Bug 238450

Summary:	webauthn on m1 does not work when attestation is set
Product:	WebKit	Reporter:	Gabriel N <wbkt>
Component:	New Bugs	Assignee:	Nobody <webkit-unassigned>
Status:	RESOLVED FIXED
Severity:	Normal	CC:	bfulgham, pascoe, webkit-bug-importer, writetomansa
Priority:	P2	Keywords:	InRadar
Version:	Safari Technology Preview
Hardware:	Mac (Apple Silicon)
OS:	macOS 12

Description Gabriel N 2022-03-28 05:43:08 PDT

Overview:

Trying to use TouchID for WebAuthN does not work. I have narrowed it down to the "attestation" parameter being set. If it is not set, it works.

Steps to Reproduce: 

1) Go to https://webauthn.io 
2) Enter anything on example_username
3) Change the dropdown for attestation to either direct or indirect. 
4) Click register. Click Continue in the prompt "Do you want to save a passkey for X"
5) Touch the fingerprint sensor when asked

Actual Result: Error stating "The operation cannot be completed."

Expected: Successfully registering.
 
In Safari 15.4 it will also fail similarly, but it will fail in a worse way where the whole browser window is unusable and must be force killed.

If I skip step 3 and leave attestation at "none". Things will work as expected.

Comment 1 Radar WebKit Bug Importer 2022-03-28 06:41:05 PDT

<rdar://problem/90919406>

Comment 2 Brent Fulgham 2022-03-28 10:45:24 PDT

Thank you for the report. The cause of this issue is outside of the WebKit project, so I'm marking this as RESOLVED - MOVED, as the radar is being handled elsewhere. 

We hope to have some news to share about this bug soon, and will update this Bugzilla once a build is available to confirm the fix.

Comment 3 Brent Fulgham 2022-03-28 10:46:23 PDT

This is actually:
<rdar://90469258>

Comment 4 Brent Fulgham 2022-03-31 10:23:32 PDT

The fix for this issue is available in today's macOS Monterey‌‌‌ 12.3‌‌.1 update.

Comment 5 Smoley 2022-04-18 11:15:33 PDT

*** Bug 238712 has been marked as a duplicate of this bug. ***