[Webkit-unassigned] [Bug 213642] [WebAuthn] Client PIN flow does not indicate that a final authenticator touch is needed

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=213642

--- Comment #2 from Jiewen Tan <jiewen_tan at apple.com> ---
(In reply to eirbjo from comment #0)
> Congratulations with the new Client PIN support in Safari!
> 
> When testing this with Safari Technology Preview 109, I noticed that the
> client PIN flow ends without any indication to the user that a final
> authenticator touch is needed to complete the operation.
> 
> Observation:
> 
> 1: The user initiates authentication
> 2: The "Do you want to sign in .. using a security key" dialog appears,
> telling the user to insert a key and to activate it
> 3: The user touches the security key to select it
> 4: The "Enter a PIN to unlock this authenticator" dialog appears
> 5: The user enters a valid PIN, clicks "Submit"
> 6: The PIN entry dialog disappears and the security key starts blinking, but
> the client UX has no indication that the user must touch the authenticator
> again to complete the operation
> 
> This could be improved by adding some form of dialog after step 5 to
> indicate that the operation is not done before the user touches/activates
> the authenticator.

This problem has been resolved already. Please try out our next STP for verification.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200626/1da57f8b/attachment.htm>