1619850 - FIDO2 support in Firefox on Linux and MacOSX not working

Status: RESOLVED DUPLICATE of bug 1530370

(Core :: DOM: Web Authentication, defect)

Description

[0x0ptr]

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:74.0) Gecko/20100101 Firefox/74.0

Steps to reproduce:

1. Go to https://webauthn.bin.coffee/
2. Click on "Create Credential"

Actual results:

"Credential request not processed by authenticator. The following error shows up on web page:
Contacting token... please perform your verification gesture (e.g., touch it, or plug it in)

Got error:
NotAllowedError: The request is not allowed by the user agent or the platform in the current context, possibly because the user denied permission.

Failures: 1 TODOs: 0"

Expected results:

Looks like Firefox (currently using Firefox Developer Edition 74.0b9 (64-bit)) does not implement FIDO2 standard properly on Linux or MacOSx. Windows seems to work fairly well.

However, on Linux (and MACOSx) when using a demo web site such as https://webauthn.bin.coffee/ the authenticator receives a U2F message (CTAPHID_MSG - 0x83) instead even though the "Get Info" is configured to indicate that FIDO2 is ONLY supported [1] and CTAPHID_MSG is NOT supported:

See [2]:
"CAPABILITY_NMSG 0x08 If set to 1, authenticator DOES NOT implement CTAPHID_MSG function "

It does not look like Firefox checks what is actually supported before querying the authenticator.

When can we expect to have full FIDO2 support on Linux and MacOSx? (Chrome works perfectly on all platforms with this authenticator FYI).

[1] https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#authenticatorGetInfo
[2] https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#usb-hid-init:

Comment 1

[Negritas Sergiu, Desktop QA]

Hello! I managed to reproduce the issue with the STR provided in the description using beta, nightly and release versions of Firefox on Ubuntu 18.04 LTS and macOS 10.13. I have observed that on Linux and macOS the prompt for a security USB is not displayed and on windows is displayed, here is the screenshot after clicking the "Create Credentials" button. Is this the error you also encountered? I will set a component for this issue so one of our developers can look into it. If it's the wrong component please feel free to assign it to a proper one.

Comment 2

[Negritas Sergiu, Desktop QA]

Attachment: bug1619850.png

Comment 3

[0x0ptr]

Yes, that is correct.

Comment 4

[BugBot [:suhaib / :marco/ :calixte]]

The priority flag is not set for this bug.
:jcj, could you have a look please?

For more information, please visit auto_nag documentation.

Comment 5

[J.C. Jones [:jcj] (he/him)]

This is a 2020 goal.