fido key support

[moolight-seashell]

be able to use fido2 / webauthn

[FaFre]

Are you using the browser from the F-Droid repository? If that's the case please try out if the problem exists in the github or Google play release.

[moolight-seashell]

yep ,i was on fdroid,
but it doesn't work on 1.9.18 either.

if this can be useful : fido2 use a specific google play services api
and micro g also implement this
https://github.com/jedrivisser/fido2-android-api-demo

you can try with this demo website :
https://demo.yubico.com/webauthn-technical/registration
it shoud diplay the play service popup

[FaFre]

The WebAuthn feature is now enabled in the latest alpha build, however it is not going to work because the official google play services only allow specific apps (https://wiki.mozilla.org/Security/Web_Authentication#Allow-listing). So it will be necessary to switch to microg implementation for all builds in order to get webauthn to work. I did try webauthn with Fennec (https://f-droid.org/packages/org.mozilla.fennec_fdroid/) but it seems the fido patches are currently having some issues, couldn't get it to work with my keys. Other users seem to have similar issues https://gitlab.com/relan/fennecbuild/-/issues/34#note_2313578602

It would be great if you could test the yubico demo on Fennec on your device. I then know whether to put this on my todo or if its a device specific issue.

[moolight-seashell]

by chance i'm running microg already.

on the demo yubico website,
it ask for my key
wl open the the microg screen
i connect a use my key
and when the popups close the website never stop loading
as if he hadn't received a reply

[FaFre]

@moolight-seashell with the new release v0.9.24 (getting build right now) I could play through the yubico demo, please give it a try if it works for you now

[moolight-seashell]

hi the yubico demo display a "Maybe operation timed out or was aborted" on the registering step

[FaFre]

@moolight-seashell have you had the chance to test it again in one of the more recent releases?

[moolight-seashell]

same on 1.9.28

another google design issue i guess
why this thing is not managed by android ...

is there anything i can do to provide you logs ?

[FaFre]

The libraries have been updated in the latest release, maybe its worth trying again with v0.9.30 @moolight-seashell