googleapis / googleapis/google-cloud-python

PIN prompt with fido2 security key Reauth challenge

Open
#17,975 0 comments 0 reactions 1 assignee Claimed by @chalmerlowe View on GitHub
type: bug
Dominant language
Python
Stars
5.4k
Forks
1.8k
Avg merge
3d 4h
Merged PRs (30d)
122

Description

### Determine this is the right repository

- [x] I determined this is the correct repository in which to report this bug.

### Summary of the issue

**Context**
I have a Google account with [session-length controls enabled](https://knowledge.workspace.google.com/admin/security/set-session-length-for-google-cloud-services) which requires security key reauth.
After configuring a PIN on my security key (optional) gcloud reauth prompts prompt for PIN entry due to [user_verification=preferred](https://github.com/googleapis/google-cloud-python/commit/a474872eb58f7d4c8301527b8721a2461bb4438a) being set in the webauthn request handler ([legacy repo issue link](https://github.com/googleapis/google-auth-library-python/pull/1798) with [helpful clarification of uv and up](https://github.com/googleapis/google-auth-library-python/pull/1798#issuecomment-3723817079)).

**Expected Behavior:**
No PIN entry required.

**Actual Behavior:**
PIN entry is required to complete the reauth challenge.

### API client name and version

Google Cloud SDK 578.0.0

### Reproduction steps: code

n/a

### Reproduction steps: supporting files

n/a

### Reproduction steps: actual results

n/a

### Reproduction steps: expected results

n/a

### OS & version + platform

MacOS 15.7.7

### Python environment

google-cloud-sdk bundled python

### Python dependencies

n/a

### Additional context

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.