Skip to content

Resolve "Allow using U2F in Chrome for Android"

Jan Beckmann requested to merge kingjan1999/gitlab-ce:778-u2f-android into master

What does this MR do?

This MR improves the detection if we can use U2F in the browser, so that U2F can be used more often (for example in Chrome for Android)

Are there points in the code the reviewer needs to double check?

The now used mix of browser and feature detection is not perfect, which is mainly due to the fact that the individual browsers implement the feature differently (I couldn't find the "perfect" way).

This can lead to browsers being mistakenly regarded as supported, i.e. the user has to switch manually to the regular 2FA dialog. Thus !19938 (merged) is sometimes being thwarted here, but I don't think that's a real problem.

Why was this MR needed?

As described in gitlab-ee#778, the previous detection gave up too often too quickly so that users could not use the functionality, although it would have been technically possible.

Does this MR meet the acceptance criteria?

What are the relevant issue numbers?

Closes gitlab-ee#778

Edited by Jan Beckmann

Merge request reports