Brave-browser: [Desktop] Support fingerprint webauthn on macOS
Description
For publishers we received a request from @tomlowenthal to implement webauthn as a sign in provider. However in the current release of Brave webauthn is not supported
https://webauthn.bin.coffee
https://webauthndemo.appspot.com
Actual result:
On the webauthn.bin.coffee site when you try and generate a login
Contacting token... please perform your verification gesture (e.g., touch it, or plug it in)
Note: Raw response in console.
Got error:
TypeError: Cannot read property 'response' of null
Failures: 1 TODOs: 0
Expected result:
webauthn successfully works when trying to authenticate with a fingerprint reader
Reproduces how often:
Everytime
Brave version (brave://version info)
All versions.
Test Plan
Specified here: https://github.com/brave/brave-core/pull/5539
Additional Information
Essentially think it's related to removing credentialManager
https://github.com/brave/brave-core/pull/1896
corymcdonald
All 16 comments
@corymcdonald I think this is working with our 0.61.x release with Chromium 73. Could you try?
bbondy
on 15 Mar 2019
I think this fixes it actually which is live:
https://github.com/brave/brave-core/pull/1899
bbondy
on 15 Mar 2019
I was able to get Yubikey to work in both
- Version 0.61.51 Chromium: 73.0.3683.75 (Official Build) (64-bit)
- Version 0.63.13 Chromium: 73.0.3683.75 (Official Build) dev (64-bit)
However I was not able to use my fingerprint as a way for UTF. So maybe this issue should be made a little more specific?
corymcdonald
on 18 Mar 2019
@corymcdonald please do update the issue to cover your case 馃槃 (title, original post details)
bsclifton
on 18 Mar 2019
Not sure if this is related to this issue, or if I should submit a new one. Touch ID currently does not work for webauthn for the latest Brave release (it does work in Chrome).
To replicate, try using Touch ID on https://webauthn.me. I think one of the issues is that Brave does not ask you to permit the site access to Touch ID, which Chrome does. Because of this, Touch ID doesn't work :(
mikegrima
on 4 Apr 2019
This is still an issue. 馃槃 We want to support WebAuthn on the publishers so it would be nice to get this somewhere on the roadmap so it would be released on the Release version before the end of year @rebron
corymcdonald
on 12 Jun 2019
It's really unfortunate that I can't use TouchID on Brave. Implementing this would have full feature parity with Chrome (from my perspective :)).
mikegrima
on 13 Jun 2019
Same comment, WebAuthn is more and more used by IDaaS and MFA like Duo or OKTA.
MattDierick
on 8 Oct 2019
Github has now enabled this functionality and next month over a hundred banks and credit unions will have it enabled for their sites. Really need this enabled.
ChadKillingsworth
on 20 Oct 2019
Need this to switch to Brave!
kimbim
on 18 Nov 2019
I'd like this support added to Brave to continue using Brave at work since we've switched to Okta Verify with Touch ID for authentication. This works correctly in Chrome.
stgarf
on 24 Jan 2020
I'm required to use Duo to login at work - as are many others - without touchID i have to pull my phone out >20x a day to verify. This is causing me to seriously contemplate switching back to chrome....
bmreilly
on 28 Jan 2020
I am also using Duo for school and I really wish I could use touchID in Brave :/
evanmhm
on 15 Feb 2020
Many business use Okta for authentication and it would be great for the Brave community to have Touch ID supported.
MartinCanovas
on 8 May 2020
Work in progress! Stay tuned 馃槃
jumde
on 9 May 2020
Verified passed on macOS 10.14.6 Mojave using
Brave | 1.11.68 Chromium: 83.0.4103.106聽(Official Build)聽dev聽(64-bit)
-- | --
Revision | ce7134bb3d95141cd18f1e65772a4247f282d950-refs/branch-heads/4103@{#694}
OS | macOS Version 10.14.6 (Build 18G3020)
Verified test plan from https://github.com/brave/brave-core/pull/5539
Reproduced the issue using
1.10.93(does not request touch ID):
Confirmed using 1.11.x touch ID is requested:
Confirmed able to complete the flow using either touch ID or yubikey on demo.yubico.com/u2f
cc @kjozwiak to check on Catalina
Verification PASSED on macOS 10.15.5 x64 using the following build:
Brave | 1.11.80 Chromium: 83.0.4103.116聽(Official Build)聽dev聽(64-bit)
-- | --
Revision | 8f0c18b4dca9b6699eb629be0f51810c24fb6428-refs/branch-heads/4103@{#716}
OS | macOS Version 10.15.5 (Build 19F101)
- Verified the STR/Case outlined via https://github.com/brave/brave-core/pull/5539 without issues
LaurenWags
on 18 Jun 2020
Related issues
fmarier
路
3Comments
Sondro
路
3Comments
pitsi
路
3Comments
kerry-perret
路
3Comments
bsclifton
路
3Comments
Most helpful comment
Github has now enabled this functionality and next month over a hundred banks and credit unions will have it enabled for their sites. Really need this enabled.