Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Inconsistent behaviour between passkey creation and login #429

Open
ghost opened this issue Oct 1, 2023 · 1 comment
Open

Inconsistent behaviour between passkey creation and login #429

ghost opened this issue Oct 1, 2023 · 1 comment

Comments

@ghost
Copy link

ghost commented Oct 1, 2023

I try to implement passkeys. During the passkey creation phase, I use the following parameters:

Attestation type: direct
Authenticator: not specified
User verification: discouraged
Resident key: required

The result is: (on Chrome for Windows)
image
I choose Use a phone or tablet and create the passkey on my phone using a QR Code.

Later, during the login phase, I ask for the user's username and fill in the property AssertionOptions.AllowCredentials (I don't want to be usernameless).
The result is:
image
I have to cancel this pop-in to be able to access to the same register interface with Use a phone or tablet.

Is there any way to directly access to the initial interface while passing some allowCredentials?

@senseicz
Copy link

senseicz commented Oct 2, 2023

Per this thread on SO https://stackoverflow.com/questions/75063504/webauthn-on-chrome-on-windows-skip-windows-dialog-in-favor-of-chrome-dialog it may seem like this is default behavior on Chrome/Windows. On login flow I'm getting this dialog every time even though I do have BT enabled.

I'd very much love to hear from others what their experience is, especially on other systems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant