[Webkit-unassigned] [Bug 250589] New: [WebAuthn] Conditional passkey request presents conditional control even after AbortController.abort()

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=250589

            Bug ID: 250589
           Summary: [WebAuthn] Conditional passkey request presents
                    conditional control even after AbortController.abort()
           Product: WebKit
           Version: Safari 16
          Hardware: Unspecified
                OS: Unspecified
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Forms
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: jhurshman at gmail.com
                CC: cdumez at apple.com, wenson_hsieh at apple.com

Steps to reproduce:
1. Set up an AbortController
2. <input autocomplete="username webauthn"> and a button whose click handler will call the abortController.abort(), hide the username, and show a password control.
3. Perform webauthn get with conditional mediation:
navigator.credentials.get({
  signal: abortController.signal,
  mediation: 'conditional',
  publicKey: {
    challenge: <challengeFromServer>,
  },
  allowCredentials: []
});
3. Click the input, conditional UI appears.
4. Click the abort control.
6. Set focus to the password field.
7. Conditional UI appears again. (If user attempts to use the passkey, console shows error "AbortError: Aborted by AbortSignal".)

Expected behavior:
In step 7, no conditional UI should be displayed, since the get has been aborted.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20230113/c2213877/attachment.htm>