Github 2FA security key not working (v 2.6.3)

Christopher Timm

Hi,

I am using a security key to access my Github Account with 2FA. So I was happy that Sourcetree supports 2FA now.

But when I want to use my security key (not the key from the phone) I get the message "This browser doesn't support security keys - We recommend updating to the latest Google Chrome to start using security key devices".

Is this a local problem on my mac?
How can I fix it?

My Chrome is already on the latest Version.

Thanks for your reply.

OS: Mac
Key: Yubikey

Ana Retamal

Hi Christopher, looks like you're affected by this issue SRCTREE-4664. In the comments you can find an explanation by one of our Sourcetree developers as of why is this happening:

The dialog that loads in SourceTree contains a WebView, an Apple-provided control that uses Safari's WebKit. It loads the appropriate login for the service in use, either Bitbucket or GitHub, proceeds. If there's a requirement for two factor authentication or other things it may require additional interaction, again within that web page, to continue.

The page loaded requires Chrome (which isn't available in SourceTree) because it has certain functionality that other browsers don't related to cryptography. There is no way to make a WebView use another browser, it's WebKit only. There is also no way to embed Chrome within an application.

His recommendation is to use a verification code until Apple adds support for the "FIDO U2F" standard within both Safari and its system-supplied framework, WebKit.

Hope that helps!

Ana