Closed Bug 1812592 Opened 3 years ago Closed 3 years ago

www.ovh.com - can no longer connect to our OVHcloud account using the Yubikeys used for dual authentication

Categories

(Core :: DOM: Web Authentication, defect)

Desktop
All
defect

Tracking

()

RESOLVED DUPLICATE of bug 1812351

People

(Reporter: ctanase, Unassigned)

Details

From github: https://github.com/webcompat/web-bugs/issues/117349.

<!-- @browser: Firefox 109.0 -->
<!-- @ua_header: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0 -->
<!-- @reported_with: unknown -->
<!-- @public_url: https://github.com/webcompat/web-bugs/issues/117349 -->

URL: https://www.ovh.com/manager/

Browser / Version: Firefox 109.0
Operating System: Windows 10
Tested Another Browser: Yes Chrome

Problem type: Site is not usable
Description: Unable to login
Steps to Reproduce:
Since the beginning of the summer, we can no longer connect to our OVHcloud account using the Yubikeys used for dual authentication. At the time, the version of Firefox in production was 101.0
Different versions have been released since then without the situation changing, neither we nor OVHcloud support have found an explanation before today.

Among the users who reported problems with Yubikeys, OVHcloud finally discovered that we were the only ones to have a certain number of Yubikeys authorized to connect to the account. The bug not being reproduced on chromium-based browsers, one of their specialists made the link with a possible limit of Firefox and discovered the constant MAX_ALLOWED_CREDENTIALS with a limit of 20 : https://hg.mozilla.org/mozilla-central/file/tip/dom/webauthn/WebAuthnManager.cpp#l450

This constant was introduced by https://hg.mozilla.org/mozilla-central/rev/fa859ac8796d6bd303527e362cd546d2000bae30

We understand that this limit is necessary for security reasons, but it blocks access to the account managing our services with this provider.
Would it be possible to customize the value of this constant, from about:config for example, to allow us to find a nominal operation?

Thanks in advance.

<details>
<summary>Browser Configuration</summary>
<ul>
<li>None</li>
</ul>
</details>

From webcompat.com with ❤️

Change performed by the Move to Bugzilla add-on.

OS: Android → Linux
Hardware: Unspecified → Desktop
Summary: www.ovh.com - site is not usable → www.ovh.com - can no longer connect to our OVHcloud account using the Yubikeys used for dual authentication
OS: Linux → All
Component: General → DOM: Web Authentication
Status: NEW → RESOLVED
Closed: 3 years ago
Duplicate of bug: 1812351
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.