WebAuthn in iOS 14.5: Passcode fallback doesn't work.

Originator:creasepattern
Number:rdar://FB9089701 Date Originated:2021-04-26
Status:Open Resolved:
Product:WebKit Product Version:
Classification: Reproducible:
 
# Basic Information

## Please provide a descriptive title for your feedback:

WebAuthn in iOS 14.5: Passcode fallback doesn't work.

## Which area are you seeing an issue with?

WebKit

## What type of feedback are you reporting?

Incorrect/Unexpected Behavior

# Description

## Please describe the issue and what steps we can take to reproduce it:
1. Trigger a WebAuthn prompt in Safari on iOS 14.5.
2. Wear a mask or otherwise have Touch ID fail.

Expected behaviour:

- Face ID falls back to passcode within a few seconds, especially when wearing a mask.
- The passcode fallback can be used to authenticate.

Observed behaviour:

- Face ID takes three long fallback cycles before allowing passcode auth.
- The passcode prompt is shown, but entering the correct passcode returns to WebAuthn the prompt as if no passcode was entered.

This behaviour is consistent across sites and browsers.

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!