| Summary: | [WebAuthn] Conditional passkey request presents conditional control even after AbortController.abort() | ||
|---|---|---|---|
| Product: | WebKit | Reporter: | Jonathan Hurshman <jhurshman> |
| Component: | Forms | Assignee: | pascoe <pascoe> |
| Status: | RESOLVED FIXED | ||
| Severity: | Normal | CC: | cdumez, mathieu.perreault, matthew, pascoe, webkit-bug-importer, wenson_hsieh |
| Priority: | P2 | Keywords: | InRadar |
| Version: | Safari 16 | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
Pull request: https://github.com/WebKit/WebKit/pull/9449 Committed 259754@main (ba76ae810b9d): <https://commits.webkit.org/259754@main> Reviewed commits have been landed. Closing PR #9449 and removing active labels. *** Bug 251817 has been marked as a duplicate of this bug. *** Very happy to see this issue being fixed! Could someone advise on which Safari/iOS version we could see this commit in (Beta, etc.)? Release notes for Safari Technology Preview 164 mention that the fix for this issue is included in the release! 🎉 https://developer.apple.com/safari/technology-preview/release-notes/ |
Steps to reproduce: 1. Set up an AbortController 2. <input autocomplete="username webauthn"> and a button whose click handler will call the abortController.abort(), hide the username, and show a password control. 3. Perform webauthn get with conditional mediation: navigator.credentials.get({ signal: abortController.signal, mediation: 'conditional', publicKey: { challenge: <challengeFromServer>, }, allowCredentials: [] }); 3. Click the input, conditional UI appears. 4. Click the abort control. 6. Set focus to the password field. 7. Conditional UI appears again. (If user attempts to use the passkey, console shows error "AbortError: Aborted by AbortSignal".) Expected behavior: In step 7, no conditional UI should be displayed, since the get has been aborted.