Re: [webauthn] Requiring user activation to call WebAuthn API (#1293)

> Would be nice if someone from Apple could confirm this is no longer a requirement for use of the platform authenticator?

[Ricky Mondello at Apple had this to say via Twitter about Safari's updated behavior:
](https://twitter.com/rmondello/status/1583243845164142592)
> Safari 16 changes the user gesture policy. Each tab gets a “freebie” attempt at a .get without a user gesture. After that, the user gesture requirement comes back. So I’d keep some of your handling around — be able to handle rejection and get a user gesture.

And there's an earlier take of the video I posted in which I successfully use the platform authenticator from one of these prompts:

https://user-images.githubusercontent.com/5166470/197216610-b4287248-7af0-46bd-a177-f70475b3c78a.mov

I hope that helps. I'm cautiously optimistic that we can spend less time trying to intuit what constitutes a "sufficient" user gesture now when invoking WebAuthn in Safari when we want to use the platform authenticator.

-- 
GitHub Notification of comment by MasterKale
Please view or discuss this issue at https://github.com/w3c/webauthn/issues/1293#issuecomment-1287028853 using your GitHub account


-- 
Sent via github-notify-ml as configured in https://github.com/w3c/github-notify-ml-config

Received on Friday, 21 October 2022 14:16:03 UTC