[Webkit-unassigned] [Bug 213595] Is user activated event necessary for Touch ID/Face ID based WebAuthn?

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=213595

--- Comment #8 from Jiewen Tan <jiewen_tan at apple.com> ---
Hi Developers,

Removing the user gesture requirement unfortunately is not an option. The benefit of it is probably not obvious at the current stage. However as you could have imagined, the UI could evolve into a more streamlined version in the future that will certainly be beneficial by this hard requirement.

At the same time, we are considering improvement over the user gesture mechanism, like things in User Activation API that could let the user gesture bit being carried through the promise chain. However, such thing doesn't exist in WebKit yet. Implementing such improvement will take quite some time, and the improvement will probably not be shipped soon. Therefore, I suggest you could prefetch the nonce before the user action as a solution for now.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200702/c3bf640e/attachment.htm>