207

macdude22
I tried reproducing this on a fresh profile on Orion Version 0.99.128.2.1-beta (WebKit 619.1.11.111.2) on Sonoma but I did not encounter any Security Key prompts.

Could you test if you are able to reproduce this on a fresh profile (File -> Profiles -> New Profile) without any extensions installed?

      I've seen this before as well, it can happen if LinkedIn tries to use the "Conditional UI" passkey flow where it asks the browser for a passkey on page load.

      On a totally fresh profile for me it doesn't show this, but if you click "Sign in with a passkey" (it appears below Sign in with Apple on my laptop) it does open the security key prompt and doesn't allow me to use a passkey in my Apple Keychain. It should prompt for a passkey same as Safari.

      This is on my fresh profile, no way to use a passkey:

      A fresh clean profile worked. However as soon as I install the 1Password Extension it reverts to this security key behavior. So it seems with Orion I can either use 1Password or LinkedIn 🙃

      • Vlad replied to this.

        macdude22 Thanks for reporting the culprit. The correct characterization would be that Orion does not have passkeys support yet, which for some reason breaks 1Password extension.

          There is something specific with Orion+linkedin+1password. Other sites that I have passkeys stored in 1Password (for example bestbuy.com or ebay.com) don't get stuck in a loop. I get the same security key prompt on those sites but I could hit cancel and proceed with user/pass. Anyway, now that I'm aware of the root cause it's easy enough to bypass either with an alternative browser or seperate Orion profile.

          3 months later

          I confirm I get the same behavior key loop using Orion RC + 1 Password + Linked authentication.

            10 days later

            Having this with proton pass installed as well
            Solution to fix it temporaily is I diabled the extention from working with linkedin

              Merged 9 posts from Linkedin.com asking for security key.
                8 days later

                Adding +1 for proton pass passkey support, adding comment here since the proton pass extension submission is marked done.

                  +1 for passkey support. Only thing keeping me from ditching safari. To be clear a lot of people are asking for support for passkey extensions, but i'd love if you guys could just implement Apple's API so I can use my iCloud passkeys natively.

                  5 days later

                  +1 for passkey support.

                    4 days later

                    It's difficult to explain this issue because I haven't been collecting a list of websites this happens to me on, but essentially instead of the typical pop-up with the TouchID verification to create/use a passkey the following modal shows up:

                    This effectively stops me in my tracks, as nothing I do after this point works, forcing me to cancel and use an alternative login method.

                    When asked to use passkey authentication, I should always be greeted with a proper macOS passkey authentication method.

                    Version 0.99.129-beta (WebKit 619.1.11.111.2)

                    Sequoia (15)

                    Merged 2 posts from Passkey authentication not working on certain websites.

                      We got the passkeys entitlement from Apple and plan to have the support for this soon.

                        Vlad Awesome news. Thanks for the update, Vlad!

                            5 days later

                            And passkeys support is now live for all OrionRC users! Please update and let us know if you encounter any problems.

                              Seems to work for me! Though I thought this would also allow us to leverage the native password filling options from providers like so:

                              I guess this is technically a different issue than passkey support, though.

                              EDIT: Looks like limitation imposed by Apple. May not possible in 3rd party browsers.