googleapis / googleapis/google-cloud-python

PIN prompt with fido2 security key Reauth challenge

Abierto
#17,975 0 comentarios 0 reacciones 1 asignado Reclamado por @chalmerlowe Ver en GitHub
type: bug
Lenguaje dominante
Python
Estrellas
5.4k
Forks
1.8k
Merge medio
2 d 23 h
PR fusionados (30 d)
123

Descripción

### Determine this is the right repository

- [x] I determined this is the correct repository in which to report this bug.

### Summary of the issue

**Context**
I have a Google account with [session-length controls enabled](https://knowledge.workspace.google.com/admin/security/set-session-length-for-google-cloud-services) which requires security key reauth.
After configuring a PIN on my security key (optional) gcloud reauth prompts prompt for PIN entry due to [user_verification=preferred](https://github.com/googleapis/google-cloud-python/commit/a474872eb58f7d4c8301527b8721a2461bb4438a) being set in the webauthn request handler ([legacy repo issue link](https://github.com/googleapis/google-auth-library-python/pull/1798) with [helpful clarification of uv and up](https://github.com/googleapis/google-auth-library-python/pull/1798#issuecomment-3723817079)).

**Expected Behavior:**
No PIN entry required.

**Actual Behavior:**
PIN entry is required to complete the reauth challenge.

### API client name and version

Google Cloud SDK 578.0.0

### Reproduction steps: code

n/a

### Reproduction steps: supporting files

n/a

### Reproduction steps: actual results

n/a

### Reproduction steps: expected results

n/a

### OS & version + platform

MacOS 15.7.7

### Python environment

google-cloud-sdk bundled python

### Python dependencies

n/a

### Additional context

_No response_

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.