googleapis / googleapis/google-cloud-python

PIN prompt with fido2 security key Reauth challenge

未关闭
#17,975 0 条评论 0 个 reaction 已指派 1 人 已被 @chalmerlowe 认领 在 GitHub 查看
type: bug
主要语言
Python
星标
5.4k
派生
1.8k
平均合并
3 天 4 小时
30 天内合并 PR
122

描述

### Determine this is the right repository

- [x] I determined this is the correct repository in which to report this bug.

### Summary of the issue

**Context**
I have a Google account with [session-length controls enabled](https://knowledge.workspace.google.com/admin/security/set-session-length-for-google-cloud-services) which requires security key reauth.
After configuring a PIN on my security key (optional) gcloud reauth prompts prompt for PIN entry due to [user_verification=preferred](https://github.com/googleapis/google-cloud-python/commit/a474872eb58f7d4c8301527b8721a2461bb4438a) being set in the webauthn request handler ([legacy repo issue link](https://github.com/googleapis/google-auth-library-python/pull/1798) with [helpful clarification of uv and up](https://github.com/googleapis/google-auth-library-python/pull/1798#issuecomment-3723817079)).

**Expected Behavior:**
No PIN entry required.

**Actual Behavior:**
PIN entry is required to complete the reauth challenge.

### API client name and version

Google Cloud SDK 578.0.0

### Reproduction steps: code

n/a

### Reproduction steps: supporting files

n/a

### Reproduction steps: actual results

n/a

### Reproduction steps: expected results

n/a

### OS & version + platform

MacOS 15.7.7

### Python environment

google-cloud-sdk bundled python

### Python dependencies

n/a

### Additional context

_No response_

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。