aws-samples / amazon-cognito-passwordless-auth

Passwordless authentication with Amazon Cognito: FIDO2 (WebAuthn, support for Passkeys), Magic Link, SMS OTP Step Up
Apache License 2.0
386 stars 70 forks source link

"Failed to activate face or touch unlock" occurs on Mac with RoboForm Password Manager #206

Open k-kazuya0926 opened 1 month ago

k-kazuya0926 commented 1 month ago

Hello, I tried Implement Passwordless authentication with Amazon Cognito and WebAuthn. Then I got "Failed to activate face or touch unlock" errors on my Mac(M3 Pro). I got them both on Chrome and Safari. But I didn't get them on my iPhone 12. I'd like you to help me.

amazon-cognito-passwordless-auth

0.14.2

M3 Mac Pro

Sonoma 14.7

Chrome

Version 129.0.6668.90 (Official Build) (arm64)

Screenshot 2024-10-05 at 14 10 51 Screenshot 2024-10-05 at 14 11 09 Screenshot 2024-10-05 at 14 11 18

Safari

Version 18.0 (19619.1.26.111.10, 19619) Screenshot 2024-10-05 at 14 15 52

iPhone 12

iOS 17.6.1

Safari

ottokruse commented 1 month ago

Do you have a browser plug in that intercepts passwords? That's a reason I have seen for weird behaviors like that.

Probably triggered by this: https://github.com/aws-samples/amazon-cognito-passwordless-auth/blob/21f72ff6c71a09928fbd43d9af3c68d952881844/client/fido2.ts#L87-L90

We could exchange the instanceof checks for structural checking.

k-kazuya0926 commented 1 month ago

@ottokruse Thank you very much! I'm using RoboForm Password Manager plugin. I disabled it and tried again, then I succeeded to register an authenticator!

We could exchange the instanceof checks for structural checking.

I recognized that if you would do it, I will be able to register an authenticator using RoboForm Password Manager plugin. If yes, I'm glad if you would do it!

ottokruse commented 1 month ago

Pretty annoying that password managers inject themselves in such non-transparent ways. Seen this with 1password before as well.

k-kazuya0926 commented 1 month ago

@ottokruse I understand. Just to be sure, is it possible that you fix this problem?

ottokruse commented 1 month ago

Possible yes but if you want to expedite it feel free to send a PR