Different user interfaces on android chrome

[billlyd123]

Discussed in #777

^{Originally posted by billlyd123 April 13, 2023}
Hi I am noticing different UIs on android chrome between different websites. One of them is able to detect my Yubikey 5Ci and the other is not. Is there different ways of calling the API that generate different UIs?

[blacklion9279]

I am seeing the same issue as well. can this be fixed soon?

[ynojima]

Sorry for late response.
It seems the one for demo.yubico.com is a UI for legacy WebAuthn(non-resident(non-discoverable) credential), and the other is an UI for passkey.
Since I'm not the owner of these sites, I don't know the details but maybe latter is using option that allows passkey.

[billlyd123]

I am the developer of this site, these are the options for key creation.
{
"rp": {
"id": "",
"name": ""
},
"user": {
"id": "",
"name": "admin",
"displayName": "admin"
},
"challenge": "",
"pubKeyCredParams": [
{
"type": "public-key",
"alg": -7
},
{
"type": "public-key",
"alg": -257
}
],
"timeout": 300000,
"excludeCredentials": [
{
"type": "public-key",
"id": "261K4PsjmbyOEyZN642zH6dhtkygrIDiWbQTVWfcQE0fcctqVpdCpQD0XueyPsi4"
}
],
"authenticatorSelection": {
"requireResidentKey": true,
"residentKey": "required",
"userVerification": "discouraged"
},
"attestation": "direct"
}
Is there something here that is blocking the browser from detecting the yubikey?

[ynojima]

Since resident key is requested by "requireResidentKey": true, and "residentKey": "required", options, passkey is created and the new dialog is shown. If you switch it off, legacy dialog will be shown.

[billlyd123]

That makes sense. It should be able to recognize the yubikry with the new user interface though right? Is there a better place to open a ticket for that?

[ynojima]

You should file a bug in the Chromium bugzilla: https://bugs.chromium.org/p/chromium/issues/list?q=component:Blink%3EWebAuthentication

[billlyd123]

thanks!