teleport

mirror of https://github.com/gravitational/teleport.git synced 2026-09-24 16:17:11 +08:00

Files

T

Alan Parra b2c5c8ecb0 Add FIDO2 passwordless login and registration to tsh (#11321 )

Passwordless login is enabled by the global `--pwdless` flag. Registration gets
a new prompt and an `--allow-passwordless` flag.

UX messages were tweaked to follow the descriptions on RFD 53: Passwordless
FIDO2[1].

Passwordless login requires two touches for all devices (both PIN and biometric).
I'd like to get it down to a single touch, at least for the most common
situations, but that'll be a follow up to this work.

Passwordless support requires `tsh` to be compiled with the `libfido2` tag, try
`go build -tags=libfido2 ./tool/tsh`.

#9160

[1] https://github.com/gravitational/teleport/blob/master/rfd/0053-passwordless-fido2.md#ux

* Allow reuse of devices for passwordless
* Implement passwordless registration in tsh
* Add better tracing to FIDO2 filters
* Implement passwordless logins in tsh
* Make --pwdless a global flag
* Fix lint errors
* Fix U2F tests
* Use initClient's URL as origin
* Distinguish whether --allow-passwordless is set or unset

2022-03-23 18:38:10 +00:00

api.go

Wire FIDO2 into tsh login and registration (#11241 )

2022-03-21 14:35:08 +00:00

client_data.go

Support Webauthn challenges in tsh login (#8176 )

2021-09-09 12:39:08 -07:00

export_fido2_test.go

Implement FIDO2 login and registration (#11166 )

2022-03-18 15:14:24 +00:00

export_test.go

Support Webauthn challenges in tsh login (#8176 )