[Webkit-unassigned] [Bug 220559] WebAuthn / navigator.credentials.create() does not work in WKWebView-based browsers like Chrome, Firefox

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=220559

--- Comment #4 from Urs Wolfer <uwolfer at kde.org> ---
(In reply to Jiewen Tan from comment #3)
> We currently aren't considering opening this API for all WKWebViews. If you
> are going to use a web view to do WebAuthn, I would suggest you to use
> either ASWebAuthenticationSession or SFSafariViewController.


Are you not considering opening this API because of security concerns? If yes, would it be an idea to only enable the API for "app bound domains" (AFAIK you already enable other security relevant APIs when "app bound domains" is configured).

Using either ASWebAuthenticationSession or SFSafariViewController is probably possible, but from a UX point of view not the nicest solution in all cases.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20210114/94b3f3cc/attachment.htm>