Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: disable user verification #180

Merged
merged 1 commit into from
Nov 19, 2024
Merged

fix: disable user verification #180

merged 1 commit into from
Nov 19, 2024

Conversation

cpb8010
Copy link
Contributor

@cpb8010 cpb8010 commented Nov 18, 2024

Description

We have a user who is getting this error even when it defaults to preferred, and we're discouraging it in other places. Also attempting to block Windows Hello before hasn't been successful, as Chrome thinks we should be able to support it.

Additional context

  • The error he's seeing is "user verification required, but user could not be verified", so discouraging user verification should help.
  • Windows uses RS256 for passkeys, which we don't support. Past attempts at blocking this algorithm have been unsuccessful.

Evidence

Signing in with Windows (on edge) works when using the "use mobile authenticator" option.
image

Changing the supported algorithms didn't change Windows showing PIN/FaceId, and it looks like it worked at least within the PR, so it's possible that Windows Hello can use ES256? It could also just be the test setup here.

@cpb8010 cpb8010 added the bug Something isn't working label Nov 18, 2024
@cpb8010 cpb8010 self-assigned this Nov 18, 2024
Copy link

github-actions bot commented Nov 18, 2024

Visit the preview URL for this PR (updated for commit ccb9f7b):

https://zksync-auth-server-staging--pr180-user-verification-haa4031p.web.app

(expires Tue, 26 Nov 2024 16:36:06 GMT)

🔥 via Firebase Hosting GitHub Action 🌎

Sign: 509a9c9ea42583076f531c53cf2979c544d5d0b7

@cpb8010 cpb8010 marked this pull request as ready for review November 18, 2024 18:29
We have a user who is getting this error even when it defaults to
preferred, and we're discouraging it in other places.
Also attempting to block Winodws Hello before hasn't been successful, as
Chrome thinks we should be able to support it.
@cpb8010 cpb8010 merged commit e03d557 into main Nov 19, 2024
7 checks passed
@cpb8010 cpb8010 deleted the user-verification branch November 19, 2024 17:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants