search

lbuchs / WebAuthn

A simple PHP WebAuthn (FIDO2/Passkey) server library
https://webauthn.lubu.ch
MIT License
419 stars 75 forks source link

Authentication no longer possible in Safari v17.4.1 (latest) #88

Closed l1nk-16 closed 1 month ago

l1nk-16 commented 3 months ago

Tested in Safari 17.4.1 (latest), Safari Technology Preview 191 (latest) under macOS Sonoma 14.4.1 (latest).

Safari Technology Preview 188 Release Notes: WebAuthn - Resolved Issues Fixed getClientCapabilities to align with WebAuthn standards to use a record type with camelCase values. (272998@main) (120442670)

Safari Technology Preview 189 Release Notes: WebAuthn - Resolved Issues Fixed navigator.credentials.create() rejects with “NotAllowedError: Operation Failed” after a conditional UI request is aborted. (273918@main) (109936742)

lbuchs commented 3 months ago

what's the error you get?

l1nk-16 commented 3 months ago

It's the error code 10: user not verified during authentication

I have set $requireUserVerification = true

lbuchs commented 2 months ago

it happens on registration or on validation?

Don't think that this has something to do with this library, userVerification is a flag returned by the authenticator. When it's set to false but you have authenticated yourself, then it's a problem of the authenticator (macOS).

l1nk-16 commented 2 months ago

It happens on validation.

Ok, but why does the process still work on webauthn.io using the same requirements?