New issue
Advanced search Search tips

Issue 916406 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner:
Closed: Jan 10
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Android
Pri: 3
Type: Bug



Sign in to add a comment

WebAuthn shows fingerprint auth dialog after credentials are removed from the device

Project Member Reported by agektmr@chromium.org, Dec 19

Issue description

Chrome Version: 70.0.3538.110
OS: Android 7.0
GMSCore: 14.7.99(040408-223214910)

What steps will reproduce the problem?
(0) Using Android device with given version number...
(1) Register a pattern and a fingerprint in Android OS Settings
(2) Register a credential at https://webauthndemo.appspot.com/ with "Register platform authenticator"
(3) Turn off the pattern and remove the fingerprint in Android OS Settings
(4) Re-register a pattern and a fingerprint in Android OS Settings
(5) Go to https://webauthndemo.appspot.com/ again and try "Authenticate"

What is the expected result?
Authentication timeouts without showing a fingerprint auth dialog

What happens instead?
Browser shows a fingerprint auth dialog. When touch the fingerprint sensor it succeeds on the dialog but fails on server side check.

 
Cc: hu...@yahoo-corp.jp
Description: Show this description
As for "Browser shows a fingerprint auth dialog.", It is not a device to reproduce in everything, it reproduces on some devices.
For now, as an example of a device that can reproduce the phenomenon, we can confirm the following.

Device name: Xperia Z5 SO - 01H
GMSCore: 14.7.99 (040408-223214910)
Android version: 7.0
Chrome: 70.0.3538.110
Owner: dongjing@google.com
Status: Assigned (was: Untriaged)
I verified on my device that I see the expected behavior by following the steps.
The GMS version is 14.7.99, the same as the one used in this bug.
Status: WontFix (was: Assigned)
Closing as this cannot be reproduced. Please reopen if you find it differently.

Sign in to add a comment