NotSupportedError: The user agent does not support public key credentials.

[spamshaker]

Preflight Checklist

• I have read the Contributing Guidelines for this project.
• I agree to follow the Code of Conduct that this project adheres to.
• I have searched the issue tracker for a bug report that matches the one I want to file, without success.

Electron Version

38.1.2

What operating system(s) are you using?

macOS

Operating System Version

MacOS 26.0 (25A354)

What arch are you using?

arm64 (including Apple Silicon)

Last Known Working Electron version

No response

Does the issue also appear in Chromium / Google Chrome?

No

Expected Behavior

1. Should show the credentials manager that allows to save password
2. Should show the auth modal that allows to share stored credentials

This works in Chromium Version 142.0.7440.0 (Developer Build) (arm64)

Actual Behavior

The credentials manager not working.

NotSupportedError: The user agent does not support public key credentials.

Testcase Gist URL

No response

Additional Information

minimum code to reproduce:

file name main.ts:

import { app, BrowserWindow } from 'electron/main';

async function storeCredentials() {
  const creds = new PasswordCredential({
    id: 'MyUserName',
    name: 'MyName',
    password: 'MyPassword',
    iconURL: 'https://avatars.githubusercontent.com/u/4864089?v=4&size=256'
  });

  await navigator.credentials.store(creds);
  await navigator.credentials.get({ password: true, mediation: 'optional' });
}

app.whenReady().then(async () => {
  const win = new BrowserWindow({});

  win.webContents.session.protocol.handle('http', (request) => {
    return new Response('OK');
  });
  await win.loadURL('http://localhost/');
  win.webContents.openDevTools();
  await win.webContents.executeJavaScript(`(${storeCredentials.toString()})()`);
});

electron main.ts

If this functionality is disabled for some reason what is the alternative.

It is fully supported since Chrome 60 https://developer.mozilla.org/en-US/docs/Web/API/PasswordCredential

Not sure but maybe I can polyfill this functionality using https://www.electronjs.org/docs/latest/api/safe-storage

though this message says
Uncaught (in promise) NotSupportedError: Only exactly one of "password', "federated', and
'publickey' credential types are currently supported.

so I guess it should work

[spamshaker]

I know there was already reported such issue #22057 but noting was done there.

[nikwen]

though this message says Uncaught (in promise) NotSupportedError: Only exactly one of "password', "federated', and 'publickey' credential types are currently supported.

so I guess it should work

This message is just coming from upstream/Chromium. It might be that Electron doesn't implement something that Chromium implements, so it doesn't work.

https://source.chromium.org/chromium/chromium/src/+/main:third_party/blink/renderer/modules/credentialmanagement/authentication_credentials_container.cc;l=1627-1628;drc=3d24027b5caee3ad2aaf02fa585de76a1851146e

[spamshaker]

though this message says Uncaught (in promise) NotSupportedError: Only exactly one of "password', "federated', and 'publickey' credential types are currently supported.
so I guess it should work

This message is just coming from upstream/Chromium. It might be that Electron doesn't implement something that Chromium implements, so it doesn't work.

https://source.chromium.org/chromium/chromium/src/+/main:third_party/blink/renderer/modules/credentialmanagement/authentication_credentials_container.cc;l=1627-1628;drc=3d24027b5caee3ad2aaf02fa585de76a1851146e

Yes indeed. I am wondering how it actually would work in electron cause this functionality requires integrated credential manager
chrome://password-manager/passwords which is not implemented. I guess it should be handled by exposition of some window event in the main process so that it could be handled by safeStorage. e.g

import {safeStorage} from 'electron';
// ...

win.webContents.on('credentials-store', (event, credentials) =>{
   const enc = app.safeStorage.safeStorage.encryptString(JSON.stringify(credentials)) // or smth like this
  //store encypted bin as a file or in database
}

win.webContents.on('credentials-get', (event, credentials) =>{

  if(credentials.password){
  // manually shows modal to select user credentials to share
     const key = dialogs.show...
     // get stored key from file or database
    const encrypted = db.prepare("select value from credentials WHERE key = ?").get(key)
     safeStorage.decryptString(encrypted)
 } 
}

similar way to login event https://www.electronjs.org/docs/latest/api/web-contents#event-login

[electron-issue-triage]

This issue has been automatically marked as stale. If this issue is still affecting you, please leave any comment (for example, "bump"), and we'll keep it open. If you have any new additional information—in particular, if this is still reproducible in the latest version of Electron or in the beta—please include it with your comment!