search

prefiks / u2f4moz

U2F support extension for Firefox
GNU Lesser General Public License v2.1
197 stars 15 forks source link

Doesn't work with Dropbox and U2F website #42

Closed Crocmagnon closed 7 years ago

Crocmagnon commented 8 years ago

Hello, I have troubles getting the extension to work with Dropbox. It works fine on GitHub (though I have to click on "Use security key" when asked to enter authenticator code).

Here's my setup :

Other machine, same behavior :

Both have same version of extension : 0.0.19, from Firefox "store"

The u2f website also doesn't like it, here is a screenshot : Screenshot

I tried to view the logs but the extension doesn't seem to be called, it only shows entries related to GitHub.

Crocmagnon commented 8 years ago

By the way, I'm quite proud of opening issue #42 ! 😄

Crocmagnon commented 8 years ago

I tested under Fedora 24, updating the original post.

prefiks commented 8 years ago

Hello,

Dropbox, checks what user-agent is sent by browser and sends code for u2f handling only if it detects Chrome. If i remember correctly if you changed user-agent in Firefox to presents itself as Chrome, then you were able to register/sign using your u2f key.

Same situation with demo page, it checks if your browser is Chrome and if not shows that message.

Crocmagnon commented 8 years ago

I thought only Google did that on their authentication pages :/ It seems like a duct tape workaround, isn't there really any better solution ?

If not, how should I change my user agent to present it as Chrome ?

I can see on the review page of your extension in Firefox modules that it works with Dropbox for this guy. Do you have more information ?

prefiks commented 8 years ago

You could use extension like that one: https://addons.mozilla.org/pl/firefox/addon/user-agent-switcher/ it should allow you to change your user-agent.

Crocmagnon commented 8 years ago

Ok, I confirm it works when changing the user agent. But it kinda s*cks that some devs implemented it like only Chrome could support U2F...

mnoorenberghe commented 8 years ago

Please report this to the authors of the sites. They should be doing feature detection instead of using UA sniffing for this.

Crocmagnon commented 8 years ago

Yes obviously, I didn't expect @prefiks to change Dropbox code 😉

So if there is no better solution than presenting Chrome's user agent, maybe we could close this issue ?

mhalano commented 8 years ago

@Crocmagnon Did you report the bug to Dropbox? May be report and post the status in this issue until become fixed.

KellerFuchs commented 8 years ago

@Crocmagnon @mhalano Should this issue be closed? (This doesn't prevent @Crocmagnon from comenting once websites get fixed)

mhalano commented 8 years ago

Sure. Why not?

On Sep 30, 2016, The Fox in the Shell notifications@github.com wrote:

@Crocmagnon @mhalano Should this issue be closed? (This doesn't prevent @Crocmagnon from comenting once websites get fixed)

Sent with K-@ Mail - the evolution of emailing.