Passkey login: An error occured: The security key is not owned by the user

Contribute Bug
1

Hello,

I would like to report a possible bug related to passkey login on meta.discourse.org. When I choose “Log in with a passkey,” I get this error:

image
image767×201 5.55 KB

I experienced this not only on meta, but also on Bitwarden Community, OnlyKey, and Tor, but not on the KDE forum. I suspect it might be related to forums running the latest software but not older ones. The passkeys were created using Windows Hello (Windows 11). Once I deleted the old passkeys and created new ones, the new passkeys worked.

Another suspicion is that Microsoft is updating the passkey implementation in Windows, which might interact poorly with how Discourse uses passkeys.

This is no big deal; I just had to replace the passkeys, but it doesn’t inspire confidence to “Delete Password.”

1 Like
2

Thanks for the report. I can reproduce here on meta, and I am not on a Microsoft product, so this is probably a regression in Discourse. We will have a look shortly.

@falco I wonder if this is a regression from the recentish changes :thinking: