search

gravitational / teleport

The easiest, and most secure way to access and protect all of your infrastructure.
https://goteleport.com
GNU Affero General Public License v3.0
17.42k stars 1.74k forks source link

U2F UX issues #640

Closed klizhentas closed 7 years ago

klizhentas commented 7 years ago

Description

Here's a list of UI/UX issues I've encountered while using U2F:

U2F Error: BAD_REQUEST

Error message. We should convert it to more human readable format.

When signing up or using u2f it's not clear that you have to press the button even following the instructions.

Now it's too many various login buttons everywhere. Rethink sign-in flow a bit especially when using U2F.

markojak commented 7 years ago

Yeah I have this problem as well - In fact I can't even get U2F to work with Teleport for sign-in Created a new user and when signing up and selecting U2F it just says BAD_REQUEST

Have tried using two different Yubikeys but no matter the order can't complete the sign up process...

klizhentas commented 7 years ago

@marchofreason what's your browser? U2F is only supported by Chrome or Opera at the moment are you using these?

markojak commented 7 years ago

@klizhentas Sorry didn't mention this but yes I did try this with Google Chrome. Need me to send you any logs / developer console output?

Using the latest release from the binaries here: v1.3.1

klizhentas commented 7 years ago

@marchofreason can you send me your teleport config with U2F section. Just make sure to remove all secrets there. What's the domain name address you are accessing it from?

markojak commented 7 years ago

@klizhentas I'm sorry the issue seems to have been that I had the configuration wrong. Auth and proxy server were the same so all I did was set U2F to enabled. Nothing further.

All working fine now!

    u2f:
      enabled: "yes"

Previously was:

    u2f:
      enabled: "yes"
      app_id: https://hostname.authserver.com:3080/appid.js
      facets:
      - https://hostname.authserver.com:3080
klizhentas commented 7 years ago

@marchofreason awesome, glad to hear that

kontsevoy commented 7 years ago

@klizhentas what are we doing with this one?

klizhentas commented 7 years ago

@kontsevoy Ideally @alex-kovoy will handle the error on the UI and show something like:

Please check your U2F token settings, make sure it is plugged in and you are using supported browser
klizhentas commented 7 years ago

and then we can close this.