duo-labs / webauthn.io

The source code for webauthn.io, a demonstration of WebAuthn.
https://webauthn.io
BSD 3-Clause "New" or "Revised" License
635 stars 116 forks source link

py_webauthn 2.0.0 version #129

Closed AlkiviadisAleiferis closed 3 months ago

AlkiviadisAleiferis commented 3 months ago

Inside the project's Pipfile a webauthn = "*" version is specified that installs py_webauthn version ^2.0.0 which has dropped some of it's functionalities and pydantic support, thus making the project unable to function properly.

MasterKale commented 3 months ago

Hello @AlkiviadisAleiferis. The Pipfile.lock specifies ==1.11.1 as the required version of webauthn...

Screenshot 2024-03-27 at 9 27 49 AM

And when I did a pipenv --rm and pipenv install just now to try and recreate your issue I confirmed that pipenv installed webauthn==1.11.1:

$> pipenv --version
pipenv, version 2023.11.17
$> pipenv graph
Loading .env environment variables...
Django==5.0.1
├── asgiref [required: >=3.7.0,<4, installed: 3.7.2]
│   └── typing-extensions [required: >=4, installed: 4.9.0]
└── sqlparse [required: >=0.3.1, installed: 0.4.4]
gunicorn==21.2.0
└── packaging [required: Any, installed: 23.2]
hiredis==2.3.2
redis==5.0.1
└── async-timeout [required: >=4.0.2, installed: 4.0.3]
webauthn==1.11.1
├── asn1crypto [required: >=1.4.0, installed: 1.5.1]
├── cbor2 [required: >=5.4.6, installed: 5.5.1]
├── cryptography [required: >=41.0.4, installed: 41.0.7]
│   └── cffi [required: >=1.12, installed: 1.16.0]
│       └── pycparser [required: Any, installed: 2.21]
├── pydantic [required: >=1.10.11, installed: 2.5.3]
│   ├── annotated-types [required: >=0.4.0, installed: 0.6.0]
│   ├── pydantic-core [required: ==2.14.6, installed: 2.14.6]
│   │   └── typing-extensions [required: >=4.6.0,!=4.7.0, installed: 4.9.0]
│   └── typing-extensions [required: >=4.6.1, installed: 4.9.0]
└── pyOpenSSL [required: >=23.2.0, installed: 23.3.0]
    └── cryptography [required: >=41.0.5,<42, installed: 41.0.7]
        └── cffi [required: >=1.12, installed: 1.16.0]
            └── pycparser [required: Any, installed: 2.21]

Are you not seeing the same behavior on your end?

AlkiviadisAleiferis commented 3 months ago

Yes @MasterKale my mistake the pipenv install command utilizes the Pipfile.lock file.

By the way if you could adopt to latest webauthn library would be nice.

Thanks for the quick response!