1Password passkey causes Illegal Invocation error about amazon-cognito-passwordless-auth HOT 8 CLOSED

Thank you very much looking into this issue. I will try to chase it up on 1Password's end.

from amazon-cognito-passwordless-auth.

Please close this issue. Fault is not with this library here.

1Password has been unresponsive on this issue

from amazon-cognito-passwordless-auth.

Thanks for the report.

This might be better directed at 1Password potentially though?

I don't use 1Password and can't reproduce this but let's try to see if we can locate and fix it with your help.

Question, how did you confgure the lib, what value are you using for debug?

Illegal invocation maybe caused by to the destructuring of response (from credential.response, maybe 1Password proxies it). Have a try changing our code directly inside your node_modules to:

debug?.("Created credential:", {
    credential,
    getTransports: credential.response.getTransports?.(), // `credential.response` instead of `response`
    getAuthenticatorData: credential.response.getAuthenticatorData?.(), // `credential.response` instead of `response`
    getPublicKey: credential.response.getPublicKey?.(), // `credential.response` instead of `response`
    getPublicKeyAlgorithm: credential.response.getPublicKeyAlgorithm?.(), // `credential.response` instead of `response`
});

Or it's because debug doesn't work like that and you need to call configure differently:

Do:

Passwordless.configure({
  ...,
  debug: console.debug.bind(console),
});

Instead of:

Passwordless.configure({
  ...,
  debug: console.debug,
});

(But there's other debug calls that you'd have run into earlier then so I doubt that is the issue.)

from amazon-cognito-passwordless-auth.

Hi @ottokruse , thanks for coming back to you. I think you are correct on this one, that this is likely to be caused by implementation bug with 1Password chrome extension. I will raise this issue with 1Password to see if they can fix it on their end.

debug is currently the default configuration which is debug: console.debug, I will give your suggestion a try and come back to you on this.

from amazon-cognito-passwordless-auth.

Justing reporting back:

credential.response.getAuthenticatorData() still returns the same error Uncaught TypeError: Illegal invocation.

Changing to debug: console.debug.bind(console), also didn't help.

Using debug console, I can see the following for response

from amazon-cognito-passwordless-auth.

This seems to be an existing issue someone has just raised with 1Password as well.

I am not sure if it is within the spec to be able to call getPublicKey() etc.

from amazon-cognito-passwordless-auth.

We only call that method if it's not null or undefined in which case it should work (as per spec: https://www.w3.org/TR/webauthn-2/#dom-authenticatorattestationresponse-getpublickey)

So yes this looks like an issue for 1Password

from amazon-cognito-passwordless-auth.

Any update on this issue from 1Password side @charlesjiang-greengate ?

I'm inclined to close the issue here.

from amazon-cognito-passwordless-auth.