github-starred/gitea
2
0
Fork 0
mirror of https://github.com/go-gitea/gitea.git synced 2026-03-22 14:34:54 -05:00
Code Issues 2.6k Packages Projects Releases 100 Wiki Activity

U2F/FIDO Token not supported in Safari browser, despite API being present #6749

New Issue
Closed
opened 2025-11-02 07:05:29 -06:00 by GiteaMirror · 2 comments
GiteaMirror commented 2025-11-02 07:05:29 -06:00
Owner
Copy Link

Originally created by @cortices on GitHub (Jan 25, 2021).

  • Gitea version (or commit ref): 1.14.0+dev-598-g4acb499f3 (Docker)
  • Git version: 2.30.0
  • Operating system: Gitea under Docker (gitea/gitea, tag: latest), User browser Safari 14.0 under macOS 10.15.7

Gitea docker is behind an nginx reverse proxy on HTTPS only (not accessible over HTTP), on a dedicated subdomain.

  • Database (use [x]):
    • PostgreSQL
    • MySQL
    • MSSQL
    • SQLite
  • Can you reproduce the bug at https://try.gitea.io:
    • Yes (provide example URL)
    • No
  • Log gist:

Description

Safari 14 supports U2F keys (see https://caniuse.com/u2f), but Gitea's U2F plugin doesn't allow it, and says it is unsupported.

I can add my keys in Firefox or Chrome, and other websites can use the same keys in Safari.

Screenshots

image
Originally created by @cortices on GitHub (Jan 25, 2021). <!-- NOTE: If your issue is a security concern, please send an email to security@gitea.io instead of opening a public issue --> <!-- 1. Please speak English, this is the language all maintainers can speak and write. 2. Please ask questions or configuration/deploy problems on our Discord server (https://discord.gg/gitea) or forum (https://discourse.gitea.io). 3. Please take a moment to check that your issue doesn't already exist. 4. Make sure it's not mentioned in the FAQ (https://docs.gitea.io/en-us/faq) 5. Please give all relevant information below for bug reports, because incomplete details will be handled as an invalid report. --> - Gitea version (or commit ref): 1.14.0+dev-598-g4acb499f3 (Docker) - Git version: 2.30.0 - Operating system: Gitea under Docker (gitea/gitea, tag: latest), User browser Safari 14.0 under macOS 10.15.7 <!-- Please include information on whether you built gitea yourself, used one of our downloads or are using some other package --> <!-- Please also tell us how you are running gitea, e.g. if it is being run from docker, a command-line, systemd etc. ---> Gitea docker is behind an nginx reverse proxy on HTTPS only (not accessible over HTTP), on a dedicated subdomain. <!-- If you are using a package or systemd tell us what distribution you are using --> - Database (use `[x]`): - [x] PostgreSQL - [ ] MySQL - [ ] MSSQL - [ ] SQLite - Can you reproduce the bug at https://try.gitea.io: - [x] Yes (provide example URL) - [ ] No - Log gist: <!-- It really is important to provide pertinent logs --> <!-- Please read https://docs.gitea.io/en-us/logging-configuration/#debugging-problems --> <!-- In addition, if your problem relates to git commands set `RUN_MODE=dev` at the top of app.ini --> ## Description Safari 14 supports U2F keys (see https://caniuse.com/u2f), but Gitea's U2F plugin doesn't allow it, and says it is unsupported. I can add my keys in Firefox or Chrome, and other websites can use the same keys in Safari. ## Screenshots <!-- **If this issue involves the Web Interface, please include a screenshot** --> <img width="776" alt="image" src="https://user-images.githubusercontent.com/1159183/105701484-7934cc80-5f5e-11eb-8ac0-66f4100c5e1d.png">
GiteaMirror added the type/bug label 2025-11-02 07:05:29 -06:00
GiteaMirror commented 2025-11-02 07:05:29 -06:00
Author
Owner
Copy Link

@cortices commented on GitHub (Jan 25, 2021):

So this is a result of the old google u2f API being dropped by Safari in favour of WebAuthn and Gitea not being on WebAuthn yet, as discussed & worked on here https://github.com/go-gitea/gitea/pull/9451

I will see if I can get the time to look at contributing to @e3b0c442's work

@cortices commented on GitHub (Jan 25, 2021): So this is a result of the old google u2f API being dropped by Safari in favour of WebAuthn and Gitea not being on WebAuthn yet, as discussed & worked on here https://github.com/go-gitea/gitea/pull/9451 I will see if I can get the time to look at contributing to @e3b0c442's work
GiteaMirror commented 2025-11-02 07:05:30 -06:00
Author
Owner
Copy Link

@6543 commented on GitHub (Jan 14, 2022):

#17957

@6543 commented on GitHub (Jan 14, 2022): #17957
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
$20
$250
$50
$500
backport/done
💎 Bounty
docs-update-needed
good first issue
hacktoberfest
issue/bounty
issue/confirmed
issue/critical
issue/duplicate
issue/needs-feedback
issue/not-a-bug
issue/regression
issue/stale
issue/workaround
lgtm/need 2
modifies/api
modifies/translation
outdated/backport/v1.18
outdated/theme/markdown
outdated/theme/timetracker
performance/bigrepo
performance/cpu
performance/memory
performance/speed
pr/breaking
proposal/accepted
proposal/rejected
pr/wip
pull-request
Mirrored from GitHub Pull Request
 reviewed/wontfix
💰 Rewarded
skip-changelog
status/blocked
topic/accessibility
topic/api
topic/authentication
topic/build
topic/code-linting
topic/commit-signing
topic/content-rendering
topic/deployment
topic/distribution
topic/federation
topic/gitea-actions
topic/issues
topic/lfs
topic/mobile
topic/moderation
topic/packages
topic/pr
topic/projects
topic/repo
topic/repo-migration
topic/security
topic/theme
topic/ui
topic/ui-interaction
topic/ux
topic/webhooks
topic/wiki
type/bug
type/deprecation
type/docs
type/enhancement
type/feature
type/miscellaneous
type/proposal
type/question
type/refactoring
type/summary
type/testing
type/upstream
No Label type/bug
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/gitea#6749
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?