1532605 - U2F (or WebAuthn?) fails to register/login on GitHub on Windows 10 19H1

Status: RESOLVED DUPLICATE of bug 1536544

(Core :: DOM: Web Authentication, defect)

Description

[Steven Noonan]

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0

Steps to reproduce:

• Run Firefox Nightly build 20190304215035
• Run Windows 10 build 18348.1 (19h1_release branch)
• Plug in YubiKey 5 Nano
• Go to GitHub and attempt to register the YubiKey as a 2FA key, or attempt to log in using the key.

Actual results:

Windows pops up the system WebAuthn prompt, which I acknowledge by tapping the YubiKey when prompted. The error message varied depending on whether I was attempting to log in or register the key:

• When attempting to log in, GitHub errored with "Something went really wrong."
• When attempting to register the key, GitHub errored with "This device cannot be registered."

Expected results:

The key should work correctly with GitHub.

I was able to register/use the same key on GitHub using Chrome 73.0.3683.56.

I was also able to use this key with the WebAuthn demo on Yubico's website (using Firefox Nightly -or- Chrome, both work fine): https://demo.yubico.com/webauthn-technical/registration

Comment 1

[Steven Noonan]

On current Nightly (20190308215337) the behavior has changed.

When attempting to register the key, the error message (from GitHub) is: "U2F::UnmatchedChallengeError"

Logging in with an already-registered key works fine now.

Comment 2

[J.C. Jones [:jcj] (he/him)]

I believe this was fixed by a Github server-side update. Please reopen if it's still a problem / isn't a dupe of Bug 1536544.