[Webkit-unassigned] [Bug 216180] New: [Webauthn] YubiKey 5 NFC gesture not recognized when userVerification is 'required'

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=216180

            Bug ID: 216180
           Summary: [Webauthn] YubiKey 5 NFC gesture not recognized when
                    userVerification is 'required'
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: iPhone / iPad
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit Misc.
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: duwoka at icloud.com

During iOS 14 Beta 7 (18A5357e) testing with YubiKey 5 NFC I found Client PIN is only asked in certain conditions.

I was using https://webauthn.io for testing:

Attestation type: Direct
Authenticator Type: Cross platform
User Verification: Required
Register with Resident Key: Required

When I try to register, NFC gesture is ignored and key prompt is only cancellable, no matter if Client PIN is pre-installed on token or not.

If I change User Verification to 'Preferred', NFC gesture is recognized and PIN is asked both during registration and authentication only if Client PIN was pre-installed on token, otherwise is never asked.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20200904/9c05adb0/attachment.htm>