FireFox U2F Dongle Not Detected #2431

Closed
opened 2025-11-02 04:35:52 -06:00 by GiteaMirror · 19 comments
Owner

Originally created by @gudenau on GitHub (Oct 23, 2018).

  • Gitea version (or commit ref): 1.5.2
  • Git version: 2.11.0
  • Operating system: Debian Stretch
  • Database (use [x]):
    • PostgreSQL
    • MySQL
    • MSSQL
    • SQLite3
  • Can you reproduce the bug at https://try.gitea.io:
    • Yes (provide example URL)
    • No
    • Not relevant
  • Log gist:

Description

When attempting to add a YubiKey with FireFox it reports that it is not supported. I have it enabled in about:config, security.webauth.u2f;true.

Screenshots

image

Originally created by @gudenau on GitHub (Oct 23, 2018). <!-- 1. Please speak English, this is the language all of us can speak and write. 2. Please ask questions or configuration/deploy problems on our Discord server (https://discord.gg/NsatcWJ) or forum (https://discourse.gitea.io). 3. Please take a moment to check that your issue doesn't already exist. 4. Please give all relevant information below for bug reports, because incomplete details will be handled as an invalid report. --> - Gitea version (or commit ref): 1.5.2 - Git version: 2.11.0 - Operating system: Debian Stretch - Database (use `[x]`): - [ ] PostgreSQL - [ ] MySQL - [ ] MSSQL - [x] SQLite3 - Can you reproduce the bug at https://try.gitea.io: - [ ] Yes (provide example URL) - [ ] No - [x] Not relevant - Log gist: ## Description When attempting to add a [YubiKey](https://www.yubico.com/) with FireFox it reports that it is not supported. I have it enabled in about:config, `security.webauth.u2f;true`. ## Screenshots ![image](https://user-images.githubusercontent.com/5642329/47329098-0fb80c00-d639-11e8-92a1-c772c1892320.png) <!-- **If this issue involves the Web Interface, please include a screenshot** -->
GiteaMirror added the issue/confirmedtype/bug labels 2025-11-02 04:35:52 -06:00
Author
Owner

@jonasfranz commented on GitHub (Oct 23, 2018):

When do this alert appears? Instant, when you click on your key or after approx. 30 seconds?

Did you installed the drivers for your "YubiKey"?

@jonasfranz commented on GitHub (Oct 23, 2018): When do this alert appears? Instant, when you click on your key or after approx. 30 seconds? Did you installed the drivers for your "YubiKey"?
Author
Owner

@gudenau commented on GitHub (Oct 23, 2018):

Sorry, was preoccupied.

The drivers are loaded, this is Linux and it works on GitHub. That message appears as soon as you hit the add button.

@gudenau commented on GitHub (Oct 23, 2018): Sorry, was preoccupied. The drivers are loaded, this is Linux and it works on GitHub. That message appears as soon as you hit the add button.
Author
Owner

@jonasfranz commented on GitHub (Oct 26, 2018):

I cannot reproduce it since I don't have the hardware you used. Could you please specify your browser version and hardware?

@jonasfranz commented on GitHub (Oct 26, 2018): I cannot reproduce it since I don't have the hardware you used. Could you please specify your browser version and hardware?
Author
Owner

@gudenau commented on GitHub (Oct 28, 2018):

Firefox v63.0 (64-bit)

YubiKey NEO and YubiKey 4 I think.

@gudenau commented on GitHub (Oct 28, 2018): Firefox v63.0 (64-bit) YubiKey NEO and YubiKey 4 I think.
Author
Owner

@nogweii commented on GitHub (Nov 13, 2018):

Firefox 61+ uses WebAuthN, which is different from the U2F Javascript API that Chrome introduced. I haven't taken a look through Gitea's code, but that might be why it doesn't detect the security key - it uses the older (deprecated) API rather than the newer standardized one.

@nogweii commented on GitHub (Nov 13, 2018): Firefox 61+ uses WebAuthN, which is different from the U2F Javascript API that Chrome introduced. I haven't taken a look through Gitea's code, but that might be why it doesn't detect the security key - it uses the older (deprecated) API rather than the newer standardized one.
Author
Owner

@lafriks commented on GitHub (Nov 13, 2018):

Works for me with YubiKey 5 on both Firefox 63 and Chrome on Windows and Linux

@lafriks commented on GitHub (Nov 13, 2018): Works for me with YubiKey 5 on both Firefox 63 and Chrome on Windows and Linux
Author
Owner

@rugk commented on GitHub (Nov 26, 2018):

I can confirm it works on try.gitea.io as expected with Firefox and Fedora 29 here. (with security.webauth.u2f enabled obviously – as it has been said the new WebAuthn API is not yet supported by Gitea)

@rugk commented on GitHub (Nov 26, 2018): I can confirm it works on try.gitea.io as expected with Firefox and Fedora 29 here. (with `security.webauth.u2f` enabled obviously – as it has been said the new WebAuthn API is not yet supported by Gitea)
Author
Owner

@tamalsaha commented on GitHub (Jan 13, 2019):

I am seeing the same error on Ubuntu 18.04 + Chrome 71.0.3578.98 .

u2f-chrome

@tamalsaha commented on GitHub (Jan 13, 2019): I am seeing the same error on Ubuntu 18.04 + Chrome 71.0.3578.98 . ![u2f-chrome](https://user-images.githubusercontent.com/94814/51084995-d0550500-16e7-11e9-9000-98ff3798a612.png)
Author
Owner

@rugk commented on GitHub (Jan 13, 2019):

@tamalsaha Did you enable security.webauth.u2f in about:config in Firefox?

Otherwise it won't work, as gitea still uses the legacy u2f API, instead of WebAuthn.

@rugk commented on GitHub (Jan 13, 2019): @tamalsaha Did you enable `security.webauth.u2f` in `about:config` in Firefox? Otherwise it won't work, as gitea still uses the legacy u2f API, instead of WebAuthn.
Author
Owner

@tamalsaha commented on GitHub (Jan 13, 2019):

I am using Chrome. I can use U2F with Google services from this same Chrome installation.

@tamalsaha commented on GitHub (Jan 13, 2019): I am using Chrome. I can use U2F with Google services from this same Chrome installation.
Author
Owner

@rugk commented on GitHub (Jan 13, 2019):

Sorry, but this issue here is about Firefox. Better create a new issue then, if you encounter problems.

@rugk commented on GitHub (Jan 13, 2019): Sorry, but this issue here is about Firefox. Better create a new issue then, if you encounter problems.
Author
Owner

@tamalsaha commented on GitHub (Jan 13, 2019):

Thanks. I have filed #5720

@tamalsaha commented on GitHub (Jan 13, 2019): Thanks. I have filed #5720
Author
Owner

@stale[bot] commented on GitHub (Mar 14, 2019):

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs during the next 2 weeks. Thank you for your contributions.

@stale[bot] commented on GitHub (Mar 14, 2019): This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs during the next 2 weeks. Thank you for your contributions.
Author
Owner

@rugk commented on GitHub (Mar 14, 2019):

No bot, this is still an issue. And it will be. It's a bug, after all…

@rugk commented on GitHub (Mar 14, 2019): No bot, this is still an issue. And it will be. It's a bug, after all…
Author
Owner

@bricewge commented on GitHub (Mar 19, 2019):

Just to report that I had the same issue when using Firefox Nightly 64.0a1 (2018-09-09) with a Yubikey NEO and enabeling security.webauth.u2f, as @rugk recommended, fixed it.

@bricewge commented on GitHub (Mar 19, 2019): Just to report that I had the same issue when using Firefox Nightly 64.0a1 (2018-09-09) with a Yubikey NEO and enabeling `security.webauth.u2f`, as @rugk recommended, fixed it.
Author
Owner

@6543 commented on GitHub (Oct 24, 2019):

@gudenau does it still not work ?
mine work fine ...

@6543 commented on GitHub (Oct 24, 2019): @gudenau does it still not work ? mine work fine ...
Author
Owner

@foggy1 commented on GitHub (Dec 7, 2019):

Confirmed that this is still an issue as pictured above on Firefox 70.0.1 on Manjaro Linux as well as latest Firefox developer addition on MacOS (latest Catalina). I have security.webauth.u2f set to true and use it on many other sites.

EDIT: Nevermind, it's an https issue (was over http)

@foggy1 commented on GitHub (Dec 7, 2019): Confirmed that this is still an issue as pictured above on Firefox 70.0.1 on Manjaro Linux as well as latest Firefox developer addition on MacOS (latest Catalina). I have `security.webauth.u2f` set to true and use it on many other sites. EDIT: Nevermind, it's an https issue (was over http)
Author
Owner

@lunny commented on GitHub (Jan 17, 2020):

I'm using Firefox(72.0.1) on macOS(10.14.5) . It's OK for me.

@lunny commented on GitHub (Jan 17, 2020): I'm using Firefox(72.0.1) on macOS(10.14.5) . It's OK for me.
Author
Owner

@sapk commented on GitHub (Feb 12, 2020):

Do you use gitea under a subpath ? (like found in https://github.com/go-gitea/gitea/issues/10231#issuecomment-584836417)

@sapk commented on GitHub (Feb 12, 2020): Do you use gitea under a subpath ? (like found in https://github.com/go-gitea/gitea/issues/10231#issuecomment-584836417)
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/gitea#2431