yubioath-flutter
yubioath-flutter copied to clipboard
Authenticator in background doesn't detect if YubiKey is removed
- Yubico Authenticator version: 4.3.6
- Operating system and version: tested on Windows 1803-1903 + 20H1
- YubiKey model and version: 5 NFC, 5.1.2
- Bug description summary: You can access all saved OAUTH credentials without entering password when Authenticator was minimized beforehand and YubiKey was replugged to computer.
Steps to reproduce
- Open Yubico Authenticator
- Insert YubiKey and enter password
- Minimize the Yubico Authenticator
- Remove YubiKey
- work on your things, put computer on sleep etc
- Insert YubiKey
- Open minimized Yubico Authenticator from tray
- Password entrance not required anymore, you have access to all OAUTH codes.
Expected result
User should be forced to enter password at step 7.
Actual results
You can access all saved credentials without entering password when Authenticator was minimized before.