Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

YubiKey 4 (fido 1) does not work #681

Open
wzrdtales opened this issue Mar 7, 2025 · 3 comments
Open

YubiKey 4 (fido 1) does not work #681

wzrdtales opened this issue Mar 7, 2025 · 3 comments

Comments

@wzrdtales
Copy link

Describe the issue

YubiKey 4 (fido 1) does not work, during registration as long as the options

userVerification: 'preferred',
residentKey: 'required'

are present it will result in an he request is not allowed by the user agent or the platform in the current context, possibly because the user denied permission. error. While registration becomes functional for those keys when removing them entirely (which is not a solution), the browser component still runs into errors even without those parameters present in any way. So old yubikeys are just not supported entirely completely.

Is this intended?

@MasterKale
Copy link
Owner

It's probably the residentKey: 'required' option that's causing the issue. YubiKey 4 is a U2F security key - it doesn't support FIDO2. You can use it with WebAuthn because WebAuthn supports U2F for backwards compatibility reasons, but resident key/discoverable credentials are a FIDO2 convention that a U2F key like the YubiKey 4 can't support.

What happens if you set residentKey: 'discouraged' instead?

@wzrdtales
Copy link
Author

The problem is not during registration, that works if I just remove residentKey completely. The problem is, the actual authentication, doesn't work not matter what. I guess the problem lies somewhere in startAuthentication

@MasterKale
Copy link
Owner

Before we go any further please update this issue with all of the information the template asked you to fill out when you originally created this. The template asks you to provide all that information to expedite the support process.

If you can't remember what you deleted from the template before submitting then you can go through the process of creating a new issue (but don't click submit), then copy-paste over and populate the rest of the sections. I can't help you any further until I see some code, including all the options you're passing to startAuthentication().

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants