Repository navigation
Error while authenticating on Windows 10 when using userVerification #28
Description
Activity
Can you tell us on which website you were doing the test?
I've tested on https://webauthn.me/ and https://fido.identityserver.com/.
Although, the error looks like it is happening between the authenticator and WebAuthn, so I would be surprised if the FIDO RP or WebAuthn usage would be to blame.
Ok, we will try to reproduce that behavior so that we can debug it and fix it.
As you were mentioning Windows Hello, I wanted to ensure you were not trying to log in into your workstation using Windows Hello. This requires a CTAP2 extension called hmac-secret that we haven't developed yet.
I gave all students in my CY2550 section a Nordic with OpenSK flashed. We can reliably repro this on Windows. To add some more info, the registration process works fine, but requires the user to enter a PIN for the token. When the user tries to login, Windows Security kicks in and asks for the PIN. We can enter it, but the rest of the flow doesn't engage. The window just sits there and then times out. The problem is between the browser and the token, because the blue lights on the token are not engaged.
The token works fine on MacOs, on Linux, and on Linux-on-virtualbox. We are using this against an internal site (that I can share with you @jmichelp), but the same happens on webauthn.io.
BTW, I just wanted to also applaud you for this project, it is REALLY great for the community and for learning.
I recorded this log on a Windows 10 with my dev board on commit dabbe38.
windows10_uv_log.txtSetting the PIN fails once, probably debug logging is too slow. It works fine without debug logging. With out without, when I try Login, it fails the same way: The authenticator responds properly, but Windows waits forever.
Last log was from fido.identityserver.com, this one is from webauthn.me (PIN already set, so this log is a bit shorter and more readable).
windows10_uv_log_webauthn_me.txtWindows keeps the dialog open: "Take action on your security key."
The Yubikey works for the same sequence of steps.
@scottbrady91 Did this solve your issue? Please reopen if we missed anything.
Expected Behavior
When userVerification set to preferred or required: User enters their PIN and the presses a button. User should then be authenticated.
Actual Behavior
User enters their PIN and presses a button. User is then stuck on "Touch your authenticator" Windows Hello screen.
See attached Windows logs for errors: OpenSK UserVerification Error.zip
Steps to Reproduce the Problem
Specifications