Skip to content
This repository has been archived by the owner on May 18, 2021. It is now read-only.

Bugfix to migrate Factor U2F to WebAuthn. #277

Conversation

marshallbrekka
Copy link
Contributor

@marshallbrekka marshallbrekka commented Jan 18, 2020

Resolves #248 against the 1.x code base.

#276 Applies the same patch to the 2.x code.

I had to use https://github.com/goware/modvendor to vendor the required C files for the hid library, since go mod does not include them golang/go#26366.

This is breaking the circleci verification of the mod vendor.
Would appreciate some suggestions for how the project would prefer to resolve that issue.

@marshallbrekka marshallbrekka force-pushed the bugfix/marshallbrekka/1.x-webauthn-support branch from 2b34586 to df6f1cf Compare January 18, 2020 20:46
@marshallbrekka marshallbrekka force-pushed the bugfix/marshallbrekka/1.x-webauthn-support branch from df6f1cf to a31f128 Compare January 18, 2020 20:49
@nickatsegment
Copy link
Contributor

@marshallbrekka Thanks! Regarding the go mod vendor thing, I think we should make an exception for this. Just add some lines to the CI check to 1. install that tool and 2. grab the extra files.

Add additional C files.
@marshallbrekka
Copy link
Contributor Author

@nickatsegment updated

Copy link
Contributor

@nickatsegment nickatsegment left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I haven't tested this personally, but it couldn't be broken worse, right?

@nickatsegment nickatsegment merged commit a7ba4e7 into segmentio:master Jan 20, 2020
@nickatsegment nickatsegment mentioned this pull request Jan 20, 2020
@jspiro
Copy link

jspiro commented Jan 24, 2020

Has anyone confirmed this works? I created a test okta org with WebAuthn enabled, and an aws account with MFA enabled every sign on, and I cannot get it to work, fails on getting SAML creds.

I might have messed something up in configuring a test org – it's a ton of fiddly work. But I can confirm if I disable the MFA requirement then I am able to run my commands.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

FYI: Okta breaking change u2f to webauthn
3 participants