Bug? Inconsistent behavior for Forcehybrid 13.1.0 SDK App since passkey requirement

Greetings  

Salesforce Forcehybrid 13.1.0 app worked fine before introduction of passKeys.  

I was SUCCESSFUL logging into mobile app 2 times after entering passkey. Yes only twice 

When I was

What is going on? Why was I successful 2 times and the rest taken to

? 

Why was I taken to

? 

I check both of these in My Domain. 

        Use the native browser for user authentication on iOS  

        Use the native browser for user authentication on Android 

The Callback URL in the External Client App is: msar24://mobilesdk/detect/oauth/done 

The oauthRedirectURL in the bootConfig.json file is also: msar24://mobilesdk/detect/oauth/done  

This is my bootconfig: 

  "remoteAccessConsumerKey": "redacted", 

  "oauthRedirectURI": "msar24://mobilesdk/detect/oauth/done", 

    "oauthScopes": ["web", "api"], 

    "isLocal": true, 

    "startPage": "index.html", 

    "errorPage": "error.html", 

    "shouldAuthenticate": true, 

    "attemptOfflineLoad": true 

I added this in the Application section of AndroidManifest.XML (

) 

       <activity 

            android:name="com.salesforce.androidsdk.ui.LoginActivity" 

            android:exported="true" 

            android:launchMode="singleTask" 

            android:theme="@style/SalesforceSDK"> 

            <intent-filter> 

                <action android:name="android.intent.action.VIEW" /> 

                <category android:name="android.intent.category.DEFAULT" /> 

                <category android:name="android.intent.category.BROWSABLE" /> 

                <data 

                    android:scheme="msar24" 

                    android:host="mobilesdk" 

                    android:path="/detect/oauth/done" /> 

            </intent-filter> 

        </activity> 

EXTERNAL CLIENT APP: 

Selected Oauth Scopes: 

   Access the identity URL service (id, profile, email, address, phone) 

   Manage user data via APIs (api) 

   Manage user data via Web browsers (web) 

   Full access (full) 

   Access Connect REST API resources (chatter_api) 

   Access Visualforce applications (visualforce) 

   Perform requests at any time (refresh_token, offline_access) 

   Access Lightning applications (lightning) 

   Access the Salesforce API Platform (sfap_api) 

Flow Enablement 

  Enable Client Credentials Flow                                   

  Enable Authorization Code and Credentials Flow   

  Enable Device Flow                                                       

  Enable JWT Bearer Flow                                               

  Enable Token Exchange Flow                                       

Security 

  Require secret for Web Server Flow             

  Require secret for Refresh Token Flow           

Are there any issues with my AndroidManifest.xml, bootconfig.xml or External Client App? 

Help is greatly appreciated.