python-fido2 VS yubikey-manager

https://fidoalliance.org https://loginwithfido.com https://w3.org/TR/webauthn-2/ https://fidoalliance.org/specs/fido-v2.1-ps-20210615/fido-client-to-authenticator-protocol-v2.1-ps-20210615.html https://github.com/yubico/Python-Fido2 https://github.com/yubico/libfido2

To start the migration process, let’s first replace u2f.start_authentication() with its counterpart. The data types that the WebAuthn API takes are not quite the same ones used in U2F API. In fact, one of the main pain points was converting the necessary fields into the correct data type.

The specification we'll be addressing says that if a user fails to identify himself/herself using his/her device's authenticator or external authenticator(s) supported by python-fido2, such user should be removed from the database, logged out of the application and then redirected to the registration page to restart the process. This is to ensure that only verified users who used the supported attestation formats during registration are authenticated and authorized.

Modern browsers support this awesome technology and there are a couple of its implemetations in various major programming languages and web frameworks, however, this multi-part post will only focus on implementing it in a Django application using a wonderful django application, django-mfa2 which utilizes python-fido2 under the hood.

But there seems to be somthing nearly finished. https://github.com/Yubico/python-fido2/blob/master/examples/server/server.py

You'll probably want at least the yubico authenticator and manager apps / tools e.g. https://www.yubico.com/products/yubico-authenticator/ https://github.com/Yubico/yubioath-flutter/releases/tag/6.1.0 https://github.com/Yubico/yubikey-manager

There is an alwaysUV option that was added to CTAP2 recently, but I think it's only the YubiKey BIO that implements it at the moment. There is an open issue to make the setting configurable in YubiKey Manager (which would presumably also tell you whether your YubiKey model supports it), but as of right now you would need the lower-level python-fido2 library to do it.

This any help? https://github.com/Yubico/yubikey-manager/issues/464

you can search for programs using whereis before running them. also it might be called something different that is why I said try the TAB autocompletion. according to their github the command is called ykman. it's a command line utility only, meaning, don't expect to see a graphical window unfortunately. there is a documentation on their site but I suggest to NOT follow it for installing as it is quite outdated (ubuntu 10.04). go to their github page I linked and follow the instructions there. can't help more as I don't use it.