Bug 254140

Summary:	After invoking WebAuthn Autofill on a page, that prompt appears on the next page too.
Product:	WebKit	Reporter:	nov matake <nov>
Component:	Forms	Assignee:	Nobody <webkit-unassigned>
Status:	NEW ---
Severity:	Normal	CC:	cdumez, pascoe, webkit-bug-importer, wenson_hsieh
Priority:	P2	Keywords:	InRadar
Version:	Safari 16
Hardware:	All
OS:	All
URL:	https://id.moneyforward.com

Description nov matake 2023-03-19 18:06:51 PDT

Our service start supporting WebAuthn fully relying on WebAuthn Autofill (a.k.a WebAuthn Conditional UI, Passkey Autofill etc.)

In this site, we have 2-step interaction for email login (one for input email, one for input password), and invoking WebAuthn Autofill on the first email input page only.
However, if user manually type email and go to password input page, Safari suggests Passkey on the password input field too.

Since we're not invoking WebAuthn Autofill on the password input field, even user choose a suggested passkey, nothing happens.

This behaviour happens on all iOS, iPadOS, macOS.
To reproduce this behaviour,

1. Sign-up with email at https://id.moneyforward.com
2. Register a WebAuthn Credential at https://id.moneyforward.com/webauthn/credentials
3. Logout & go to email sign-in page https://id.moneyforward.com/sign_in/email
4. Input the registered email manually (Don't pick up password-manager suggested passkeys/passwords)
5. Focus on password field at https://id.moneyforward.com/sign_in/password

Comment 1 Radar WebKit Bug Importer 2023-03-26 18:07:14 PDT

<rdar://problem/107247888>