Register Passkey for Samsung devices is no longer working

[manarhusrieh]

Describe the issue

recently, we have noticed that our users are no longer able to create passkeys to login to our platform. After investigating the issue we have found that the browser is refusing the operation with error NotAllowedError: The operation either timed out or was not allowed. See: https://www.w3.org/TR/webauthn-2/#sctn-privacy-considerations-client. After further investigation, I have tried the example in your codebase, and it didn't work with mobile devices too. It works normally for Windows hello.

Reproduction Steps

1. open the example on localhost:8000
2. Choose Register
3. Select other device
4. Scan the QR code from Mobile device.
5. Continue the process on the mobile device.
6. Once done the process is not completed with error shown
   NotAllowedError: The operation either timed out or was not allowed. See: https://www.w3.org/TR/webauthn-2/#sctn-privacy-considerations-client.

Expected behavior

Passkey is registered successfully.

Code Samples + WebAuthn Options and Responses

Your example is not working with mobile phones, although it was working a couple of months ago.

Dependencies

• OS: Windows 11
• Browser: Edge 136, Chrome 136
• Authenticator: Android 15

SimpleWebAuthn Libraries

@simplewebauthn/server 13.1.1
@simplewebauthn/browser 13.1.0

Additional context