googleapis / googleapis/google-cloud-python

PIN prompt with fido2 security key Reauth challenge

Ouverte
#17,975 0 commentaires 0 réactions 1 personne assignée Réclamée par @chalmerlowe Voir sur GitHub
type: bug
Langage dominant
Python
Étoiles
5.4k
Forks
1.8k
Merge moyen
3 j 4 h
PR mergées (30 j)
122

Description

### Determine this is the right repository

- [x] I determined this is the correct repository in which to report this bug.

### Summary of the issue

**Context**
I have a Google account with [session-length controls enabled](https://knowledge.workspace.google.com/admin/security/set-session-length-for-google-cloud-services) which requires security key reauth.
After configuring a PIN on my security key (optional) gcloud reauth prompts prompt for PIN entry due to [user_verification=preferred](https://github.com/googleapis/google-cloud-python/commit/a474872eb58f7d4c8301527b8721a2461bb4438a) being set in the webauthn request handler ([legacy repo issue link](https://github.com/googleapis/google-auth-library-python/pull/1798) with [helpful clarification of uv and up](https://github.com/googleapis/google-auth-library-python/pull/1798#issuecomment-3723817079)).

**Expected Behavior:**
No PIN entry required.

**Actual Behavior:**
PIN entry is required to complete the reauth challenge.

### API client name and version

Google Cloud SDK 578.0.0

### Reproduction steps: code

n/a

### Reproduction steps: supporting files

n/a

### Reproduction steps: actual results

n/a

### Reproduction steps: expected results

n/a

### OS & version + platform

MacOS 15.7.7

### Python environment

google-cloud-sdk bundled python

### Python dependencies

n/a

### Additional context

_No response_

Guide de contribution

Ouvrir le guide de contribution

Évaluation

Cette issue n'a pas encore été évaluée.

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.