search

davidearl / webauthn

An implementation of webauthn in PHP on the server side (e.g Yubico 2 and Google Titan keys)
https://webauthn.davidearl.uk
MIT License
129 stars 24 forks source link

No "Use Security Key with Fingerprint" option #10

Closed OB01 closed 4 years ago

OB01 commented 5 years ago

Hey David, There's a few closed issues around the fingerprint feature not being available. I've read and followed your instructions on how to resolve the issue, but I still seem to end up with errors.

Now that this is a standard feature that you can test with, have you got plans to implement it? - I for one would be very grateful for a working example.

davidearl commented 5 years ago

I don't have access to Android Pie with a fingerprint reader, which is the only platform I am aware of (though the other issues) that supports fingerprints with webauthn, so I can't test. iOS definitely doesn't support this (and Safari doesn't support webauthn at all anyway), and I imagine that it would need to be supported by a device driver for any third party USB fingerprint readers, on Windows for example. I know the person who tried Android Pie did get it to work wit the two code changes I subsequently commented. If iOS implements webauthn, I shall certainly try to get that working (but I'd bet they concentrate on face recognition)

OB01 commented 5 years ago

I think you just need Android 7+ (Nougat) now: https://fidoalliance.org/android-now-fido2-certified-accelerating-global-migration-beyond-passwords/ https://www.wired.com/story/android-passwordless-login-fido2/

davidearl commented 5 years ago

OK, but same applies: I only have iOS, Windows and Mac. I'll see if the emulator supports fingerprint.

mailtopaul8 commented 5 years ago

Hi,

While I try using my Fingerprint, am getting 'Notreadableerror: an unknown error occured while talking to the credential manager' but my Screen lock option working fine. Do you have any idea to resolve this?

Thanks.

davidearl commented 5 years ago

No idea, I’m afraid. This seems to be a message generated by the browser.

Oxmoze commented 5 years ago

@OB01 you should have a look at https://webauthn.spomky-labs.com/ and the associated project. Works fine with Android 9 and Chrome using the fingerprint reader. Tested and approved!

@davidearl what about contacting @Spomky and work together?

OB01 commented 5 years ago

@Oxmoze - I've not had much luck with any other versions, this is the best PHP example I've found.

Spomky commented 5 years ago

Hi all,

@Oxmoze each library has its own maintainer and way of life. Even if I will be happy to see more contributor/maintainer, that’s not easy to do it.

@OB01 as far as I know only last releases of Android (9 and 8.1) allow the use of the fingerprint reader as authenticator. Other versions only support screen unlock or BLE/NFC/USB authenticators. I may be wrong, but it looks like this is not a technical issue, just the Android OS that have not be attested by the FIDO Alliance.

@davidearl Android Pie is not the only platform that supports fingerprint readers. It works fine on a Mac Book Pro with Chrome. Safari support is ongoing (I had no success with it).

GarryG commented 4 years ago

I'm no expert for Webauthn, but might this be caused by missing self attestation? Because using Firefox w/ Win10 works fine for places like webauthn.io or the Spomky-Labs version, but also doesn't work for this package ...

medusa70 commented 4 years ago

OK, but same applies: I only have iOS, Windows and Mac. I'll see if the emulator supports fingerprint.

On your Mac you can use Chrome, which supports Touch ID as fingerprint device, if it‘s a current Macbook.

davidearl commented 4 years ago

If my Mac had a fingerprint reader, I would, of course, have tried that. But it doesn't.

davidearl commented 4 years ago

See #26 - confirmed now works on Mac fingerprint reader