joelekstrom / fastmate

A native Fastmail-wrapper for Mac.
MIT License
192 stars 12 forks source link

Unable to use YubiKey 5Ci #90

Closed pro-sumer closed 1 year ago

pro-sumer commented 2 years ago

In Fastmate I can't register my YubiKey 5Ci as a second factor for Fastmail.

Additionally, if I first add it in a browser, I can't use the key to log in into Fastmail in Fastmate.

Am I doing it wrong or does Fastmate not support (WebAuthn) security keys?

joelekstrom commented 2 years ago

You’re not doing anything wrong. WebKit/WKWebView does not support OAuth of of the box. Fastmate might be able to work around this by making a separate OAuth session. This would require opening Safari on the login screen and logging in via that before returning to Fastmate. It’s a non-trivial amount of work, and I’ll consider this a feature request that I’ll look into!

melvinsalas commented 1 year ago

This issue is very old, @pro-sumer do you still have doubts or has the problem been solved?

pro-sumer commented 1 year ago

This issue is very old, @pro-sumer do you still have doubts or has the problem been solved?

I'm "waiting" for @joelekstrom to implement this, but he might be waiting for Apple to make this even possible?

WebAuthn support would be so nice, in particular now that Apple implemented Passkeys!

pro-sumer commented 1 year ago

Also see #44

joelekstrom commented 1 year ago

I'll close this as a dupe of #44. It's really up to Fastmail. They don't have Webauthn which would be the easiest way for Fastmate to integrate. They do have an OAuth API but it's only for select partners. See the other issue