[Desktop] Support fingerprint webauthn on macOS

[corymcdonald]

Description

For publishers we received a request from @tomlowenthal to implement webauthn as a sign in provider. However in the current release of Brave webauthn is not supported

https://webauthn.bin.coffee
https://webauthndemo.appspot.com

Actual result:

On the webauthn.bin.coffee site when you try and generate a login

Contacting token... please perform your verification gesture (e.g., touch it, or plug it in)

Note: Raw response in console.
Got error:
TypeError: Cannot read property 'response' of null

Failures: 1 TODOs: 0

Expected result:

webauthn successfully works when trying to authenticate with a fingerprint reader

Reproduces how often:

Everytime

Brave version (brave://version info)

All versions.

Test Plan

Specified here: brave/brave-core#5539

Additional Information

Essentially think it's related to removing credentialManager
brave/brave-core#1896

[bbondy]

@corymcdonald I think this is working with our 0.61.x release with Chromium 73. Could you try?

[bbondy]

I think this fixes it actually which is live:
brave/brave-core#1899

[corymcdonald]

I was able to get Yubikey to work in both

• Version 0.61.51 Chromium: 73.0.3683.75 (Official Build) (64-bit)
• Version 0.63.13 Chromium: 73.0.3683.75 (Official Build) dev (64-bit)

However I was not able to use my fingerprint as a way for UTF. So maybe this issue should be made a little more specific?

[bsclifton]

@corymcdonald please do update the issue to cover your case 😄 (title, original post details)

[mikegrima]

Not sure if this is related to this issue, or if I should submit a new one. Touch ID currently does not work for webauthn for the latest Brave release (it does work in Chrome).

To replicate, try using Touch ID on https://webauthn.me. I think one of the issues is that Brave does not ask you to permit the site access to Touch ID, which Chrome does. Because of this, Touch ID doesn't work :(

[corymcdonald]

This is still an issue. 😄 We want to support WebAuthn on the publishers so it would be nice to get this somewhere on the roadmap so it would be released on the Release version before the end of year @rebron

[mikegrima]

It's really unfortunate that I can't use TouchID on Brave. Implementing this would have full feature parity with Chrome (from my perspective :)).

[MattDierick]

Same comment, WebAuthn is more and more used by IDaaS and MFA like Duo or OKTA.

[ChadKillingsworth]

Github has now enabled this functionality and next month over a hundred banks and credit unions will have it enabled for their sites. Really need this enabled.

[kimbim]

Need this to switch to Brave!

[stgarf]

I'd like this support added to Brave to continue using Brave at work since we've switched to Okta Verify with Touch ID for authentication. This works correctly in Chrome.

[bmreilly]

I'm required to use Duo to login at work - as are many others - without touchID i have to pull my phone out >20x a day to verify. This is causing me to seriously contemplate switching back to chrome....

[evanmhm]

I am also using Duo for school and I really wish I could use touchID in Brave :/

[MartinCanovas]

Many business use Okta for authentication and it would be great for the Brave community to have Touch ID supported.

[jumde]

Work in progress! Stay tuned 😄

[LaurenWags]

Verified passed on macOS 10.14.6 Mojave using

Brave | 1.11.68 Chromium: 83.0.4103.106 (Official Build) dev (64-bit)
-- | --
Revision | ce7134bb3d95141cd18f1e65772a4247f282d950-refs/branch-heads/4103@{#694}
OS | macOS Version 10.14.6 (Build 18G3020)

• Verified test plan from Fix 3642: Add support for touchID webauthn brave-core#5539

• Reproduced the issue using 1.10.93 (does not request touch ID):

• Confirmed using 1.11.x touch ID is requested:

• Confirmed able to complete the flow using either touch ID or yubikey on demo.yubico.com/u2f

cc @kjozwiak to check on Catalina

---

Verification PASSED on macOS 10.15.5 x64 using the following build:

Brave | 1.11.80 Chromium: 83.0.4103.116 (Official Build) dev (64-bit)
-- | --
Revision | 8f0c18b4dca9b6699eb629be0f51810c24fb6428-refs/branch-heads/4103@{#716}
OS | macOS Version 10.15.5 (Build 19F101)

• Verified the STR/Case outlined via Fix 3642: Add support for touchID webauthn brave-core#5539 without issues