[Webkit-unassigned] [Bug 240666] New: WebAuthn API Promises Do Not Resolve in WKWebView

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=240666

            Bug ID: 240666
           Summary: WebAuthn API Promises Do Not Resolve in WKWebView
           Product: WebKit
           Version: Safari 15
          Hardware: iPhone / iPad
                OS: iOS 15
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: WebKit2
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: kevin.flanagan at passage.id
                CC: kkinnunen at apple.com

Overview

To my understanding WebAuthn is not supported by WKWebView. However, when accessing APIs related to WebAuthn in an iOS WKWebView promises returned by those functions never resolve. Specifically this behavior can be seen at least with `window.PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable()` and `navigator.credentials.create()`.

Steps to Reproduce:
1. Open an app with a WBWebView on an iOS device (this does not reproduce with iOS simulator to my knowledge)
2. Load a site that uses one of these functions, or invoke from the console of the web inspector (isUserVerifyingPlatformAuthenticatorAvailable() is the easier function to use)
    - https://demo.yubico.com/webauthn-technical/registration shows this behavior
3. Observe that a promise is returned by the promise is never resolved or rejected

Actual Results:
A promise is returned that is never resolved or rejected

Expected Results:
I would expect that these promises either return with false (in the isUserVerifyingPlatformAuthenticatorAvailable case) or are rejected for not being supported in WKWebView.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220519/beaa57a9/attachment.htm>