1669870 - Add NFC support for WebAuthn/FIDO2

Status: NEW

(Core :: DOM: Web Authentication, enhancement, P3)

Description

[Andrey Sitnik]

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:81.0) Gecko/20100101 Firefox/81.0

Steps to reproduce:

Feature request: add NFC support to WebAuthn for FIDO2 keys

OS: Linux, Fedora 32
FIDO2 key: YubiKey 5C NFC
NFC reader: ACS ACR1252 (GPG and Yubico Authenticator works fine with it)

1. Open any WebAUthn demo (I use https://webauthn.io/)
2. Enter login, click Register
3. See WebAuthn popup from Firefox
4. Put key on NFC reader

Actual results:

Nothing

Expected results:

Firefox read the key and pass it to the WebAuthn demo site

Comment 1

[Andrei Purice]

Setting a component for this enhancement in order to get the dev team involved.
If you feel it's an incorrect one please feel free to change it to a more appropriate one.

Comment 2

[Shah]

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.16; rv:84.0) Gecko/20100101 Firefox/84.0

Steps to reproduce:

Feature request: add NFC Reader support to WebAuthn for FIDO2 NFC based keys like the Yubico 5 NFC

OS: macOS Big Sur
FIDO2 key: YubiKey 5C NFC
NFC reader: Ambimat's AmbiPay Reader (reader gets recognized fine on NFC Tools for Desktop)

Open any WebAUthn demo (I use https://webauthn.io/)
Enter login, click Register
See WebAuthn popup from Firefox
Put key on NFC reader

Actual results:

Nothing. The browser keeps waiting for inserting the USB drive.

Expected results:

Firefox read the key and pass it to the WebAuthn demo site just like how it works on Windows. (User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:84.0) Gecko/20100101 Firefox/84.0)

Comment 3

[christopher]

User Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.7113.93 Safari/537.36

Steps to reproduce:

Feature request: add NFC Reader support to WebAuthn for FIDO2 NFC based keys like the Yubico 5 NFC

OS: Linux, Linux Mint 20.3
FIDO2 key: YubiKey 5C NFC
NFC reader: ACR1252-U

Open https://webauthn.io
Enter login, click Register
Webauthn pop in FF
Place key on reader
Actual results:
Nothing. The browser keeps waiting for inserting the USB drive.
Expected results:
Firefox read the key and pass it to the WebAuthn demo site just like how it works on Windows.

Comment 4

[Terence Eden]

There is a workaround for this. Using https://github.com/BryanJacobs/fido2-hid-bridge I was able to scan my NFC token with a USB reader and have it authenticate with a WebAuthN service.

It would be great to see this built in to Firefox. Running a Python script every time I want to log in isn't a great experience.