Failed to register U2F token from Chromebook login window

We have our own SSO server, which has the ability to allow the registration of the U2F token from the authentication process.

This feature works well on a PC using Chrome (with or without U2F browser extension). It also works well when using a browser on a Chromebook after successful user authentication.

However, when we enable SSO on a Chromebook and try to register a U2F token during the authentication process, registration does not work. After some debugging, we find that the onMessage event onMessage not called after sending a U2F register request to the u2f_register_request channel.

However, the same is not true for the request for signature (for authentication after registration using a PC). When we send a request to u2f_sign_request , we successfully receive the message in the onMessage .

Has anyone encountered this problem before? or know about the work that will allow us to complete the registration during the authentication process?

Below is the code used to send to the channel:

//1. connect to extension

 var port = chrome.runtime.connect("kmendfapggjehodndflmmgagdbamhnfd", {'includeTlsChannelId': true}); 

// 2. bind callback function

 port.onMessage.addEventListener(function(message) { // this callback not been invoked if post 'u2f_register_request' message to channel in chrome OS login page handler({'data': message}); }); 

// 3. send a message to the extension.

 port.postMessage({ type: 'u2f_register_request', signRequests: signRequests, registerRequests: registerRequests, timeoutSeconds: (typeof opt_timeoutSeconds !== 'undefined' ? opt_timeoutSeconds : u2f.EXTENSION_TIMEOUT_SEC), requestId: reqId }); 

The code used can be found at ( https://github.com/Yubico/java-u2flib-server/blob/master/u2flib-server-demo/src/main/resources/assets/u2f-api.js )

Chromebook information is as follows:

Google Chrome Version (and Chromebook Information)
Version: 43.0.2357.125
Frame version: 6946.58.0 (Official Build) stable kip channel
Software Version: Google_Kip.5216.227.5
Startup Mode: Verified
Model: HP Chromebook 11 2100-2199 / HP Chromebook 11 G3

+5
source share

All Articles