[Bug]: Show notice for passwordless login when in http

Open Beginner friendly
#59,876 1 comment 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
2/5
Estimated time
1-3 hours
Newbie friendliness
72/100
Issue type
Bug
Clarity
Clearly specified
Activity status
Quiet
Tech stack
javascript
Domain
authentication, frontend, security

Research direction

Start with apps/settings/src/components/WebAuthn/WebAuthnSection.vue at lines 29-31 and compare the notice pattern in twofactor_webauthn/src/components/LoginSetup.vue at lines 16-22. Update the settings experience so users on HTTP are told that WebAuthn requires a secure context, then verify the notice while visiting settings over HTTP.

Written by the indexing model from the issue text.

Description

0. Needs triage 32-feedback bug feature: authentication papercut
Bug description

https://github.com/nextcloud/server/blob/31083ca489744c72196505e1b52ebf7ef4e96605/apps/settings/src/components/WebAuthn/WebAuthnSection.vue#L29-L31

Steps to reproduce
  1. Use nextcloud with http only
  2. Visiting settings
  3. Wonder why you browser does not support webauth
Expected behavior

We should let the user know that webauthn is only supported in secure context aka https.

Like:

https://github.com/nextcloud/twofactor_webauthn/blob/48a15f58dead55680af0b2a1da772dc2e84ec188/src/components/LoginSetup.vue#L16-L22

Nextcloud Server version

master

Dominant language
PHP
Stars
36.9k
Forks
5.2k
Avg merge
2d
Merged PRs (30d)
725

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from nextcloud/server

All issues in nextcloud/server

Similar issues

More PHP issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.