GoogleCloudPlatform / GoogleCloudPlatform/gsutil

"3rd party" dependency pyu2f is discontinued, use Yubico/python-fido2 instead…

Open
#1,884 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
918
Forks
335
PR merge metrics
No merged PRs in 30d

Description

The https://github.com/google/pyu2f README states:

> Support for pyu2f library is discontinued, because U2F is an outdated FIDO spec. In favor of embracing FIDO2 and more secure protocols, [Yubico/python-fido2](https://github.com/Yubico/python-fido2) is recommended, which also has backward compatible support for U2F.

Already noted in https://github.com/GoogleCloudPlatform/gsutil/pull/1870, too…

Right now, using macOS Tahoe (and the previous version, too), I regularly see

`ModuleNotFoundError: No module named 'range'`

Editing `google-cloud-sdk/platform/gsutil/third_party/pyu2f/pyu2f/hid/macos.py` to remove the line `import range` makes it work, which is expected – `range` is a Python builtin. Anyway, fixing that is not an option, given the discontnued state…

So, please follow the advice of using [Yubico/python-fido2](https://github.com/Yubico/python-fido2) instead.

Contributor guide

Open the contributing guide

Research direction

Start by reading the gsutil dependency layout and google-cloud-sdk/platform/gsutil/third_party/pyu2f/pyu2f/hid/macos.py, then compare the discontinued pyu2f README with Yubico/python-fido2. Trace where gsutil imports or uses pyu2f and verify the macOS U2F workflow after the dependency migration; done means pyu2f is no longer required and the reported ModuleNotFoundError is resolved.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
authentication, cli, security
Issue type
Refactor
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.