Skip to content

Successfully pushed a gem using webauthn authentication, even though the webpage authentication failed #4317

@postmodern

Description

@postmodern

I just successfully pushed ronin-support-1.0.5 to rubygems.org. I was prompted to authenticate my device using the WebAuthN URL. I visited the URL in my web browser (Chrome). The webpage prompted me to tap by 2FA device (a YubiKey) which I already have configured with rubygems.org and have successfully used it to generate 2FA/OTP codes. However, rubygems.org redirected me to https://rubygems.org/webauthn_verification/failed_verification?error=Failed+to+fetch claiming it failed to authenticate my device, but the output of gem push said that it successfully pushed the gem.

gem push output

Pushing gem to https://rubygems.org...
You have enabled multi-factor authentication. Please visit https://rubygems.org/webauthn_verification/XXXXXXXXXXX?port=NNNNN to authenticate via security device. If you can't verify using WebAuthn but have OTP enabled, you can re-run the gem signin command with the `--otp [your_code]` option.
You are verified with a security device. You may close the browser window.
Successfully registered gem: ronin-support (1.0.5)

Screenshot

rubygems org_webauthn_verification_failed_verification_error=Failed+to+fetch

Version Information

  • ruby 3.3.0 (2023-12-25 revision 5124f9ac75) [x86_64-linux]
  • rubygems 3.5.3

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions