fmt value is "none" on ASAuthorizationPlatformPublicKeyCredentialRegistration

When retrieving the ASAuthorizationPlatformPublicKeyCredentialRegistration, the decoded fmt value of rawAttestationObject is none instead of apple.

Is this currently expected?

Up vote post of mervyn.ong Down vote post of mervyn.ong
1.3k views
Posted by
mervyn.ong
Reply
Add a Comment

Replies

Like on the web, this is the default value unless you explicitly request attestation. You can do that through ASAuthorizationPublicKeyCredentialRegistrationRequest.attestationPreference.

Note that not all attestation preferences are supported by all security keys or passkeys.

Posted by
garrett-davidson
Up vote reply of garrett-davidson Down vote reply of garrett-davidson

  • Thanks for the feedback. Unfortunately the result still persists when setting the value as direct. Using the Platform authenticator with FaceID. Could I be missing a separate configuration here?

    Device Model: iPhone 12 mini

            let platformProvider = ASAuthorizationPlatformPublicKeyCredentialProvider(relyingPartyIdentifier: rpName) let platformKeyRequest = platformProvider.createCredentialRegistrationRequest(challenge: challenge, name: userName, userID: userIdData)         platformKeyRequest.userVerificationPreference = .required         platformKeyRequest.attestationPreference = .direct         let authController = ASAuthorizationController(authorizationRequests: [platformKeyRequest])         authController.delegate = self         authController.presentationContextProvider = self         authController.performRequests()
    —
    mervyn.ong

  • From what I can see here, that looks correct. Please send us a feedback so we can take a closer look.

    —
    garrett-davidson

  • Thanks for the help. Submitted it https://feedbackassistant.apple.com/feedback/9162351

    —
    mervyn.ong
Add a Comment

Thanks for the feedback. Unfortunately the result still persists when setting the value as direct. Using the Platform authenticator with FaceID. Could I be missing a separate configuration here? 

Device Model: iPhone 12 mini      

let platformProvider = ASAuthorizationPlatformPublicKeyCredentialProvider(relyingPartyIdentifier: rpName) 
let platformKeyRequest = platformProvider.createCredentialRegistrationRequest(challenge: challenge, name: userName, userID: userIdData)
platformKeyRequest.userVerificationPreference = .required    
platformKeyRequest.attestationPreference = .direct    
let authController = ASAuthorizationController(authorizationRequests: [platformKeyRequest])    
authController.delegate = self    
authController.presentationContextProvider = self    
authController.performRequests()
Posted by
mervyn.ong
Up vote reply of mervyn.ong Down vote reply of mervyn.ong

  • +1, I am facing the same issue.

    —
    marcin_

  • tested on beta 3, the issue is still present for me.

    —
    mervyn.ong

  • Just checked on beta 4, now I am getting an error "Passkeys do not support attestation.".

    —
    marcin_