google / google/webauthndemo

Register New Credentials goes into infinite loop when using both options DiscoverableCredentials=Preferred and UserVerification=Preferred

Open
#104 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
634
Forks
132
PR merge metrics
No merged PRs in 30d

Description

Looks like there is a problem in how latest Chrome handles the following authenticatorSelection criteria during navigator.credentials.create call:
authenticatorSelection: {residentKey: 'preferred', userVerification: 'preferred'}

![image](https://user-images.githubusercontent.com/17771801/182247810-800c0111-a6a0-4a9d-a6ba-aa19b63af784.png)

Chrome first allows to register the key which is correct

![image](https://user-images.githubusercontent.com/17771801/182241179-7c682319-9ed5-4ba6-badc-ec9814148042.png)

but then after successful registration it goes into a loop and presents another dialog asking to verify your identity with try-webauthn.appspot.com

![image](https://user-images.githubusercontent.com/17771801/182218660-94a91d9f-82f3-4af9-b26a-911cf6bf44cd.png).

If you remove (residentKey: 'preferred') from authenticatorSelection - use just {userVerification: 'preferred'}, then it works fine. Tested with Yubico 5 PIN protected series key

It worked also fine with previous version of Chrome (not the current released in July 2022 - 103.0.5060.134 (Official Build) (64-bit)).

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.