fido2
fido2 copied to clipboard
Android App connection time out error while connecting FIDO server.
While connect fido server from android appllication getting connection time out error. For authentication we are using "Yubi Key" external Authenticator.
Our flow is following: Android App (Yubi Key) --> RP Server (Nodejs locally running) --> FIDO server (locally running).
Android Application, RP server and FIDO server all are in same network.
What version of Android are you running?
Are you using the USB or NFC interface on the mobile device? If using NFC, do you know if the Yubikey supports NFC?
On 5/27/21 8:41 PM, Prathap Badavath wrote:
While connect fido server from android appllication getting connection time out error. For authentication we are using "Yubi Key" external Authenticator.
Our flow is following: Android App (Yubi Key) --> RP Server (Nodejs locally running) --> FIDO server (locally running).
Android Application, RP server and FIDO server all are in same network.
— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/StrongKey/fido2/issues/124, or unsubscribe https://github.com/notifications/unsubscribe-auth/AT42KL3YTDTTMBD2F6MXQLLTP4GHZANCNFSM45VUEYIA.
What version of Android are you running? Are you using the USB or NFC interface on the mobile device? If using NFC, do you know if the Yubikey supports NFC? … On 5/27/21 8:41 PM, Prathap Badavath wrote: While connect fido server from android appllication getting connection time out error. For authentication we are using "Yubi Key" external Authenticator. Our flow is following: Android App (Yubi Key) --> RP Server (Nodejs locally running) --> FIDO server (locally running). Android Application, RP server and FIDO server all are in same network. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#124>, or unsubscribe https://github.com/notifications/unsubscribe-auth/AT42KL3YTDTTMBD2F6MXQLLTP4GHZANCNFSM45VUEYIA.
Android version: 9 interface: USB, not NFC Main problem is while connect RP server getting connection time out error.
I should have asked more information:
- Which API is your app using? Google's FIDO2 API (https://developers.google.com/identity/fido/android/native-apps), StrongKey Android Client Library (SACL) (https://sourceforge.net/projects/strongkeyfido/files/v4.4/sampleapps/sacl/), or neither?
If using Google's FIDO2 API, you would have to use FIDO-DEV mailing list or some other mailing list that Google uses to get support.
If you are using the SACL, then it will not work Security Keys - the SACL is designed to only work with platform keys - meaning that it uses the phone itself to generate and use FIDO keys.
If you are NOT using Google APIs or SACL, are you using the Webview component (simulating Chrome browser) to interact with external Security Keys? You should look into the Webview component documentation on whether it supports WebAuthn/FIDO2.
On 5/30/21 9:09 PM, Prathap Badavath wrote:
What version of Android are you running? Are you using the USB or NFC interface on the mobile device? If using NFC, do you know if the Yubikey supports NFC? … <#> On 5/27/21 8:41 PM, Prathap Badavath wrote: While connect fido server from android appllication getting connection time out error. For authentication we are using "Yubi Key" external Authenticator. Our flow is following: Android App (Yubi Key) --> RP Server (Nodejs locally running) --> FIDO server (locally running). Android Application, RP server and FIDO server all are in same network. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#124 <https://github.com/StrongKey/fido2/issues/124>>, or unsubscribe https://github.com/notifications/unsubscribe-auth/AT42KL3YTDTTMBD2F6MXQLLTP4GHZANCNFSM45VUEYIA <https://github.com/notifications/unsubscribe-auth/AT42KL3YTDTTMBD2F6MXQLLTP4GHZANCNFSM45VUEYIA>.
Android version: 9 interface: USB, not NFC Main problem is while connect RP server getting connection time out error.
— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/StrongKey/fido2/issues/124#issuecomment-851155147, or unsubscribe https://github.com/notifications/unsubscribe-auth/AT42KLZMGUTQY7UKMODU2PDTQMDYBANCNFSM45VUEYIA.
Thanks @ankit-psk .
- I am using Google's FIDO2 API
- I checked in browser it's working, but while using Android native application getting connection error.
Have you compared your code to Google's sample app with their FIDO2 API? There is also another app that claims to be using Google's FIDO2 APIs - you should compare your code use with theirs to see what the difference is.
I'm assuming you're using the StrongKey FIDO Server (SKFS) for this app - is that correct? I'm also assuming that your app is calling a servlet (providing business services for the app) on the back-end which, in turn, is calling the SKFS API - is that correct? We assume that apps are designed using the following architecture:
App <========> Business Application (Servlet) <=========> SKFS
Have you compared your code to Google's sample app with their FIDO2 API? There is also another app that claims to be using Google's FIDO2 APIs - you should compare your code use with theirs to see what the difference is.
I'm assuming you're using the StrongKey FIDO Server (SKFS) for this app - is that correct? I'm also assuming that your app is calling a servlet (providing business services for the app) on the back-end which, in turn, is calling the SKFS API - is that correct? We assume that apps are designed using the following architecture:
App <========> Business Application (Servlet) <=========> SKFS
- Yes I took reference code from Google sample app with FIDO2 API.
- Yes Iam using SKFS open source code, it testedand working fine with Web App (nodejs server, implemented by Strongkey in tutorial section)
- Yes architecture is same. App <========> Business Application (Servlet) <=========> SKFS instead of servlet, i used NodeJS server (in tutorial section)
@prathapcoder
Can you please send me the log output you get in both of the logs when you see this error?
-
For the FIDO2 Tutorial the log is located at /postfido2/log
-
For the SKFS run 'tsl' in the terminal when you run your test and post any error output here.
-
Also something I want to confirm about your current set up. You are currently testing an Android app that you are developing to perform FIDO2 authentication by making web API calls to the FIDO2 Tutorial backend?
- /*** log: /postfido2/log ***/
[200] Fri May 28 2021 08:31:27 GMT+0530 (India Standard Time) /login [200] Fri May 28 2021 08:31:27 GMT+0530 (India Standard Time) /styles/fonts.css [200] Fri May 28 2021 08:31:27 GMT+0530 (India Standard Time) /js/common.js [200] Fri May 28 2021 08:31:27 GMT+0530 (India Standard Time) /js/jquery-3.3.1.min.js [200] Fri May 28 2021 08:31:27 GMT+0530 (India Standard Time) /styles/style.css [200] Fri May 28 2021 08:31:27 GMT+0530 (India Standard Time) /js/functions.js [200] Fri May 28 2021 08:31:27 GMT+0530 (India Standard Time) /logo.png [200] Fri May 28 2021 08:31:27 GMT+0530 (India Standard Time) /background.jpg [200] Fri May 28 2021 08:31:27 GMT+0530 (India Standard Time) /fonts/Montserrat-Bold.ttf [200] Fri May 28 2021 08:31:27 GMT+0530 (India Standard Time) /fonts/Montserrat-Regular.ttf Fri May 28 2021 08:31:33 GMT+0530 (India Standard Time)----------PRE_AUTH----------- Fri May 28 2021 08:31:33 GMT+0530 (India Standard Time)----------PRE_AUTH_END1----------- [200] Fri May 28 2021 10:40:57 GMT+0530 (India Standard Time) /login [200] Fri May 28 2021 10:40:57 GMT+0530 (India Standard Time) /styles/fonts.css [200] Fri May 28 2021 10:40:58 GMT+0530 (India Standard Time) /styles/style.css [200] Fri May 28 2021 10:40:58 GMT+0530 (India Standard Time) /js/common.js [200] Fri May 28 2021 10:40:58 GMT+0530 (India Standard Time) /js/jquery-3.3.1.min.js [200] Fri May 28 2021 10:40:58 GMT+0530 (India Standard Time) /js/functions.js [200] Fri May 28 2021 10:40:58 GMT+0530 (India Standard Time) /logo.png [200] Fri May 28 2021 10:40:58 GMT+0530 (India Standard Time) /background.jpg [200] Fri May 28 2021 10:40:58 GMT+0530 (India Standard Time) /fonts/Montserrat-Bold.ttf [200] Fri May 28 2021 10:40:58 GMT+0530 (India Standard Time) /fonts/Montserrat-Regular.ttf [200] Fri May 28 2021 10:40:58 GMT+0530 (India Standard Time) /logo.png [200] Fri May 28 2021 10:41:09 GMT+0530 (India Standard Time) /register [200] Fri May 28 2021 10:41:09 GMT+0530 (India Standard Time) /styles/fonts.css [200] Fri May 28 2021 10:41:09 GMT+0530 (India Standard Time) /js/jquery-3.3.1.min.js [200] Fri May 28 2021 10:41:09 GMT+0530 (India Standard Time) /js/common.js [200] Fri May 28 2021 10:41:09 GMT+0530 (India Standard Time) /styles/style.css [200] Fri May 28 2021 10:41:09 GMT+0530 (India Standard Time) /js/functions.js [200] Fri May 28 2021 10:41:10 GMT+0530 (India Standard Time) /logo.png [200] Fri May 28 2021 10:41:10 GMT+0530 (India Standard Time) /background.jpg [200] Fri May 28 2021 10:41:10 GMT+0530 (India Standard Time) /fonts/Montserrat-Bold.ttf [200] Fri May 28 2021 10:41:10 GMT+0530 (India Standard Time) /fonts/Montserrat-Regular.ttf Fri May 28 2021 10:41:40 GMT+0530 (India Standard Time)----------PRE_REG----------- Fri May 28 2021 10:41:40 GMT+0530 (India Standard Time)----------PRE_REG_END1----------- Fri May 28 2021 10:41:41 GMT+0530 (India Standard Time)statusCode: 200 Fri May 28 2021 10:41:41 GMT+0530 (India Standard Time){"Response":{"rp":{"name":"FIDOServer","id":"strongkey.com"},"user":{"name":"fido_2","id":"bSDZnlGUylsvyRhENvdbCFezD6H4MML2XQattvD-VBY","displayName":"fido_mdl"},"challenge":"Jyzfzev-UVuIgq6FSqg2Kw","pubKeyCredParams":[{"type":"public-key","alg":-7},{"type":"public-key","alg":-35},{"type":"public-key","alg":-36},{"type":"public-key","alg":-8},{"type":"public-key","alg":-43},{"type":"public-key","alg":-257},{"type":"public-key","alg":-258},{"type":"public-key","alg":-259},{"type":"public-key","alg":-37},{"type":"public-key","alg":-38},{"type":"public-key","alg":-39}],"excludeCredentials":[],"attestation":"direct"}} Fri May 28 2021 10:41:41 GMT+0530 (India Standard Time)challengeBuffer= Fri May 28 2021 10:41:41 GMT+0530 (India Standard Time)----------PRE_REG_END----------- Fri May 28 2021 10:41:51 GMT+0530 (India Standard Time)----------REG----------- Fri May 28 2021 10:41:51 GMT+0530 (India Standard Time)statusCode: 200 Fri May 28 2021 10:41:51 GMT+0530 (India Standard Time)user added: first name: fido_2 last name: mdl username: fido_2 Fri May 28 2021 10:41:51 GMT+0530 (India Standard Time)----------REG_END----------- Fri May 28 2021 10:41:51 GMT+0530 (India Standard Time){"Response":"Successfully processed registration response"} [200] Fri May 28 2021 10:41:51 GMT+0530 (India Standard Time) /login [200] Fri May 28 2021 10:41:52 GMT+0530 (India Standard Time) /styles/fonts.css [200] Fri May 28 2021 10:41:52 GMT+0530 (India Standard Time) /js/jquery-3.3.1.min.js [200] Fri May 28 2021 10:41:52 GMT+0530 (India Standard Time) /styles/style.css [200] Fri May 28 2021 10:41:52 GMT+0530 (India Standard Time) /js/common.js [200] Fri May 28 2021 10:41:52 GMT+0530 (India Standard Time) /js/functions.js [200] Fri May 28 2021 10:41:52 GMT+0530 (India Standard Time) /logo.png [200] Fri May 28 2021 10:41:52 GMT+0530 (India Standard Time) /fonts/Montserrat-Bold.ttf [200] Fri May 28 2021 10:41:52 GMT+0530 (India Standard Time) /background.jpg [200] Fri May 28 2021 10:41:52 GMT+0530 (India Standard Time) /fonts/Montserrat-Regular.ttf Fri May 28 2021 10:43:53 GMT+0530 (India Standard Time)----------PRE_AUTH----------- Fri May 28 2021 10:43:53 GMT+0530 (India Standard Time)----------PRE_AUTH_END1----------- Fri May 28 2021 10:43:53 GMT+0530 (India Standard Time)statusCode: 200 Fri May 28 2021 10:43:53 GMT+0530 (India Standard Time)----------PRE_AUTH_END----------- Fri May 28 2021 10:43:53 GMT+0530 (India Standard Time)challengeBuffer= Fri May 28 2021 10:43:53 GMT+0530 (India Standard Time){"Response":{"challenge":"BHiWLcN47LsHqYajfAQbfQ","allowCredentials":[{"type":"public-key","id":"aRJHr0OvkgjZbguy11O2nH_JFilI8BFDhGlROuvHNt-K7n1NKiDgT4bkGO_R2sjsIJpDIUHr2xqhHSBZEZeIBQ","alg":-7}],"rpId":"strongkey.com"}} Fri May 28 2021 10:43:59 GMT+0530 (India Standard Time)----------AUTH----------- Fri May 28 2021 10:43:59 GMT+0530 (India Standard Time)----------AUTH_END----------- Fri May 28 2021 10:43:59 GMT+0530 (India Standard Time){"Response":"Successfully processed sign response","jwt":"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.eyJycGlkIjoic3Ryb25na2V5LmNvbSIsImlhdCI6IlRodSBNYXkgMjcgMjI6MTQ6MDAgLTA3MDAgMjAyMSIsImV4cCI6IlRodSBNYXkgMjcgMjI6NDQ6MDAgLTA3MDAgMjAyMSIsImNpcCI6IjE5Mi4xNjguMTE5LjEiLCJ1bmFtZSI6ImZpZG9fMiIsImFnZW50IjoiTW96aWxsYS81LjAgKE1hY2ludG9zaDsgSW50ZWwgTWFjIE9TIFggMTBfMTVfNykgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzkwLjAuNDQzMC45MyBTYWZhcmkvNTM3LjM2In0.MIGGAkENu6bcAqlMVehMPdwHkVkDOBc8PUQlyoi9AH5_Ts_RdAF2P2jroHs4dURZBM4iID7Aqjq9r6Axr3ut6JmEQDaEgQJBTc39s3dUyG1o0r8YZSxxlNX7ThZfcpWcB5HV2UsIdz2T0mCn58oI8JnSgo6z0rTP9p1gdZ_2xuoA-NzF4TigAD0"} Fri May 28 2021 10:43:59 GMT+0530 (India Standard Time)statusCode: 200 Fri May 28 2021 10:43:59 GMT+0530 (India Standard Time)92 [200] Fri May 28 2021 10:43:59 GMT+0530 (India Standard Time) /dashboard [200] Fri May 28 2021 10:44:00 GMT+0530 (India Standard Time) /styles/fonts.css [200] Fri May 28 2021 10:44:00 GMT+0530 (India Standard Time) /styles/style.css [200] Fri May 28 2021 10:44:00 GMT+0530 (India Standard Time) /js/jquery-3.3.1.min.js [200] Fri May 28 2021 10:44:00 GMT+0530 (India Standard Time) /js/dashboard.js [200] Fri May 28 2021 10:44:00 GMT+0530 (India Standard Time) /styles/style.css [200] Fri May 28 2021 10:44:00 GMT+0530 (India Standard Time) /fonts/Montserrat-Bold.ttf [200] Fri May 28 2021 10:44:00 GMT+0530 (India Standard Time) /fonts/Montserrat-Regular.ttf Fri May 28 2021 10:46:19 GMT+0530 (India Standard Time)92 signed out [200] Fri May 28 2021 10:46:19 GMT+0530 (India Standard Time) /login [200] Fri May 28 2021 10:46:19 GMT+0530 (India Standard Time) /styles/fonts.css [200] Fri May 28 2021 10:46:19 GMT+0530 (India Standard Time) /js/jquery-3.3.1.min.js [200] Fri May 28 2021 10:46:19 GMT+0530 (India Standard Time) /styles/style.css [200] Fri May 28 2021 10:46:19 GMT+0530 (India Standard Time) /js/functions.js [200] Fri May 28 2021 10:46:19 GMT+0530 (India Standard Time) /js/common.js [200] Fri May 28 2021 10:46:19 GMT+0530 (India Standard Time) /logo.png [200] Fri May 28 2021 10:46:19 GMT+0530 (India Standard Time) /background.jpg [200] Fri May 28 2021 10:46:19 GMT+0530 (India Standard Time) /fonts/Montserrat-Bold.ttf [200] Fri May 28 2021 10:46:19 GMT+0530 (India Standard Time) /fonts/Montserrat-Regular.ttf [200] Fri May 28 2021 10:48:29 GMT+0530 (India Standard Time) /register [200] Fri May 28 2021 10:48:29 GMT+0530 (India Standard Time) /styles/fonts.css [200] Fri May 28 2021 10:48:29 GMT+0530 (India Standard Time) /js/jquery-3.3.1.min.js [200] Fri May 28 2021 10:48:29 GMT+0530 (India Standard Time) /styles/style.css [200] Fri May 28 2021 10:48:29 GMT+0530 (India Standard Time) /js/functions.js [200] Fri May 28 2021 10:48:29 GMT+0530 (India Standard Time) /js/common.js [200] Fri May 28 2021 10:48:29 GMT+0530 (India Standard Time) /logo.png [200] Fri May 28 2021 10:48:29 GMT+0530 (India Standard Time) /background.jpg [200] Fri May 28 2021 10:48:29 GMT+0530 (India Standard Time) /fonts/Montserrat-Bold.ttf [200] Fri May 28 2021 10:48:29 GMT+0530 (India Standard Time) /fonts/Montserrat-Regular.ttf [200] Fri May 28 2021 10:48:57 GMT+0530 (India Standard Time) /login [200] Fri May 28 2021 10:48:57 GMT+0530 (India Standard Time) /styles/fonts.css [200] Fri May 28 2021 10:48:57 GMT+0530 (India Standard Time) /styles/style.css [200] Fri May 28 2021 10:48:57 GMT+0530 (India Standard Time) /js/jquery-3.3.1.min.js [200] Fri May 28 2021 10:48:57 GMT+0530 (India Standard Time) /js/common.js [200] Fri May 28 2021 10:48:57 GMT+0530 (India Standard Time) /js/functions.js [200] Fri May 28 2021 10:48:57 GMT+0530 (India Standard Time) /logo.png [200] Fri May 28 2021 10:48:57 GMT+0530 (India Standard Time) /background.jpg [200] Fri May 28 2021 10:48:57 GMT+0530 (India Standard Time) /fonts/Montserrat-Bold.ttf [200] Fri May 28 2021 10:48:57 GMT+0530 (India Standard Time) /fonts/Montserrat-Regular.ttf
- /*** For the SKFS run 'tsl' in the terminal, output ***/
[2021-06-07T20:55:40.291-0700] [Payara 5.2020.7] [WARNING] [] [com.hazelcast.spi.impl.operationservice.impl.InvocationMonitor] [tid: _ThreadID=48 _ThreadName=hz._hzInstance_1_development.InvocationMonitorThread] [timeMillis: 1623124540291] [levelValue: 900] [[ [192.168.119.135]:4900 [development] [3.12.6] MonitorInvocationsTask delayed 7314391 ms]]
[2021-06-07T20:55:40.613-0700] [Payara 5.2020.7] [WARNING] [] [com.hazelcast.spi.impl.operationservice.impl.InvocationMonitor] [tid: _ThreadID=48 _ThreadName=hz._hzInstance_1_development.InvocationMonitorThread] [timeMillis: 1623124540613] [levelValue: 900] [[ [192.168.119.135]:4900 [development] [3.12.6] BroadcastOperationControlTask delayed 7315445 ms]]
[2021-06-07T20:55:40.726-0700] [Payara 5.2020.7] [WARNING] [] [com.hazelcast.internal.cluster.impl.ClusterHeartbeatManager] [tid: _ThreadID=4956 _ThreadName=hz._hzInstance_1_development.cached.thread-1] [timeMillis: 1623124540726] [levelValue: 900] [[ [192.168.119.135]:4900 [development] [3.12.6] Resetting heartbeat timestamps because of huge system clock jump! Clock-Jump: 7310394 ms, Heartbeat-Timeout: 60000 ms]]
- Yes I am testing Anddroid app, to perform FIDO2 authentication by making web API calls to the FIDO2 Tutorial backend (Nodejs Server). FIDO2 Tutorial backend connecting SKFS (running locally).
@prathapcoder
The FIDO2 tutorial backend was never meant to act as the backend for an Android application and this could be a possible reason you are seeing this issue. We do have a sample android application / backend that has been confirmed to work with our SKFS.
If you haven't already, try setting up and looking at the StrongKey Android FIDO2 sample application: https://github.com/StrongKey/fido2/tree/master/sampleapps/java/sacl