duo-labs / webauthn.io

The source code for webauthn.io, a demonstration of WebAuthn.
https://webauthn.io
BSD 3-Clause "New" or "Revised" License
657 stars 121 forks source link

Nothing happens with Safari 13 on macOS #20

Closed slokhorst closed 4 years ago

slokhorst commented 5 years ago

According to the release notes, Safari 13 "Added support for FIDO2-compliant USB security keys with the Web Authentication standard in Safari on macOS."

However, when I try to use webauthn.io with Safari 13, and click the "Register" button, nothing happens. The console shows the following:

[Log] Fetching options for new credential (webauthn.js, line 80)
[Log] Credential Creation Options (webauthn.js, line 103)
[Log] {publicKey: Object} (webauthn.js, line 104)

Edit: after approximately one minute, the following shows:

[Info] NotAllowedError: Operation timed out. (webauthn.js, line 113)

Perhaps the same issue as in #16?

grzuy commented 5 years ago

Are you trying with USB Security Key or MacBook TouchID? I think Safari only supports USB for now.

nicksteele commented 4 years ago

Again, sorry for the late reply. This is an issue with Safari, as opposed to my library. I just tested MacOS Safari version 13.0.3 and it appears to work with USB-attached authenticators, however I don't see a prompt by the browser like Chrome and Firefox present.

pro4tlzz commented 4 years ago

@grzuy do you have any idea when safari will support touchid for webauthn? I can't find it anyone online

slokhorst commented 4 years ago

@pro4tlzz likely somewhere in 2020. WebKitGoalsfor2020 mentions:

Authentication

  • WebAuthN external authenticators (NFC/USB) on iOS
  • Device-bound auth?

The first one is landing in iOS 13.3, the second one is probably referring to TPM (Secure Element/TouchID/FaceID).

slokhorst commented 4 years ago

It looks like the only implemented a proper UI just now. From the Safari Technology Preview 97 release notes:

Added UI with instructions for authenticating with a security key while authenticating

It now looks like this:

Screenshot 2019-12-18 at 22 01 00
pro4tlzz commented 4 years ago

Thanks

slokhorst commented 4 years ago

It's coming in Safari 14!

Added a Web Authentication platform authenticator using Face ID or Touch ID, depending on which capability is present.

https://developer.apple.com/documentation/safari-release-notes/safari-14-beta-release-notes