1831392 - Add an excluded credential prompt

Status: VERIFIED FIXED

(Core :: DOM: Web Authentication, enhancement, P3)

Description

[John Schanck [:jschanck]]

An authenticator will return CTAP2_ERR_CREDENTIAL_EXCLUDED when it finds that it stores a valid credential that is listed in the authenticatorMakeCredential command's excludeList argument. This prevents the user from registering multiple credentials for the account on one authenticator.

We should show a prompt that guides the user towards retrying with a different authenticator when this happens.

Comment 1

[John Schanck [:jschanck]]

Attachment: Bug 1831392 - add an excluded WebAuthn credential prompt. r=keeler

Depends on D177944

Comment 2

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/a21e2a30012a
add an excluded WebAuthn credential prompt. r=keeler

Comment 3

[Cristian Tuns]

https://hg.mozilla.org/mozilla-central/rev/a21e2a30012a

Comment 4

[Bogdan Maris, Desktop QA [Holiday+PTO 1-6 May]]

Verified using the latest Nightly build 115.0a1 that user is now prompted with a notification message letting the user know that that device was already registered and to try a new device.

Testing was done using the following:

• Yubico 5 NFC
• Yubico Bio
• Feitian ePass FIDO2 Security Key A4B
• Windows 7, Ubuntu 20.04 and macOS 13

Comment 5

[Ryan VanderMeulen [:RyanVM]]

Does this need a Beta approval request?

Comment 6

[John Schanck [:jschanck]]

I'll mark this as wontfix for 114. The existing patch doesn't apply cleanly, and I don't think it's a significant enough bug to warrant investing more time in it.