Bug 248863

Summary: WebAuthn conditional UI in clamshell mode does not honour UV required on repeated assertions
Product: WebKit Reporter: eirbjo
Component: WebKit Misc.Assignee: Nobody <webkit-unassigned>
Status: NEW    
Severity: Normal CC: pascoe, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: Safari Technology Preview   
Hardware: Mac (Intel)   
OS: macOS 12   

eirbjo
Reported 2022-12-07 02:52:42 PST
Bug 244164 fixed an issue where conditional UI assertions did not set the UV flag. Using Safari Technology Preview Release 159 (Safari 16.4, WebKit 17615.1.12.130.1), it seems the problem still manifests under the following conditions: 1: The computer is in clamshell mode (such that the TouchID sensor is unavailable) 2: The conditional UI assertion is the second (or later) assertion in the browser session. This makes it impossible for users in clamshell mode to perform reauthentication, switch user into other user accounts, etc. Steps to verify: 1: Use a laptop Mac in clamshell mode 2: Perform a successful conditional UI assertion by providing the account passord as a fallback for TouchID. The assertion has the UV flag set 3: Log out of the application and initiate a second conditional UI assertion 4: Observe that an assertion is performed, without user interaction, and that the UV flag is not set Notice that the non-conditional UI flow seems to work as expected, also in clamshell mode.
Attachments
Radar WebKit Bug Importer
Comment 1 2022-12-14 02:53:17 PST
Note You need to log in before you can comment on or make changes to this bug.