pyu2f

import os from pyu2f import model from pyu2f.convenience import authenticator # --- Placeholder values for demonstration --- # In a real application, these would come from a U2F challenge # issued by a relying party (e.g., a web service). APP_ID = 'https://example.com' ORIGIN = 'https://example.com' CHALLENGE_BASE64 = 'some_base64_challenge_data_from_server' KEY_HANDLE_BASE64 = 'some_base64_key_handle_from_previous_registration' print("Attempting U2F authentication...") try: # 1. Prepare registered key and challenge data # The RegisteredKey model requires a base64 encoded key handle. registered_key = model.RegisteredKey(KEY_HANDLE_BASE64.encode('utf-8')) # The challenge data is a list of dictionaries, each containing # a RegisteredKey object and the raw challenge. challenge_data = [{ 'key': registered_key, 'challenge': CHALLENGE_BASE64.encode('utf-8') }] # 2. Create the authenticator interface api = authenticator.CreateCompositeAuthenticator(ORIGIN) # 3. Authenticate with the U2F device # This will typically prompt the user to touch their security key. response = api.Authenticate(APP_ID, challenge_data) if response: print("Authentication successful!") print(f"Client Data: {response.client_data.decode('utf-8')}") print(f"Signature Data: {response.signature_data.decode('utf-8')}") else: print("Authentication failed or timed out.") except Exception as e: print(f"An error occurred during authentication: {e}") # Optional: Using a custom authenticator plugin via environment variable # SK_SIGNING_PLUGIN = '/path/to/your/custom_authenticator_script.py' # os.environ['SK_SIGNING_PLUGIN'] = SK_SIGNING_PLUGIN # print(f"Custom authenticator plugin set: {os.environ.get('SK_SIGNING_PLUGIN')}") # Then call Authenticate again. The plugin script must adhere to # the specification in customauthenticator.py (refer to source code).