Skip to content

FIDO/CTAP: Account chooser not shown during username-less login with multiple accounts #3565

Description

@GN998

Describe the bug
When attempting a username-less login using a FIDO2.1 security key that contains multiple discoverable credentials, the system automatically defaults to logging into one of the accounts without displaying an account chooser.

To Reproduce
Steps to reproduce the behavior:

Go to 'https://webauthn.io/'

Enable the "Discoverable Credential" option and register account A.

Repeat the steps to register account B and account C under the same settings.

Clear the username field on the login page and click "Log In".

Complete the authentication, and observe that the system automatically logs into one of the accounts by default without presenting any choices.

Expected behavior
When the username field is left blank, an account chooser (credential selector) should be triggered, allowing the user to manually select which account (A, B, or C) to log into.

Screenshots
(Add screenshots here if needed)

System
Android Version: 15
Custom ROM: None

Additional context
Authenticator Device: FIDO2.1 Security Key (NFC/USB)

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions