search

bitwarden / mobile

Retired Bitwarden mobile app for iOS and Android (MAUI/Xamarin).
https://bitwarden.com
GNU General Public License v3.0
147 stars 24 forks source link

iOS - When Vault Timeout Action is set to Log out and 2FA is configured, Auto-fill prompt does not read NFC YubiKey. #1178

Open SergeantConfused opened 3 years ago

SergeantConfused commented 3 years ago

Describe the Bug

When you set the Vault Timeout Action to Log out, and you have 2FA using a YubiKey OTP Security Key configured: When you click on 'Passwords' at the top of the keyboard to auto-fill your credentials, the 2FA authentication step does not read the YubiKey 5C NFC, it does not display the 'Ready to Scan' prompt. Holding the YubiKey to the NFC scanner would display a banner for Yubico's website.

Steps To Reproduce

  1. Set your Vault Timeout Action to Log out.
  2. Set the Vault Timeout to 1 Minute.
  3. Go to http://vault.bitwarden.com/
  4. Tap a credential field and then tap on 'Passwords'.
  5. Enter your email address and master password.

Expected Result

Bitwarden would read the NFC YubiKey and log in.

Actual Result

Bitwarden does not prompt to scan the NFC YubiKey and you cannot log in.

Screenshots or Videos

N/A.

Environment

Additional Context

Please note that you can log in by using a YubiKey 5Ci. You can tap the YubiKey TOTP field and then tap the YubiKey 5Ci while it's connected to the Lightning port.

5cEG4JIdR6eT3mrRrB95vkmKUXwo6MgzchOXNkN commented 3 years ago

I've been experiencing the same issue on iOS 14.4. in Build Version 2.8.0 (449).

SergeantConfused commented 3 years ago

This is caused by a limitation within the operating system that prevents using NFC in the autofill flow and we cannot change that. This means that it would not be possible to use autofill on iOS if the 'Vault Timeout Action' is set to 'Log out' and the only 2FA method requires NFC.