-
-
Notifications
You must be signed in to change notification settings - Fork 160
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bug: Unable to register Nitrokey #166
Comments
Can you check the logs at |
Already very telling what the issue is now :) note: censored out the public key, I know it's a public key and safe to share, but still, if not necessary, would rather leave it out :)
|
Thanks for the logs. The error is thrown by the webauthn php package used by 2FAuth to perform the webauthn authentication. I've opened an issue on the pacakge repo: Laragear/WebAuthn#38 |
OK, so here is the deal. 2FAuth relies on a package to perform the Webauthn authentication. This package uses a DB table which has a column with a size limit where security keys ID are stored base32 encoded. There is no rule regarding the security keys ID length so the limit has been arbitrary set to 255 characters (which can fall to 191 with utf8mb4_unicode_ci MySQL databases) by the package developer. Obviously this limit is to low for the Nitrokey. Currently 2FAuth uses the former version (unmaintained) of the Webauthn package. I'm working on a new major release of 2FAuth which uses the new version of the package. The limit has been increased yesterday by the package maintainer so the next version of 2FAuth will no longer crash with your Nitrokey. So, I'm afraid, you will have to wait to use webauthn. Indeed I won't release a fix for that as replicating the limit increase on the former version of the package could have side effects, and I don't want to wast time on this, 2FAuth v4 is my priority. FYI, I would say that 2FAuth v4 is 90% ready so you won't have to wait too much. |
Describe the bug
Unable to register Nitrokey under WebAuthn. After registration process, I'm met with a Server Error, closer inspection shows an error 500 on an XHR POST request to /webauthn/register
Registering a Yubikey 5A NFC works fine.
Tested on both Ubuntu (through USB) and Android (through NFC)
To Reproduce
Steps to reproduce the behavior:
Expected behavior
I should be redirected to the form where I can give the security device a name with the option to save it.
Screenshots
Desktop (please complete the following information):
Smartphone (please complete the following information):
Additional context
Add any other context about the problem here.
The text was updated successfully, but these errors were encountered: