1942902 - Cancelling navigator.credentials.get() by the user should throw NotAllowedError, instead it throws an AbortError

Status: RESOLVED FIXED

(Core :: DOM: Web Authentication, defect, P3)

Description

[jespertheend]

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36

Steps to reproduce:

1. Visit https://firefox-credentials-user-abort.glitch.me/
2. Click 'Get credentials'
3. Cancel the prompt

Actual results:

The error is:
DOMException: AbortError The operation was aborted.

Expected results:

The error should be a NotAllowedError

See the spec:
https://w3c.github.io/webauthn/#sctn-create-request-exceptions:~:text=requests%20or%20the%20related%20origins%20validation%20procedure%20failed.-,NotAllowedError,including%20common%20ones%20like%20the%20user%20canceling%20out%20of%20the%20ceremony.,-Some%20of%20these%20causes%20are%20documented%20throughout%20this

Comment 1

[BugBot [:suhaib / :marco/ :calixte]]

The severity field is not set for this bug.
:jschanck, could you have a look please?

For more information, please visit BugBot documentation.

Comment 2

[John Schanck [:jschanck]]

Attachment: Bug 1942902 - return NotAllowedError for user-cancelled WebAuthn get requests on macOS. r=keeler

Comment 3

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/a5f3df41c353
return NotAllowedError for user-cancelled WebAuthn get requests on macOS. r=keeler

Comment 4

[amarc]

https://hg.mozilla.org/mozilla-central/rev/a5f3df41c353