www.ovh.com - can no longer connect to our OVHcloud account using the Yubikeys used for dual authentication
Categories
(Core :: DOM: Web Authentication, defect)
Tracking
()
People
(Reporter: ctanase, Unassigned)
Details
From github: https://github.com/webcompat/web-bugs/issues/117349.
<!-- @browser: Firefox 109.0 -->
<!-- @ua_header: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/109.0 -->
<!-- @reported_with: unknown -->
<!-- @public_url: https://github.com/webcompat/web-bugs/issues/117349 -->URL: https://www.ovh.com/manager/
Browser / Version: Firefox 109.0
Operating System: Windows 10
Tested Another Browser: Yes ChromeProblem type: Site is not usable
Description: Unable to login
Steps to Reproduce:
Since the beginning of the summer, we can no longer connect to our OVHcloud account using the Yubikeys used for dual authentication. At the time, the version of Firefox in production was 101.0
Different versions have been released since then without the situation changing, neither we nor OVHcloud support have found an explanation before today.Among the users who reported problems with Yubikeys, OVHcloud finally discovered that we were the only ones to have a certain number of Yubikeys authorized to connect to the account. The bug not being reproduced on chromium-based browsers, one of their specialists made the link with a possible limit of Firefox and discovered the constant MAX_ALLOWED_CREDENTIALS with a limit of 20 : https://hg.mozilla.org/mozilla-central/file/tip/dom/webauthn/WebAuthnManager.cpp#l450
This constant was introduced by https://hg.mozilla.org/mozilla-central/rev/fa859ac8796d6bd303527e362cd546d2000bae30
We understand that this limit is necessary for security reasons, but it blocks access to the account managing our services with this provider.
Would it be possible to customize the value of this constant, from about:config for example, to allow us to find a nominal operation?Thanks in advance.
<details>
<summary>Browser Configuration</summary>
<ul>
<li>None</li>
</ul>
</details>From webcompat.com with ❤️
Change performed by the Move to Bugzilla add-on.
Updated•3 years ago
|
Updated•3 years ago
|
Updated•3 years ago
|
Updated•3 years ago
|
Comment 1•3 years ago
|
||
Description
•