[Webkit-unassigned] [Bug 214076] New: [WebAuthn] The UV with built-in UserVerification method is not used first before clientPin

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=214076

            Bug ID: 214076
           Summary: [WebAuthn] The UV with built-in UserVerification
                    method is not used first before clientPin
           Product: WebKit
           Version: Safari Technology Preview
          Hardware: Macintosh
                OS: macOS 10.15
            Status: NEW
          Keywords: InRadar
          Severity: Normal
          Priority: P2
         Component: WebKit Misc.
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: nuno.sung at authentrend.com
                CC: bfulgham at webkit.org, jiewen_tan at apple.com,
                    webkit-bug-importer at group.apple.com,
                    webkit-unassigned at lists.webkit.org

[Environment]
Test Device: MacBook Pro (2013)
OS: macOS 10.15.5
Safari Technology Preview Release 109

[Repro Steps]
0. Setup a security key with clientPin support and built-in UserVerification method like fingerprint sensor
1. Test https://webauthntest.azurewebsites.net/#
2. Create a credential with UV=Required
3. Run Get credential with default settings.
4. The pin prompt dialog will be showed up for pin

[Expected behavior]
The built-in UserVerification method should be tried first before using PIN if the secuirty key's getInfo's options have uv=true.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200708/9c58e59f/attachment.htm>