search

Yubico / yubioath-flutter

Yubico Authenticator for Desktop (Windows, macOS and Linux) and Android
https://developers.yubico.com/yubioath-flutter/
Apache License 2.0
1.02k stars 138 forks source link

[Bug] 7.0.0 - TOTP Codes Generating without Touch #1648

Open MrMase opened 2 months ago

MrMase commented 2 months ago

Issue type Bug report

Description Noticed that 2nd Yubikey has certain entries that generate TOTP codes without requirement of Click and Hold then Press Yubikey Not sure if issue is service specific but timeout codes seem to be in sync, once timeout expires codes instantly regenerate again without touch requirement.

Steps to reproduce and other useful info

  1. Open Yubico Authenticator
  2. Select Device
  3. Unlock Device if protected by code

Image for reference (Redacted to protect privacy) image

Technical information Operating System: Windows 10 Yubico Authenticator Version: 7.0.0

MrMase commented 2 months ago

Just for clarity this is a seperate issue to #1647 raised where behaviour is different but both issues exist on the same system when both keys plugged in.

dainnilsson commented 2 months ago

When loading a credential onto the YubiKey you can specify whether or not to require touch for the credential. Unfortunately this is not modifiable post creation. Instead you'll have to delete and re-load the credential if you need it change this behavior.