davidearl / webauthn

An implementation of webauthn in PHP on the server side (e.g Yubico 2 and Google Titan keys)
https://webauthn.davidearl.uk
MIT License
129 stars 24 forks source link

problem authenticating - abort #63

Open agtsaavedra opened 1 year ago

agtsaavedra commented 1 year ago

Hello, I am trying to use the library for an implementation. I am having a problem after registering the device (it works perfectly) and then when trying to authenticate, the Windows modal appears to enter a USB access key but later when canceling (to enter with the fingerprint stored on my device) the operation aborts . This happens both in the demo and in my server integration. image

I can't find where the problem is, the code was not changed at all.

davidearl commented 1 year ago

What are you expecting to happen if you cancel? The demo is just reporting that happened.

agtsaavedra commented 1 year ago

That's correct, the drawback is that I need it to give me the option to authenticate with a fingerprint, it only allows through a USB device. Normally when I hit cancel it allows me to log in with other devices (cell phone).

image

hsinatnias commented 10 months ago

The same with me also when I tried. If I use the windows login PIN in windows Hello at the time of user registration, it works for login also. But if I use an external device like an android phone at the time of registration, it doesn't give option to use android on login

hsinatnias commented 10 months ago

The same with me also when I tried. If I use the windows login PIN in windows Hello at the time of user registration, it works for login also. But if I use an external device like an android phone at the time of registration, it doesn't give option to use android on login

hsinatnias commented 10 months ago

It seems, if we add 'hybrid' in transports under function "prepareForLogin" in file "WebAuthn\WebAuthn.php", we could get cross-platform enabled. I am not sure if it has any security implications as I am new to webauthn.