# Não é possível autenticar com YubiKey ao verificar novo e-mail

**URL:** https://meta.discourse.org/t/cannot-authenticate-with-yubikey-when-verifying-new-email/154578
**Category:** Bug
**Created:** [11 Junho , 2020 21:05 UTC](https://meta.discourse.org/t/cannot-authenticate-with-yubikey-when-verifying-new-email/154578 "2020-06-11T21:05:41Z")
**Posts on this page:** 13
**Page:** 1

<div class="post-metadata">

### Author: ![Wolftallemo](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/wolftallemo/32/289645_2.png) [@Wolftallemo](https://meta.discourse.org/u/Wolftallemo)
#### Post date: [11 Junho , 2020 21:05 UTC](https://meta.discourse.org/t/cannot-authenticate-with-yubikey-when-verifying-new-email/154578/1 "2020-06-11T21:05:41Z")

</div>

Quando tento alterar meu e-mail principal, ao tentar autenticar com minha YubiKey, sou redirecionado para uma página em branco, enquanto ao tentar com TOTP, funciona.

Tentar autenticar com uma YubiKey me leva para `https://example.com/u/confirm-new-email/` em vez da página de autenticação da YubiKey (ou será que é a URL correta e ela não está sendo exibida?)

---

<div class="post-metadata">

### Author: ![Stephen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/stephen/32/95011_2.png) [@Stephen](https://meta.discourse.org/u/Stephen)
#### Post date: [11 Junho , 2020 22:06 UTC](https://meta.discourse.org/t/cannot-authenticate-with-yubikey-when-verifying-new-email/154578/2 "2020-06-11T22:06:03Z")

</div>

Você já tentou fazer a mesma coisa aqui no Meta?

---

<div class="post-metadata">

### Author: ![Wolftallemo](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/wolftallemo/32/289645_2.png) [@Wolftallemo](https://meta.discourse.org/u/Wolftallemo)
#### Post date: [11 Junho , 2020 22:15 UTC](https://meta.discourse.org/t/cannot-authenticate-with-yubikey-when-verifying-new-email/154578/3 "2020-06-11T22:15:08Z")

</div>

Eu obtive exatamente o mesmo resultado

 ![image](https://global.discourse-cdn.com/meta/original/3X/9/2/923fdf0740e9e5169a94908da7a9fde1a12d27c4.png)

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [12 Junho , 2020 03:59 UTC](https://meta.discourse.org/t/cannot-authenticate-with-yubikey-when-verifying-new-email/154578/4 "2020-06-12T03:59:32Z")

</div>

Conseguimos reproduzir isso, @tshenry?

---

<div class="post-metadata">

### Author: ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [12 Junho , 2020 04:01 UTC](https://meta.discourse.org/t/cannot-authenticate-with-yubikey-when-verifying-new-email/154578/5 "2020-06-12T04:01:19Z")

</div>

A mesma coisa aconteceu comigo. Tentar usar o WebAuthn falha com um POST retornando 400. Voltar para o TOTP funciona, então o problema é reproduzível apenas no caminho do WebAuthn.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [12 Junho , 2020 04:01 UTC](https://meta.discourse.org/t/cannot-authenticate-with-yubikey-when-verifying-new-email/154578/6 "2020-06-12T04:01:56Z")

</div>

OK, devemos atribuir esse bug ao @sam

---

<div class="post-metadata">

### Author: ![dan](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/dan/32/101549_2.png) [@dan](https://meta.discourse.org/u/dan)
#### Post date: [12 Junho , 2020 11:51 UTC](https://meta.discourse.org/t/cannot-authenticate-with-yubikey-when-verifying-new-email/154578/13 "2020-06-12T11:51:59Z")

</div>

Ocorreram alguns erros de JavaScript que impediram o carregamento do script. Os erros foram causados pelo carregamento do `I18n` após seu uso.

[https://github.com/discourse/discourse/commit/111877db1f97271d667bdd05139c798cf7fd26d2](https://github.com/discourse/discourse/commit/111877db1f97271d667bdd05139c798cf7fd26d2)

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [12 Junho , 2020 16:17 UTC](https://meta.discourse.org/t/cannot-authenticate-with-yubikey-when-verifying-new-email/154578/14 "2020-06-12T16:17:31Z")

</div>

Você pode confirmar que isso está bom no Meta agora, @falco?

---

<div class="post-metadata">

### Author: ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [12 Junho , 2020 17:34 UTC](https://meta.discourse.org/t/cannot-authenticate-with-yubikey-when-verifying-new-email/154578/15 "2020-06-12T17:34:57Z")

</div>

Ainda muito quebrado, mas com um erro diferente:

Ao clicar no botão, recebo uma exceção no console:

```
Uncaught DOMException: String contains an invalid character _webauthn-79591e16a85801db9750996c5c059c632687959ec31675c66471d17c31cf077c.js:1
    a _webauthn-79591e16a85801db9750996c5c059c632687959ec31675c66471d17c31cf077c.js:49
    map self-hosted:240
    getWebauthnCredential _webauthn-79591e16a85801db9750996c5c059c632687959ec31675c66471d17c31cf077c.js:47
    onclick _confirm-new-email-bdb5d7a6ac7e878466fcb1dfe7263d6e00441cce01b43f225baeb0a5d475db55.js:8
    (Async: EventHandlerNonNull)
    <anonymous> _confirm-new-email-bdb5d7a6ac7e878466fcb1dfe7263d6e00441cce01b43f225baeb0a5d475db55.js:5
    jQuery 3
    <anonymous> _bootstrap-52b6b6b3fa62d64b09775e2803255326bef3a94a16063a8c191a37e0909f59d1.js:3

```

Além disso, a cor do botão está errada no modo escuro:

 ![image](https://global.discourse-cdn.com/meta/original/3X/d/d/dd13f3964032f698d3420988697b7d29cec7cb26.png)

---

<div class="post-metadata">

### Author: ![dan](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/dan/32/101549_2.png) [@dan](https://meta.discourse.org/u/dan)
#### Post date: [12 Junho , 2020 18:26 UTC](https://meta.discourse.org/t/cannot-authenticate-with-yubikey-when-verifying-new-email/154578/16 "2020-06-12T18:26:16Z")

</div>

Qual navegador e chave de segurança você está usando? Acabei de testar aqui com YubiKey 5 NFC e Chrome no Linux, e com o leitor de impressão digital do MacBook Pro e Chrome, e funcionou.

---

<div class="post-metadata">

### Author: ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [12 Junho , 2020 18:30 UTC](https://meta.discourse.org/t/cannot-authenticate-with-yubikey-when-verifying-new-email/154578/17 "2020-06-12T18:30:48Z")

</div>

Firefox e o mesmo modelo de Yubikey.

---

<div class="post-metadata">

### Author: ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [16 Junho , 2020 16:44 UTC](https://meta.discourse.org/t/cannot-authenticate-with-yubikey-when-verifying-new-email/154578/24 "2020-06-16T16:44:53Z")

</div>

Corrigido por @dan em

> <https://github.com/discourse/discourse/commit/f1b97202d445279e8a64a81fddb5678e636f5114>

---

<div class="post-metadata">

### Author: ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [16 Junho , 2020 16:44 UTC](https://meta.discourse.org/t/cannot-authenticate-with-yubikey-when-verifying-new-email/154578/25 "2020-06-16T16:44:57Z")

</div>


