Post

Replies

Boosts

Views

Activity

Reply to Clarification on user gesture requirement for webauthn
We also noticed the bug and can verify that it's been fixed on safari browser with iOS 17.4. But we noticed that the similar issue still exists in our iOS app. For user who has not registered a passkey, our sign-in page on WKWebview will use JSBridge to call native iOS API to show a password autofill option to user. And after sign-in succeeds using password autofill, we'll redirect sign-in page to the passkey registration page and the user gesture requirement bug can be still reproduced. If the user gesture requirement fix was applied in webkit, it should work the same in context of safari and wkwebview, and the only difference in terms of our implementation would be the native iOS API call to trigger autofill in WKWebview? Could that be the cause of enforcing something similar to the user gesture requirement?
Mar ’24