YubiKey WebAuthn on Android does not work

[dagadeta]

Description

When trying to authenticate using WebAuthn on several web pages, it does not work.

Steps to reproduce

1. Go to the Yubico webauthn demo website using Brave for Android
2. Go through the Steps told by the web page
3. See the Error

Actual result

The YubiKey registration process does work, but when trying to do the authentication step, it throws an error:

The operation either timed out or was not allowed. See: https://www.w3.org/TR/webauthn-2/#sctn-privacy-considerations-client.

Here is a screen recording of the process:

e2a08f61194f5015727059ad458caf013ee9bc4a05e1f1aa94931aa6eb7ba0ca.mp4

(In this screen recording, I didn't turn off Brave Shield, but it looks exactly the same with Brave Shield turned off)

Expected result

After starting the authentication process, the Android menu for WebAuthn authentication should pop up and the web page should say "Authentication successful!", just like in current Chrome for Android:

signal-2024-12-24-233213.mp4

(In this screen recording, the Android menu for WebAuthn is invisible for privacy reasons)

Reproduces how often

Easily reproduced

Brave version

Brave 1.73.104, Chromium 131.0.6778.204

Device

• Brand/model: Google Pixel 8
• Android version: Android 15; Build/AP4A.241205.013

Channel information

• release (stable)
• beta
• nightly

Reproducibility

• with Brave Shields disabled
• with Brave Rewards disabled
• in the latest version of Chrome

Miscellaneous information

When looking at the official WebAuthn web page, you can see that Brave for Android just doesn't support WebAuthn yet. However, this is a feature which I would really like to see as you need it pretty much everywhere, even in Apps as they often use web authentication as well, when you strictly use Hardware key authentication like with the YubiKey. This not working in the Android version of Brave forces me to use a different default Browser.