Forum Discussion

sisk's avatar
sisk
New Contributor
6 days ago

Browser extension WebAuthn PRF extension not spec-compliant

Hi there, Noticed that the 1Password browser extension returns a non-spec-compliant response type when trying to create a credential with the WebAuthn PRF extension. I came across this while buildi...
browser extension
1P_Dave's avatar
1P_Dave
Icon for Moderator rankModerator
3 hours ago

Hello sisk​ and klw​! 👋

Thank you both for reporting this! It looks like we've received other reports as well and a bug report has been opened with our development team to look into this further. So that I can flag this further internally, are you able to share the following: 

  • The version of 1Password in the browser where you first noticed the issue.
  • A link to a website using an implementation of the PRF extension for passkeys where this issue breaks passkey functionality with 1Password. 


I look forward to hearing from you. 

-Dave

Issue=FS-5593

  • sisk's avatar
    sisk
    New Contributor
    1 hour ago

    1P_Dave​ hiya! I made a little test case for ya. https://jasisk.github.io/1p-prf-testcase/

    Just click the two buttons in order. It'll spit out whether the prf output from the generated credential is spec-compliant or not (and then some extra metadata because why not).

    The browser-native implementation shows ✅ while the 1Password credential shows 🚫. This is reliable across Firefox 151.0.3, Chrome 149.0.7827.54, and Safari 26.5.

    I'm current on extension version `8.12.22`. I must have been on `8.12.21` when I noticed a week ago but I'd guess this has been around since support for the prf extension was added (2024?). Such a minor thing that I could definitely see it going entirely unnoticed.