bitwarden / android

Bitwarden mobile app for Android.
https://bitwarden.com
GNU General Public License v3.0
6.58k stars 823 forks source link

Passkey Authentication Failure on Session timeout set to 'Immediately' #3953

Open NoCoder9 opened 2 months ago

NoCoder9 commented 2 months ago

Bitwarden Beta

Steps To Reproduce

  1. Bitwarden and Chrome(or Samsung Internet) properly configured; Session timeout=Immediately. Unlock with biometrics ON.
  2. Passkeys created successfully for webauthn.io or any passkey supporting platform.
  3. Sign out
  4. Try to log in with passkey from Bitwarden.
  5. After successful vault unlock. Passkey selection menu is seen.
  6. Select the passkey. Asked for biometrics. Provide it.
  7. Passkey output denied by Bitwarden. Fails with message- An error has occurred. Passkey operation failed because user could not be verified.

Expected Result

Successful login with passkey. Seen when Session timeout≠Immediately

Actual Result

Passkey output denied by Bitwarden. Fails with message- An error has occurred. Passkey operation failed because user could not be verified.

Screenshots or Videos

yeuoftwms0sdkuks

Additional Context

No response

Build Version

2024.8.1 (GPS)

Environment Details

Samsung A23 5G

Issue Tracking Info

bitwarden-bot commented 2 months ago

Thank you for your report! We've added this to our internal board for review. ID: PM-12511

sammbw commented 2 months ago

Hi there,

Thank you for your report!

I was able to reproduce this issue, and I have flagged this to our engineering team.

If you wish to add any further information/screenshots/recordings etc., please feel free to do so at any time - our engineering team will be happy to review these.

Thanks once again!

singhh9596 commented 1 month ago

Screenshot_20241004-094926_Mull

Mine is endlessly loading and on other device getting 'device registration failed' on mull browser.

maxmini1 commented 3 weeks ago

@NoCoder9 Hi there its sounds like fixed for me try it! new release https://github.com/bitwarden/android/releases/tag/v2024.11.3

https://github.com/user-attachments/assets/c38faab8-85b8-44a5-a301-01987d4a2597

singhh9596 commented 3 weeks ago

@NoCoder9 Hi there its sounds like fixed for me try it! new release https://github.com/bitwarden/android/releases/tag/v2024.11.3 ScreenRecording_20241108_085353.mp4

Passkey is working on github. But I've mentioned that passkey is not working for microsoft/paypal websites.

maxmini1 commented 3 weeks ago

@singhh9596: Ok thanks, i see that bitwarden save that passkey but when you creat passkey microsoft let you name it,but if you using BW its dosen' let you, su i think its microsoft don't save that passkey! " Maybe i'm wrong!!" Screenshot_20241108_100754_Brave Screenshot_20241108_100806_Brave Screenshot_20241108_100812_Brave Screenshot_20241108_100539_Bitwarden

singhh9596 commented 3 weeks ago

@singhh9596: Ok thanks, i see that bitwarden save that passkey but when you creat passkey microsoft let you name it,but if you using BW its dosen' let you, su i think its microsoft don't save that passkey! " Maybe i'm wrong!!" Screenshot_20241108_100754_Brave Screenshot_20241108_100806_Brave Screenshot_20241108_100812_Brave Screenshot_20241108_100539_Bitwarden

Yes, you're right

NoCoder9 commented 2 weeks ago

@NoCoder9 Hi there its sounds like fixed for me try it! new release https://github.com/bitwarden/android/releases/tag/v2024.11.3 ScreenRecording_20241108_085353.mp4

Not working when session timeout set to "Immeditely". Every other timings work. Please verify...

Gammachange commented 2 weeks ago

@NoCoder9 its work fine on github even when "set session timeout set to "Immeditely". The issue its in microsoft/paypal

maxmini1 commented 2 weeks ago

@NoCoder9 : I confirm its work, "Except" for "Microsoft/Paypal"

singhh9596 commented 2 weeks ago

Well, I've added passkey through my laptop. At least I'm able to login but i still can't add passkey from mobile. And i don't know when they gonna focus on the passkey support for gecko based browsers

singhh9596 commented 2 weeks ago

@NoCoder9 : I confirm its work, for "Microsoft/Paypal"

I just checked. Adding passkey remains the same as the screenrecording i attached to the thread.

Bitwarden vrsion: 2024.11.3 (19432)

maxmini1 commented 2 weeks ago

@NoCoder9 : I confirm its work, for "Microsoft/Paypal"

I just checked. Adding passkey remains the same as the screenrecording i attached to the thread.

Bitwarden vrsion: 2024.11.3 (19432)

Same here : I confirm its work, "Except" for "Microsoft/Paypal" Version: 2024.11.3 (19432)

Felitendo commented 6 days ago

It's not working for me on any website