search

SUNET / nextcloud-stepupauth

The Step Up Authentication app allows you to trigger a second factor authentication for Single Sign On (SSO) accounts in Nextcloud.
GNU Affero General Public License v3.0
1 stars 0 forks source link

Test case reports #1

Open mickenordin opened 7 months ago

mickenordin commented 7 months ago

Please comment with OS/Client combinations on this issue if you have tested any of the test cases documented in the Readme.

merlijn-de-smit commented 7 months ago

Web logon with TOTP provider configured, Windows 10 and Linux Ubuntu: works fine.

mickenordin commented 7 months ago

Web logon with TOTP provider configured, Windows 10 and Linux Ubuntu: works fine.

@merlijn-de-smit which browser did you use for the tests?

merlijn-de-smit commented 7 months ago

Edge on Windows, Firefox on Ubuntu. Should've used the same on both, but didn't think of it.

mickenordin commented 7 months ago

Edge on Windows, Firefox on Ubuntu. Should've used the same on both, but didn't think of it.

No, that is perfect, thank you so much.

merlijn-de-smit commented 7 months ago

Connecting through WebDAV (standard Windows Explorer function): direct access without TOTP, which is as expected.

Connecting through the Desktop Client (version 3.10.2): direct access without TOTP authentication, on a completely fresh install of the client (e.g. removing everything Nextcloud-related from AppData, setting up connection and sync folder from the beginning).

merlijn-de-smit commented 6 months ago

Send and receive federated share (Windows 10, Edge and Desktop Client): works, receiver gets acceptance message, no MFA needed for receiver who has no MFA configured (myself on su.drive.sunet.se).

Web logon with Webauthn provider configured (Windows 10, Edge): works.

Web logon with both TOTP and Webauthn provider configured (Windows 10, Edge): works, choice between MFA methods, both work,

merlijn-de-smit commented 6 months ago

Desktop client logon - Single signon with application token (Windows 10, Edge): as expected (sync process starts without second factor asked for).

sunetzacharias commented 2 months ago

In this case I've added an iOS Keychain. Adding worked wonderfully (both in Firefox, and Chrome)! Then when trying to use it when logging in, its like if Firefox and the app can't trigger the iOS Keychain to be used in Firefox. Logging in using the iOS Keychain works as expected in Chrome.

Picture below is from Firefox 124.0.2, with a bunch of addons (but none of them hinder me from using Firefox with iOS Keychain in for example eduID.se)

Screenshot 2024-04-17 at 14 26 45
mickenordin commented 2 months ago

In this case I've added an iOS Keychain. Adding worked wonderfully (both in Firefox, and Chrome)! Then when trying to use it when logging in, its like if Firefox and the app can't trigger the iOS Keychain to be used in Firefox. Logging in using the iOS Keychain works as expected in Chrome.

Picture below is from Firefox 124.0.2, with a bunch of addons (but none of them hinder me from using Firefox with iOS Keychain in for example eduID.se) Screenshot 2024-04-17 at 14 26 45

Just to clairify: The issue that when using the iOS Key chain the fingerprint dialog is not triggered in firefox, while it is in chrome. It is unclear if this is a general issue with nextcloud on firefox in mac's or if it is specific to the stepup auth app. This needs to be triaged.