Show only passkey based autofill

[praveshShetty]

Description

I was trying to integrate conditional UI, in my application and I wanted to show only saved passey in autofill and nothing else. But if I use autocomplete="username webauthn" in the input tag, I get both saved password and passkey. I also tried using only autocomplete="webauthn" but that does not trigger autofill at all. Can we have only passkey options in autofill ?

[timcappalli]

This is a browser implementation question, not a WebAuthn specification issue. You can find details on how to file issues with browsers on the New Issue page.

I'll add that this request is not practical as many users will not yet have a passkey and will need to enter a username/password.

[praveshShetty]

but in my use case the input field is a phone number and there is no option to add a password. It is OTP based flow. So it does not make sense to show these options.

[timcappalli]

Phone numbers are just a different identifier for a username and are often autofilled by browsers and/or password managers.

[praveshShetty]

CMIIMW but we have a different autofill token called "tel" for tel control field right ? that should be working with webauthn for such cases I feel.

[nov]

probably Google Password Manager's bug
https://issues.chromium.org/issues/41486868#c_ts1706142011

[timcappalli]

There is nothing actionable for the WebAuthn specification, so propose we close this @nadalin.

[pascoej]

Hi. I think this is good feedback and I've run into the same thought while implementing our autocomplete processing. The behavior here is defined in the HTML spec here: https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#autofill-processing-model

Requesting a change there would be the best way forward to resolve this issue. The issues page for that spec is at https://github.com/whatwg/html/issues

Thank you!