Forum Discussion

drductus's avatar
drductus
New Contributor
5 months ago
Solved

Webauthn Integration Not Working URL mismatch?

I have built a webauthn integration that works perfectly with native android, google password manager, and bitwarden password manager. However, when I try to use 1Password to save the passkeys I get ...
android
integrations
security
  • 1P_Phil's avatar
    1P_Phil
    5 months ago

    Hi drductus​ ,

    Ok! It sounds like the team has gotten to the bottom of this. 

    Likely your issue is that you TLS certificate is missing OCSP information, which is likely because if your CA is Let's Encrypt, they are currently deprecating OCSP support.

    You can learn more about it here : https://letsencrypt.org/2024/12/05/ending-ocsp/ 

    Are you using a Let's Encrypt CA?

    Thanks,

    Phil

drductus's avatar
drductus
New Contributor
5 months ago

Hey Phil,

Are you attempting to do any sort of validation against any of the files inside /.well-known/ on the domain associated with the RP ID?

Does 1Password require an existing login to be present before it can save the passkey? We log in using an SMS flow, so there wouldn't be an existing login.

I'm just not sure why these attestation options will work for other password managers but not 1Password.