189 questions
- Bountied 0
- Unanswered
- Frequent
- Score
- Trending
- Week
- Month
- Unanswered (my tags)
5
votes
1
answer
226
views
How do I create a passkey on windows based browser without needing Windows Hello enabled
I'm trying to call navigator.credentials.create on my windows-based web page and Windows Hello is not enabled. The ceremony I'd like to see is the black box asking me if I'd like to use my mobile, ...
3
votes
0
answers
231
views
Fido2 SDK returning 50162 error during authentication
I have integrated fido2 SDK into my Koltin-Android app.
Some users can register a google passkey successfully but receive an error code during google passkey authentication.
I am using this dependency:...
0
votes
0
answers
59
views
FIDO2 Fingerprint Verification Fails in Production (Works on Localhost) – Express.js + fido2-lib
Context
I’ve implemented FIDO2 verification for login and signup on my Express.js website. Everything works perfectly in localhost, but in production, the fingerprint verification of my security key ...
1
vote
0
answers
38
views
ASAuthorizationPlatformPublicKeyCredentialAssertion.signature algorithm
I have an issue with integrating a FIDO2 server with ASAuthorizationController.
I have managed to register a user with passkey successfully, however when authenticating, the request for authentication ...
0
votes
0
answers
479
views
WebAuthn "the operation either timed out or was not allowed" error when userVerification is set to "preferred"
I'm implementing WebAuthn passkey support, and I encounter the following error on some devices when initiating authentication or registration:
The operation either timed out or was not allowed
This ...
2
votes
0
answers
211
views
How can a third-party password manager register passkeys on iOS 17 using a Credential Provider Extension without owning the domain?
I'm building a third-party password manager app for iOS 17+ and trying to support passkey registration and authentication via a Credential Provider Extension. However, I'm running into issues when ...
0
votes
1
answer
47
views
Can Webauthn FIDO authenticator establish long term binding to www browser?
I understand that entering a PIN into a www browser can prove to a FIDO authenticator that the owner of the authenticator is present and simultaneous approve that browser to act on their behalf. If ...
1
vote
1
answer
556
views
VS Code ssh with fido2 security keys (yubikey) not prompting for pin on linux
I would like to authenticate to a remote SSH server via VS Code using FIDO2 SSH security keys (ed25519_sk). However, VS Code never prompts me for the PIN to unlock the key on the security device, nor ...
-2
votes
2
answers
203
views
Simulate Platform Authenticator with Virtual TPM [closed]
I want to use WebAuthn based authentication in Firefox on Ubuntu 24.04 without a hardware TPM or a separate hardware "security key" (e.g. yubikey).
When it works I would expect a page like ...
1
vote
1
answer
78
views
Yubikey attestation returns 39 byte authenticator data instead of 37 bytes
I am using fido2-assert to obtain an assertion from a Yubikey C NFC (5.7.1 firmware). The tool returns a four line file:
PQhSX/O9HYEvIbUZH/fWyCKg1nqXS5t41sztwV745nQ=
chainfrog
WCVnaHBXPn50f21/...
0
votes
1
answer
199
views
Can I use a yubikey 5 nano as a google passkey without a pin? [closed]
When I try to use my Yubikey 5 nano as a passkey for google, like the comment to this answer, I find that the FIDO2 PIN has to be set. When I remove the FIDO2 PIN, the passkey is also removed.
Can I ...
0
votes
2
answers
431
views
Passkeys don't work with multiple passkeys on the same device
I use passkey authentication in my app. Users can add multiple passkeys for one device and remove them (in such cases, they are marked as removed on the backend). If a passkey is removed, it is not ...
1
vote
0
answers
199
views
Google digital asset links generator: No credential sharing permission was granted
I'm implementing Passkey Authentication in my Flutter app and have completed all the required configurations for both iOS and Android. While everything works perfectly on iOS, I'm encountering issues ...
0
votes
0
answers
199
views
Fido2 challenge not matching original challenge
I'm using Fido2.AspNet version 4.0.0-beta.16 to implement passwordless logins. When trying to register a user, I'm getting an exception saying:
Authenticator response challenge does not match ...
1
vote
1
answer
111
views
Does it make sense to use refresh tokens in combination with FIDO2 authentication?
An OpenID Connect authentication process for native apps can optionally return a long-lived refresh token that can be securely stored on the device. This allows users to subsequently use a pass-code ...