Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Passkey support incomplete on MacOS 10.9.5 #24

Open
Stecca6663 opened this issue Dec 8, 2024 · 27 comments
Open

Passkey support incomplete on MacOS 10.9.5 #24

Stecca6663 opened this issue Dec 8, 2024 · 27 comments

Comments

@Stecca6663
Copy link

First of all, thank you for fixing the microphone issue and sorry for creating a new one so soon. I noticed that supposedly passkeys work but only with a security key, but Firefox on modern macOS and chromium legacy on 10.9.5 offer support for the QR code version, so that you can use your mobile device to log in. Though on Chromium Legacy my IPhone gets stuck on "connecting", even though Bluetooth and Wi-Fi are enabled on the MacBook, so it might be a bigger issue, not sure. Here's some screenshots for context (First is Firefox, second is chromium legacy). Thank you as always!
Screen Shot 2024-12-08 at 10 42 20 AM
Screen Shot 2024-12-08 at 10 41 49 AM

@i3roly
Copy link
Owner

i3roly commented Dec 8, 2024

even on my macbook pro that runs crapalina, i get the same prrompt you do below.

i dunno how you got that qr code prompt but it seems to me that you changed something?

@Stecca6663
Copy link
Author

Well I just noticed the screenshots are flipped. I meant that the QR code one is chromium legacy, while the other one is Firefox.

@i3roly
Copy link
Owner

i3roly commented Dec 8, 2024

i don't think firefox supports QR code passkeys at this time, you will have to find out.

i know that the official firefox on 10.15 offered the same prompt as the one you're seeing on the second picture.

@RJVB
Copy link

RJVB commented Dec 8, 2024

On a somewhat related, positive note: at least the 1st primary password prompt tended to be quirky with the backported Waterfox-G3 (I'd have to cancel it because it wouldn't take any input). I haven't yet noticed anything like that with FF Dynasty.

@i3roly
Copy link
Owner

i3roly commented Dec 8, 2024

so can someone close this if they can confirm that firefox doesn't offer QR-based passkeys?

@Stecca6663
Copy link
Author

I’ll confirm with a screenshot in an hour or so, but Firefox on Sonoma on my MacBook Air does show the QR code prompt

@RJVB
Copy link

RJVB commented Dec 8, 2024

Since when and on what platforms should support for passkeys be available? I'm not finding any mention of them in the settings on Linux (I'm still on a 133 beta though). Ah, so the support does exist on Mac; I guess that's enough of an answer.

EDIT2: any chance this relies on (recent) APIs that are hidden inside @available constructs?

@i3roly
Copy link
Owner

i3roly commented Dec 8, 2024

i don't think he fully knows how he got passkey with qr codes because nothing in my search says it's supported out of hte box.

@Stecca6663
Copy link
Author

https://support.mozilla.org/it/kb/compilazione-automatica-credenziali-firefox

I can’t find it in English (I’m Italian) but please read it with a translator! It says it at the end of the page more or less. I swear I’m not imagining things o.o

@i3roly
Copy link
Owner

i3roly commented Dec 8, 2024

nowhere on that page does it say QR codes are supported. it says PASSKEY is supported, through a DEVICE. not QR codes. that page exists in english as well, and it behaves exactly as the picture you showed.

you're doing something else like 2fa passwords plus passkey or something like that.

@Stecca6663
Copy link
Author

I’m sorry I don’t want to be stubborn, but in the article it shows that there are two options, one with a device and one with a QR code. That’s what also happens on my MacBook Air. I’ll send a video when as soon as I can. I don’t have any extensions or anything of that sort. Anyways it might also be OS dependent, which in that case there is not much to do, I was just wondering why on chromium legacy it works and not on Firefox!
IMG_3617

@i3roly
Copy link
Owner

i3roly commented Dec 8, 2024

"Note: The option to use a Passkey will only be available on websites that support this technology. The process to use Passkeys in Firefox may vary slightly based on the version of macOS you are using."

i'll just wait for you to show me a picture of qr-code based passkeys on mac so i know where to look. that picture you're showing isn't helpful at all. i read that link. the prompt offers passkey for a device with a camera and it sais "iphone, ipad, or android device"

stop comparing my shit to chromium legacy, too. i am not in a competition with him and i don't care about chromium.

@RJVB
Copy link

RJVB commented Dec 8, 2024

Plus: https://searchfox.org/mozilla-central/source/docs/contributing/signing/signing_macos_build.rst

Is FF Dynasty signed with an official key from Mozilla?

@i3roly
Copy link
Owner

i3roly commented Dec 8, 2024

i don't think that has any relevance here.

as i stated earlier: i am using the official firefox on 10.15 and i get the same prompt he showed above on my machine. so it has nothing to do with signature

@RJVB
Copy link

RJVB commented Dec 8, 2024

10.15 in a VM, no? I wouldn't be surprised if the functionality (e.g. https://developer.apple.com/documentation/authenticationservices/supporting-passkeys) depends on a hardware component.

FWIW, that document and https://searchfox.org/mozilla-central/source/dom/webauthn/MacOSWebAuthnService.mm suggest that from OS 13.3 onwards there are some options that aren't directly settable using the public API.

the prompt offers passkey for a device with a camera and it sais "iphone, ipad, or android device"

Erm, not to play devil's advocate, but isn't that how QR passkeys work? You use your phone's camera to scan the code displayed on the computer monitor and then somehow phone and computer shake hands and do a merry dance?

Anyway, I have no horses in this race, I don't want to need to use my phone to unlock anything on my computers and don't see a reason for it either.

@i3roly
Copy link
Owner

i3roly commented Dec 8, 2024

no. 10.15 natively. why would i use 10.5 in a vm? it's terrible.

i am using 10.15 because it's the lowest OS supported by my laptop.

and that prompt he shared above is not in the ff source. it's from a website. i don't know which.

i don't know anythign about passkey authentication. i'm just saying that the official build behaves on 10.15 as this guy is showing in the picture. that's all.

i don't know about newer versions of mac, and quite frankly: if i did then i wouldn't have done this.

@RJVB
Copy link

RJVB commented Dec 8, 2024 via email

@i3roly
Copy link
Owner

i3roly commented Dec 8, 2024

well he hasn't shown firefox with qr code support. it could be related to entitlements and such, and if that's the case then it couldn't be ported backwards.

@Stecca6663
Copy link
Author

Stecca6663 commented Dec 8, 2024

I'm sorry, I didn't mean to compare it as a way like "see ... it's better" but in a way to show that the feature worked there. Anyway it's definitely not important and I just made this issue to see if it was possible to implement, but it's definitely not needed. I want to stress that the browser in the state it is it's great, and it's fantastic work. Anyhow here's a video of what I mean on my modern machine.
https://github.com/user-attachments/assets/f2ea1e33-9ca7-4ed7-b49d-758a8e264ad7

@i3roly
Copy link
Owner

i3roly commented Dec 8, 2024

looks like that's a feature on newer macs. not sure if it can be backported, especially since any text from that pop-up isn't in the FF source. dunno how bluebox did it. not too bothered either tbh

@Stecca6663
Copy link
Author

Yeah that's ok! You can close the issue if you want, It's really really niche. And sorry for wasting your time on this anyways...

@i3roly
Copy link
Owner

i3roly commented Dec 8, 2024

nah i'll leave it open. pretty interesting that bluebox got the functionality working. would have to effectively load the whole new framework statically for older macs.

@RJVB
Copy link

RJVB commented Dec 9, 2024 via email

@i3roly
Copy link
Owner

i3roly commented Dec 9, 2024 via email

@Stecca6663
Copy link
Author

Stecca6663 commented Dec 11, 2024

It’s probably not useful since it’s about modern MacOS versions, but it seems like Zen Browser currently has a similar issue.
zen-browser/desktop#437

@i3roly
Copy link
Owner

i3roly commented Dec 11, 2024

those people are reporting the tap doesn't work. i don't think that's the case here.

i think you observed behaviour that exists for, at least, "macOS" 12 and higher, but it may exist in Big Turd as well.

it's not in crapalina, since the official build shows me exactly what you noticed above.

@Wowfunhappy
Copy link

I haven't tried it, because I'm mostly against passkeys (too difficult/risky to move between devices), but I believe you could probably use Bitwarden for passkey support as a workaround. (This also helps partially with the aforementioned "too risky to move between devices" problem.)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants