned>
Status:	RESOLVED DUPLICATE
Severity:	Normal	CC:	bfulgham, jiewen_tan, webkit-bug-importer, webkit-unassigned
Priority:	P2	Keywords:	InRadar
Version:	Safari Technology Preview
Hardware:	Mac
OS:	macOS 10.15
Bug Depends on:
Bug Blocks:	181943

Description nuno.sung 2020-07-08 04:14:04 PDT

[Environment]
Test Device: MacBook Pro (2013)
OS: macOS 10.15.5
Safari Technology Preview Release 109

[Repro Steps]
0. Setup a security key with clientPin support and built-in UserVerification method like fingerprint sensor
1. Test https://webauthntest.azurewebsites.net/#
2. Create a credential with UV=Required
3. Run Get credential with default settings.
4. The pin prompt dialog will be showed up for pin

[Expected behavior]
The built-in UserVerification method should be tried first before using PIN if the secuirty key's getInfo's options have uv=true.

Comment 1 nuno.sung 2020-07-09 22:26:05 PDT

Safari@iPadOS 14 beta 2 also has thisissue.

Comment 2 Alexey Proskuryakov 2020-07-10 13:09:36 PDT

Since there is no Radar linked, temporarily removing the InRadar keyword to have this bug re-import.

Comment 3 Radar WebKit Bug Importer 2020-07-10 13:09:54 PDT

<rdar://problem/65359269>

Comment 4 Jiewen Tan 2020-07-28 01:07:46 PDT


*** This bug has been marked as a duplicate of bug 213903 ***