duo-labs / webauthn.io

The source code for webauthn.io, a demonstration of WebAuthn.
https://webauthn.io
BSD 3-Clause "New" or "Revised" License
635 stars 116 forks source link

Initial Registration fails the first time on MacOS Safari 17.3 and 16.6 but subsequent attempts work #121

Closed jschlesser closed 4 months ago

jschlesser commented 5 months ago

I'm leaving this here so anyone else digging doesn't go further.. It looks like it's related to a bug in webkit on macOS only (not iOS) and not due to this website or the SimpleWebAuthn library. Some links are at the end in case you are interested. It looks like the bug has been picked up by the webkit team.

When trying to process a new registration on the webauthn.io website using macOS Safari 17.3 and 16.6, the first time the register button is clicked an error message is displayed on the page: 'Operation failed.' Note that this is with the default settings, nothing changed in advanced settings.

In the developer console the last message is: 'Conditional UI request was aborted'. This happens when I have no pre-existing passkey registered as well as having one.

Details here: https://github.com/MasterKale/SimpleWebAuthn/discussions/389 https://bugs.webkit.org/show_bug.cgi?id=257176 https://github.com/WebKit/WebKit/pull/22983

jschlesser commented 5 months ago

Looks like the bug is fixed and merged in webkit. https://github.com/WebKit/WebKit/pull/22983 No telling how long till it makes it to a macOS release but at least its in there :)

MasterKale commented 4 months ago

Thanks for reporting this, and for the follow-up! I'm going to close this out for now ✌️