search

dlenski / gp-saml-gui

Interactively authenticate to GlobalProtect VPNs that require SAML
GNU General Public License v3.0
293 stars 66 forks source link

Change to pyqt5 in order to support fido2/webauthn/u2f #26

Open NgoHuy opened 3 years ago

NgoHuy commented 3 years ago

Hi dlenski I see that gobject not support fido2 as chromium based browser. Can you chang to pyqt5?

Best regards Severus

dlenski commented 3 years ago

I see that gobject not support fido2 as chromium based browser.

Huh. Do you have documentation or a reference for that? I don't know of any VPN that uses fido2/u2f/webauthn for login, so can't test.

Can you chang to pyqt5?

I personally don't have any interest in rewriting to use QT, but a pull request to implement it as an alternative interface would be welcome. :)

NgoHuy commented 3 years ago

I use your program and it said that :) I use other program (https://github.com/yuezk/GlobalProtect-openconnect) then it only works with valid certificate (https://github.com/yuezk/GlobalProtect-openconnect/issues/33)

dlenski commented 3 years ago

I use your program and it said that :)

Please show how/where it said that. Screenshot? Logging output?

If I do gp-saml-gui -u https://demo.yubico.com/webauthn-technical/registration (to connect to Yubico's webauthn demo site), then I get…

image

Does your VPN really not support using OTP mode ("long-press") rather than webauthn/fido? Like I said, I've never seen such a VPN.

I use other program (https://github.com/yuezk/GlobalProtect-openconnect) then it only works with valid certificate (yuezk/GlobalProtect-openconnect#33)

They're both open source software. You're welcome to contribute PRs :)

deanveloper commented 1 year ago

Related - https://gitlab.com/openconnect/openconnect/-/issues/422

I don't know of any VPN that uses fido2/u2f/webauthn for login, so can't test.

My employer uses Okta for logins, including VPN logins