Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: aa0d4270f211f3648cd5c44aa41af1c071dcc31c
https://github.com/WebKit/WebKit/commit/aa0d4270f211f3648cd5c44aa41af1c071dcc31c
Author: Pascoe <[email protected]>
Date: 2026-08-26 (Wed, 26 Aug 2026)
Changed paths:
M Source/WebKit/UIProcess/WebAuthentication/Cocoa/CcidConnection.mm
Log Message:
-----------
[WebAuthn] Smart card is inaccessible to other clients during ceremony
https://bugs.webkit.org/show_bug.cgi?id=322560
rdar://174931466
Reviewed by Megan Gardner, Abrar Rahman Protyasha, and Wenson Hsieh.
CcidConnection opens an exclusive TKSmartCard session to probe for the FIDO
applet and held it until the
end of the ceremony even when the card wasn't a security key, locking out every
other CryptoTokenKit
client. End the session once the card answers neither the applet selection nor
the U2F_VERSION fallback.
* Source/WebKit/UIProcess/WebAuthentication/Cocoa/CcidConnection.mm:
(WebKit::CcidConnection::trySelectFidoApplet):
Canonical link: https://commits.webkit.org/319905@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
