desktop icon indicating copy to clipboard operation
desktop copied to clipboard

Touch security key does not work

Open DGoiana opened this issue 1 year ago • 18 comments

What happened?

Touch ID security key does not work while attempting to login in gmail.

Screenshot 2024-08-22 at 13 35 06

Reproducible?

  • [X] I have checked that this issue cannot be reproduced on Mozilla Firefox.

Version

1.0.0-a.27

Severity impact

Medium

What platform are you seeing the problem on?

macOS - aarch64

Relevant log output

No response

DGoiana avatar Aug 22 '24 12:08 DGoiana

EDIT: Below is wrong, sorry. Security keys both for standalone 2FA and with Passkeys are working on my Intel Thinkpad. So maybe this is a ARM Mac issue as others have said.

Same issue on a Thinkpad X280 running Fedora Linux 40 under Wayland. Tried with multiple logins: Google, Bitwarden, GitHub. Zen installed from Flatpak. Zen version: 1.0.0-a.27 (fresh install today) Tried two Yubikeys: USB-A and USB-C. USB access is not the problem as Zen can see a USB flash drive and Flatseal shows device=all permission. Firefox on this machine is able to access USB security keys fine.

andmalc avatar Aug 23 '24 15:08 andmalc

It's the same issue with this. Looks like they closed it saying that maybe it's on the Firefox side but according to the last comment there it looks like it's not the case. I hope they look into that I'm having the same issue on every website with Passkey authentication.

tancetiner avatar Aug 23 '24 18:08 tancetiner

#111

bjsho avatar Aug 23 '24 21:08 bjsho

I'll try looking into this

DGoiana avatar Aug 24 '24 12:08 DGoiana

+1

elbe-vivek-c avatar Aug 27 '24 15:08 elbe-vivek-c

I just drop this here as it wasn't mentioned before. This might be related to not having this entitlement.

I'm not sure how easy it is to add that or if the app needs to pay the gatekeeper fee for proper signing.

bvoigtlaender avatar Aug 28 '24 08:08 bvoigtlaender

I just drop this here as it wasn't mentioned before. This might be related to not having this entitlement.

I'm not sure how easy it is to add that or if the app needs to pay the gatekeeper fee for proper signing.

You won't believe what comment I just left on the other issue because I forgot to read this one as well first 🤦

Either way, from what I can tell just paying the gatekeeper fee alone isn't gonna cut it, this is an additional entitlement unfortunately. I'm not sure how likely Apple is to give it out either, since they haven't done so for the other browsers I mentioned in the other issue (though that said, those browsers may not even have tried to apply either)

MaxNeedsSnacks avatar Sep 06 '24 23:09 MaxNeedsSnacks

I'm also having this issue, but its when I try to log back into my 1password plugin from Zen using the touch id instead of having to retype the password. I have the plugin in my firefox browser and its working just fine, so i don't think its a firefox side issue.

Edit: also this is from a 2019 Macbook Pro w/ Intel chip, running macOS Version 15.0 Beta (24A5298h)

aRustyDev avatar Sep 07 '24 18:09 aRustyDev

I have 3 1Password accounts I log into separately but Touch ID manages that for me. Due to this bug, I can only use one of them at a time. This is unfortunately a blocker for me to use Zen Browser on my work computer, otherwise I love it.

twhitson avatar Sep 09 '24 16:09 twhitson

Update: macos has been signed! Let's wait for version 38 to build, and see if this issue goes away or 1password accepts zen or whatever

mr-cheffy avatar Sep 09 '24 17:09 mr-cheffy

Just to clarify @mauro-balades, what are we waiting on to get this resolved? I understood your comment above as "v38 will support passkeys," but I've tried the v39 alpha and it still doesn't seem to be working. If it's not been fixed due to a lack of human resources, is it something we could perhaps delegate to the community? I'd love to help out and expedite this if I can (for my own sake! 😄)

I understand this is OSS and your time is very precious, so thank you for your hard work.

alii avatar Sep 12 '24 13:09 alii

18-Sep-2024 10:36 GMT+8

Passkeys functionality on Mac still not available. Currently using 1.0.1-a.1

yodancristino avatar Sep 18 '24 02:09 yodancristino

I can confirm that as of 24 September 2024, it is still not working on ARM macbooks. Currently using 1.0.1-a.4 (64-bit)

spojskic avatar Sep 24 '24 07:09 spojskic

Version: 1.0.1-a.7 (64-bit) Date: 2 Oct 2024 Issues: Passkey options is not rendered on some login pages and on Github I get this message: image

On google it is still the same issue with the ARM macbook closed: image

This is the only issue that is stopping me from using Zen browser for now. Will stick to firefox

spojskic avatar Oct 02 '24 07:10 spojskic

Same issue for me, cannot use my yubikey as a 2fa. I can't even click the cancel button, it freezes after i click it

qverkk avatar Oct 07 '24 19:10 qverkk

What does firefox do?

mr-cheffy avatar Oct 08 '24 19:10 mr-cheffy

What does firefox do?

Nvm, it's borked in firefox also, i remember it working a few updates back. Basically it let u click the 2fa key and it'd proceed to login, now it just hangs

qverkk avatar Oct 09 '24 18:10 qverkk

What does firefox do?

Nvm, it's borked in firefox also, i remember it working a few updates back. Basically it let u click the 2fa key and it'd proceed to login, now it just hangs

It lets me use passkey: image

(I didn't upload whole screenshot because of sensitive data and I am lazy to blur it)

spojskic avatar Oct 09 '24 18:10 spojskic

  • 1.0.1-a.9
  • Macbook M-series
  • 15 Oct 2024

Can confirm, passkey still wont work.

Still occurs even after doing the followin

  • Complete removal and reinstallation of Zen
  • Sync and unsync of account (i don't know why I did this XD)
  • System reboot

yodancristino avatar Oct 15 '24 07:10 yodancristino

Still not work shoot_2024-10-18 _15 43 Zen Browser

utopiaeh avatar Oct 18 '24 12:10 utopiaeh

yes, just tested on 1.0.1-a.12 (Firefox 131.0.3) (aarch64) still doesn't work (login google.com)

pencilcheck avatar Oct 27 '24 13:10 pencilcheck

And today was the first time my passkey with gmail worked!

robsonke avatar Nov 01 '24 08:11 robsonke

And today was the first time my passkey with gmail worked!

It still doesn't work on: 1.0.1-a.17 (Firefox 132.0) (aarch64) image

spojskic avatar Nov 01 '24 10:11 spojskic

And today was the first time my passkey with gmail worked!

Does not work on mine not on gmail or any other website that requires passkey

I've reinstalled zen twice by cleaning all its data and profiles

logicfool avatar Nov 05 '24 15:11 logicfool

I found that in Firefox's production entitlements file, the following permissions are requested for passkeys. Based on Firefox's documentation, I believe this specific permission also requires something configured within the Apple Developer account used to sign the app.

<!-- Required for com.apple.developer.web-browser.public-key-credential -->
<key>com.apple.application-identifier</key>
<string>43AQ936H96.org.mozilla.firefox</string>

<!-- For platform passkey (webauthn) support -->
<key>com.apple.developer.web-browser.public-key-credential</key><true/>

The first of those keys seems like it will need edited once the necessary permission is approved.

thatcomputerguy0101 avatar Nov 05 '24 15:11 thatcomputerguy0101

Looking through #111, I found Apple's documentation on the entitlement required for browser Passkey support. Seems like as a general web browser, Zen should qualify to be granted the entitlement as long as it being in alpha is not problematic.

thatcomputerguy0101 avatar Nov 09 '24 19:11 thatcomputerguy0101

10-November-2024 16:21 GMT+8

Passkeys functionality on Mac still not available. 1.0.1-a.18 (Firefox 132.0.1) (aarch64)

yodancristino avatar Nov 10 '24 08:11 yodancristino

Looking through #111, I found Apple's documentation on the entitlement required for browser Passkey support. Seems like as a general web browser, Zen should qualify to be granted the entitlement as long as it being in alpha is not problematic.

I mean, Passkeys also work on Firefox Nightly, so I don't think that that it really a problem

bjsho avatar Nov 10 '24 17:11 bjsho

I mean, Passkeys also work on Firefox Nightly, so I don't think that that it really a problem

Firefox's Nightly Entitlements XML still includes the same permission keys I said are needed for passkeys.

thatcomputerguy0101 avatar Nov 10 '24 21:11 thatcomputerguy0101

Find this thread, it's so critical for me. Hope it'll be fixed

pal9999 avatar Nov 10 '24 21:11 pal9999