gp-saml-gui icon indicating copy to clipboard operation
gp-saml-gui copied to clipboard

Change to pyqt5 in order to support fido2/webauthn/u2f

Open NgoHuy opened this issue 3 years ago • 4 comments

Hi dlenski I see that gobject not support fido2 as chromium based browser. Can you chang to pyqt5?

Best regards Severus

NgoHuy avatar Mar 13 '21 14:03 NgoHuy

I see that gobject not support fido2 as chromium based browser.

Huh. Do you have documentation or a reference for that? I don't know of any VPN that uses fido2/u2f/webauthn for login, so can't test.

Can you chang to pyqt5?

I personally don't have any interest in rewriting to use QT, but a pull request to implement it as an alternative interface would be welcome. :)

dlenski avatar Mar 13 '21 21:03 dlenski

I use your program and it said that :) I use other program (https://github.com/yuezk/GlobalProtect-openconnect) then it only works with valid certificate (https://github.com/yuezk/GlobalProtect-openconnect/issues/33)

NgoHuy avatar Mar 14 '21 13:03 NgoHuy

I use your program and it said that :)

Please show how/where it said that. Screenshot? Logging output?

If I do gp-saml-gui -u https://demo.yubico.com/webauthn-technical/registration (to connect to Yubico's webauthn demo site), then I get…

image

Does your VPN really not support using OTP mode ("long-press") rather than webauthn/fido? Like I said, I've never seen such a VPN.

I use other program (https://github.com/yuezk/GlobalProtect-openconnect) then it only works with valid certificate (yuezk/GlobalProtect-openconnect#33)

They're both open source software. You're welcome to contribute PRs :)

dlenski avatar Mar 14 '21 22:03 dlenski

Related - https://gitlab.com/openconnect/openconnect/-/issues/422

I don't know of any VPN that uses fido2/u2f/webauthn for login, so can't test.

My employer uses Okta for logins, including VPN logins

deanveloper avatar Nov 16 '22 20:11 deanveloper