Bug 218743

Summary: Geolocation api breaks web authentication with Touch ID/Face ID
Product: WebKit Reporter: Levon Karapetyan <levonkarapetyan>
Component: WebKit Misc.Assignee: Nobody <webkit-unassigned>
Status: NEW ---    
Severity: Normal CC: cdumez, jiewen_tan, smoley, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: Safari 14   
Hardware: iPhone / iPad   
OS: Unspecified   
See Also: https://bugs.webkit.org/show_bug.cgi?id=181943

Description Levon Karapetyan 2020-11-10 03:18:54 PST
When a geolocation API is used between user click and WebAuthn call, then Safari on iOS 14 restricts Touch ID/Face ID usage.

Here is a code example:
document.getElementById("mybutton").onclick = function() {
    navigator.geolocation.getCurrentPosition(register, register);
}

function register() {
    var options = {...};
    navigator.credentials.create({
        publicKey: options
    })
    .then(console.log)
    .catch(console.error);
}
Comment 1 Radar WebKit Bug Importer 2020-11-10 15:51:15 PST
<rdar://problem/71258803>