search

buttercup / buttercup-desktop

:key: Cross-Platform Passwords & Secrets Vault
https://buttercup.pw
GNU General Public License v3.0
4.33k stars 331 forks source link

Dropbox login with U2F #233

Open icetee opened 7 years ago

icetee commented 7 years ago

Hi, I tried authentication Dropbox with U2F, but can't recognize key. The console writes this:

Unrecognized Content-Security-Policy directive 'worker-src'.

Refused to frame 'chrome-extension://kmendfapggjehodndflmmgagdbamhnfd/u2f-comms.html' because it violates the following Content Security Policy directive: "frame-src https://* carousel://* dbapi-6://* dbapi-7://* dbapi-8://* itms-apps://* itms-appss://* ".

sallar commented 7 years ago

@icetee Sorry can you explain more about this U2F thing? What does it do and how is related to Dropbox?

perry-mitchell commented 7 years ago

@sallar @icetee I guess this has to do with browser integration with Yubikeys (and USB dongles in general)? I also have no idea how Yubikeys interact with the browser+dropbox, but I imagine it may be something we can address if Chrome supports it (depending on electron of course).

icetee commented 7 years ago

U2F use for two factor authentication. It's like mobile authentication, it's just a USB key. Only supported by Chrome / Opera.

It can be integrated into Github, Dropbox, etc.

I found this: https://github.com/electron/electron/issues/3226

Pop-up appears, click the USB button and copies a long key to it.

perry-mitchell commented 7 years ago

Thanks @icetee, this looks somewhat promising. That being said, we're currently blocked by this, so I'll place it on hold until upstream works out integration.