yubioath-flutter
yubioath-flutter copied to clipboard
Yubico
Scanning QR code stopped working on Mac
- Yubico Authenticator version: 5.1.2
- Operating system and version: Mac 10.15.1
- YubiKey model and version:
- Bug description summary:
Can't scan QR code like I used to before 10.15 & 5.1.2
Steps to reproduce
- Scan QR code
Expected result
QR code scanned
Actual results
QR code not scanned
Other info
I would like to scan QR codes so I can use my device again.
Thanks for the report.
Can you please double check what version of Yubico Authenticator you are using? The latest should be 5.0.1.
Could you also please check if Yubico Authenticator has access to Input Monitoring? This is new in MacOS Catalina. You can find it in "System Preferences" > "Security & Privacy" > "Privacy" > "Input Monitoring"
Oh sorry, that was firmware version. It's 5.0.1.
And yeah, my Yubico Authenticator requested that permission, I went there to checkbox it, and then restarted the app.
Could you run the application from a terminal with the --log-level DEBUG commandline option, try the QR scanner, and post the output here?
I'm having the same problem. I'm happy to run from the terminal if you provide the command.
Please verify that in Catalina you have the Screen Recording permission set for Yubico Authenticator (System Preferences -> Security & Privacy -> Privacy -> Screen Recording). Additional required settings will also be in Input Monitoring.
I'm running 10.15.2, if I disable the checkbox in Screen Recording it prevents me from scanning QR codes, if I check it - it works. I don't even need to restart the app.
Image import is something we have talked about and might look into in the future. Thanks!
Scanning doesn't work for me either. I'm on MacOS 10.15.4, is there anything I can do to help get this fixed? I have permissions setup like the comment above this. I'm running on version 5.03 and whenever I put a qr code on the screen I get a message saying: Failed to read credential from QR code.
Note that the qr code contains an otpauth url in my case, I'm not sure if that's supported because of #321, however just putting the secret in the QR code doesn't seem to work either. What exactly does the Yubico authenticator expect when it scans a QR code?
@wade41 A standard otpauth url should work, following the format described here. The issue you linked is about handling those links directly, not when parsed from QR code.
Could you give us any more info about the QR code so we can look into it? Maybe name the service, or post the string in the QR code with the secret removed.
It's from a project I'm working on. Utilizing ttps://github.com/endroid/qr-code to generate the QR code and https://github.com/Spomky-Labs/otphp to generate the provisioning uri.
Here's the otpauth url:
otpauth://totp/admin.Application%3Asam%40u-lab.nl?issuer=admin.Application&secret=
uri looks fine, I'm able to add it with ykman:
$ ykman oath uri "otpauth://totp/admin.Application%3Asam%40u-lab.nl?issuer=admin.Application&secret=abba"
$ ykman oath code
admin.Application:[email protected] 742944
Do you have an example QR code picture as well?
Sure thing, here you go. I shortened the secret bit in this to abba like your comment.
I am on MacOS Big Sur, and this still doesn't work. I have all permissions set properly. Please let me know anything I can do to help troubleshoot the issue.
just bought a new Yubikey, just ran into this issue when trying to setup with https://www.docusign.com/. here is the output from /Applications/Yubico\ Authenticator.app/Contents/MacOS/yubioath-desktop --log-level DEBUG
2021-03-03T21:11:36+0100 ERROR [yubikey.parse_qr:558] Failed to parse uri
Traceback (most recent call last):
File "qrc:///py/yubikey.py", line 556, in parse_qr
CredentialData.from_uri(qrdecode.decode_qr_data(qr))))
File "/Applications/Yubico Authenticator.app/Contents/Frameworks/Python.framework/Versions/3.8/lib/python3.8/site-packages/ykman/oath.py", line 124, in from_uri
raise ValueError('Invalid URI scheme')
ValueError: Invalid URI scheme
2021-03-03T21:11:40+0100 ERROR [yubikey.parse_qr:558] Failed to parse uri
Traceback (most recent call last):
File "qrc:///py/yubikey.py", line 556, in parse_qr
CredentialData.from_uri(qrdecode.decode_qr_data(qr))))
File "/Applications/Yubico Authenticator.app/Contents/Frameworks/Python.framework/Versions/3.8/lib/python3.8/site-packages/ykman/oath.py", line 124, in from_uri
raise ValueError('Invalid URI scheme')
ValueError: Invalid URI scheme
MacOS 10.15.7 Authenticator 5.0.4
Same issue, MacOS 12.2.1 and authenticator 5.1.0
2022-03-31T09:11:51-0400 ERROR [yubikey.parse_qr:925] Failed to parse uri
Traceback (most recent call last):
File "qrc:///py/yubikey.py", line 923, in parse_qr
CredentialData.parse_uri(data)))
File "/Applications/Yubico Authenticator.app/Contents/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/yubikit/oath.py", line 110, in parse_uri
raise ValueError("Invalid URI scheme")
ValueError: Invalid URI scheme
The app only requested screen recording, but I granted it input monitoring as well. No change with both.
@vosscodes Can it scan some qr codes or do you run into the same issue with every single qr code?
Had an issue but once I added:
Screen Recording permission set for Yubico Authenticator (System Preferences -> Security & Privacy -> Privacy -> Screen Recording). Additional required settings will also be in Input Monitoring.
Running Monterey 12.3.1 Yubico Authenticator v5.1.0
@vosscodes Can it scan some qr codes or do you run into the same issue with every single qr code?
sorry for the delay - not sure how I missed this. I only attempted two sources (several times with regenerated codes), but no luck with either. Unfortunately this was a corporate device that I no longer have, so I can't attempt again or get any more details.
I also have this issue. Both Screen Recording and Input Monitoring permissions have been gived to Yubico Authenticator v5.1.0. I am running macOS 12.5.1
FWIW I have a QR code scanning app "QR Capture v2.5.6 (43) by Marek Hrušovský" (from the App Store), which also uses Screen Recording permissions to read QR codes on screen. It can scan these no problem. Indeed this is how I am now getting the details across and into Yubico Authenticator on sites that do not give me a way to copy the raw secret.
I mention this to point out it is not some new limitation in recent macOS. This is possible, it is just that Yubico Authenticator v5.1.0 fails due to some bug.
@ruario We are working on a newer version of the app. If you have the time you can try out the beta here https://www.yubico.com/products/yubico-authenticator/yubico-authenticator-desktop-beta/ . It would be interesting for us to know if this works better or not. Please keep in mind that this is a beta version. Thanks!
Yubico Authenticator 6.0 has now been released and uses a new codebase. As such, this issue has been marked with the legacy label, and will be automatically closed in 7 days. If this issue is still relevant to Yubico Authenticator 6, please comment on the issue saying so, and it will be kept open (or be re-opened). Sorry for the inconvenience!
