[Webkit-unassigned] [Bug 207951] [WebAuthn] Yubikey 5ci lightning does not work in iOS 13.4 beta

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=207951

--- Comment #7 from Jiewen Tan <jiewen_tan at apple.com> ---
(In reply to Jiewen Tan from comment #6)
> (In reply to sweeden from comment #5)
> > Ok so more details. I got *another* Yubikey 5ci brand new and it worked. I
> > think the defining difference is the yubikey that did not work had a PIN set
> > whereas the one that did work did NOT have a PIN set.
> > 
> > Not sure why that should make any difference when uv=discouraged is set in
> > options...
> 
> Alright then. Can you please try STP 101 which should have the fix for Bug
> 206547? I will close this bug as "configuration changed". Feel free to
> reopen it if you still see your issues on STP 101.

Actually, I'm wrong. You are talking about registrations. According to CTAP2 authenticatorMakeCredential Step 6:
"If pinAuth parameter is not present and clientPin been set on the authenticator, return CTAP2_ERR_PIN_REQUIRED error."

Link here:
https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#authenticatorMakeCredential

Yes, if your authenticator has a PIN, registrations won't work.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200220/3cc658e5/attachment-0001.htm>