Bug 254140 - After invoking WebAuthn Autofill on a page, that prompt appears on the next page too.
Summary: After invoking WebAuthn Autofill on a page, that prompt appears on the next p...
Status: NEW
Alias: None
Product: WebKit
Classification: Unclassified
Component: Forms (show other bugs)
Version: Safari 16
Hardware: All All
: P2 Normal
Assignee: Nobody
URL: https://id.moneyforward.com
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2023-03-19 18:06 PDT by nov matake
Modified: 2023-03-26 18:07 PDT (History)
4 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description nov matake 2023-03-19 18:06:51 PDT 
Our service start supporting WebAuthn fully relying on WebAuthn Autofill (a.k.a WebAuthn Conditional UI, Passkey Autofill etc.)

In this site, we have 2-step interaction for email login (one for input email, one for input password), and invoking WebAuthn Autofill on the first email input page only.
However, if user manually type email and go to password input page, Safari suggests Passkey on the password input field too.

Since we're not invoking WebAuthn Autofill on the password input field, even user choose a suggested passkey, nothing happens.

This behaviour happens on all iOS, iPadOS, macOS.
To reproduce this behaviour,

1. Sign-up with email at https://id.moneyforward.com
2. Register a WebAuthn Credential at https://id.moneyforward.com/webauthn/credentials
3. Logout & go to email sign-in page https://id.moneyforward.com/sign_in/email
4. Input the registered email manually (Don't pick up password-manager suggested passkeys/passwords)
5. Focus on password field at https://id.moneyforward.com/sign_in/password
Comment 1 Radar WebKit Bug Importer 2023-03-26 18:07:14 PDT 
<rdar://problem/107247888>