[Webkit-unassigned] [Bug 254140] New: After invoking WebAuthn Autofill on a page, that prompt appears on the next page too.

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=254140

            Bug ID: 254140
           Summary: After invoking WebAuthn Autofill on a page, that
                    prompt appears on the next page too.
           Product: WebKit
           Version: Safari 16
          Hardware: Unspecified
                OS: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Forms
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: nov at matake.jp
                CC: cdumez at apple.com, wenson_hsieh at apple.com

Our service start supporting WebAuthn fully relying on WebAuthn Autofill (a.k.a WebAuthn Conditional UI, Passkey Autofill etc.)

In this site, we have 2-step interaction for email login (one for input email, one for input password), and invoking WebAuthn Autofill on the first email input page only.
However, if user manually type email and go to password input page, Safari suggests Passkey on the password input field too.

Since we're not invoking WebAuthn Autofill on the password input field, even user choose a suggested passkey, nothing happens.

This behaviour happens on all iOS, iPadOS, macOS.
To reproduce this behaviour,

1. Sign-up with email at https://id.moneyforward.com
2. Register a WebAuthn Credential at https://id.moneyforward.com/webauthn/credentials
3. Logout & go to email sign-in page https://id.moneyforward.com/sign_in/email
4. Input the registered email manually (Don't pick up password-manager suggested passkeys/passwords)
5. Focus on password field at https://id.moneyforward.com/sign_in/password

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20230320/06492eeb/attachment.htm>