🐛 WebAuthn Authentication Fails After Device Removal on pico-fido

[afterow]

Description

After flashing pico-fido, the first WebAuthn authentication succeeds, but authentication fails after removing the device. Testing revealed that re-setting the PIN using Windows Hello miraculously restored WebAuthn authentication to normal.

Environment

• Operating System: Windows 11
• Firmware Version: esp32-s3_6.2
• Browser: Chrome 133.0.6943.60
• Chip Model: ESP32-S3 (QFN56)

Steps to Reproduce

1. Flash pico-fido
2. Bind the security key
3. Remove the device
4. WebAuthn authentication

Expected Behavior

Successful WebAuthn authentication.

Actual Behavior

Login fails.

[polhenarejos]

Can you flash the nightly development build?

[afterow]

I also flashed the nightly development build version, but the effect is the same.

[afterow]

#91 I think my situation is the same as his

I believe this commit is the cause: commit 6a67800.

[polhenarejos]

But it is solved in the last development commit. Did you enrolled again the key after the development flash?

[afterow]

But it is solved in the last development commit. Did you enrolled again the key after the development flash?

Could you release a 6.2rc version? Your regular release versions do not have firmware for ESP32. I have tested nightly builds and other versions, but they do not work.

[polhenarejos]

It’d the same as nightly builds.

This the last https://github.com/polhenarejos/pico-fido/releases/download/nightly-development/pico_fido_esp32-s3.bin

Be sure you register again the key in Windows hello. It will not work with the previous one.

[afterow]

I flashed the version you sent and it's still the same after unplugging it

Wait, I found something new. After entering the pin, you can log in normally.

[polhenarejos]

I don't understand clearly the problem. Are you trying to register and login to Github or Windows?
Your key is PIN protected. So, it is normal that if you don't introduce the PIN it will not work. From the GIF you upload, I don't see Github asking you for a PIN.