fix: Use `user_verification=preferred` for ReAuth WebAuthn challenge … · googleapis/google-auth-library-python@3f88a24 · GitHub

This repository was archived by the owner on Mar 6, 2026. It is now read-only.

googleapis / google-auth-library-python Public archive

• Notifications You must be signed in to change notification settings
• Fork 351
• Star 882

• Code
• Issues
• Pull requests
• Actions
• Security and quality
• Insights

Additional navigation options

Commit 3f88a24

Browse filesBrowse the repository at this point in the historyBrowse files

authored

fix: Use user_verification=preferred for ReAuth WebAuthn challenge (#1798)

Since ReAuth is a second factor credential, it is not necessary to require UV here. This was discussed with ReAuth folks. Also, in practice, downstream clients disregard this because the U2F protocol doesn't expose UV enforcement. --------- Co-authored-by: Kevin Zheng <147537668+gkevinzheng@users.noreply.github.com> Co-authored-by: Chalmer Lowe <chalmerlowe@google.com> Co-authored-by: Anthonios Partheniou <partheniou@google.com>

1 parent f32301a commit 3f88a24
Copy full SHA for 3f88a24

2 files changed

+2-2Lines changed: 2 additions & 2 deletions

File tree

Expand file treeCollapse file tree

Open diff view settings

Filter options

• google/oauth2
  • challenges.py
• tests/oauth2
  • test_challenges.py

Expand file treeCollapse file tree

Open diff view settings

Collapse file

‎google/oauth2/challenges.py‎

Copy file name to clipboardExpand all lines: google/oauth2/challenges.py

+1-1Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
@@ -225,7 +225,7 @@ def _obtain_challenge_input_webauthn(self, metadata, webauthn_handler):
225	225	challenge=self._unpadded_urlsafe_b64recode(challenge),
226	226	timeout_ms=WEBAUTHN_TIMEOUT_MS,
227	227	allow_credentials=allow_credentials,
228		- user_verification="required",
	228	+ user_verification="preferred",
229	229	extensions=extension,
230	230	)
231	231

Collapse file

‎tests/oauth2/test_challenges.py‎

Copy file name to clipboardExpand all lines: tests/oauth2/test_challenges.py

+1-1Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
@@ -235,7 +235,7 @@ def test_security_key_webauthn():
235	235	challenge=challenge._unpadded_urlsafe_b64recode(sk_challenge["challenge"]),
236	236	timeout_ms=challenges.WEBAUTHN_TIMEOUT_MS,
237	237	allow_credentials=allow_credentials,
238		- user_verification="required",
	238	+ user_verification="preferred",
239	239	extensions=extension,
240	240	)
241	241

0 commit comments

Comments

0 (0)