Extension biometric unlock

Automatically unlock browser extension if app is running using biometrics. Currently it requires an extra click after extension window is popped up.

macOS Biometric unlocks are broken again as of 25th September. My pop up doesn’t allow me to use biometrics in Firefox, the button does nothing.

Not working on macOS 15 in Firefox 130.01 with Bitwarden 2024.9.1

This is quite infuriating.

The purpose of the click is to demonstrate “intent”. This tends to be required by standards, such as this quote from NIST 800-63B:

5.2.9 Authentication Intent
An authentication process demonstrates intent if it requires the subject to explicitly respond to each authentication or reauthentication request. The goal of authentication intent is to make it more difficult for directly-connected physical authenticators (e.g., multi-factor cryptographic devices) to be used without the subject’s knowledge, such as by malware on the endpoint.

presentation of a biometric may or may not establish authentication intent. Presentation of a fingerprint would normally establish intent, while observation of the claimant’s face using a camera normally would not by itself.

Intent also plays into why “auto-fill” of passwords is an option, but there is hesitation to automatically pressing the “login” button afterwards.

@GameOverRob There seems to be an incompatibility between the latests browser extensions (2024.9.x) and the “older” desktop app ( < 2024.9.x). I guess on Mac you have to wait for the update to the desktop app version 2024.9.x and/or use other unlock methods until then. (see e.g. here: https://www.reddit.com/r/Bitwarden/comments/1foytay/comment/lotqhhg/)