Auto-connect request: hardware-observe for bitwarden

store-requests privileged-interfaces
1 
name: bitwarden
description: bitwarden is a password manager
snapcraft: generated from https://github.com/bitwarden/clients/blob/7751adf4ad59f54cc38d9cd0dbf00215dac955a7/apps/desktop/electron-builder.json
upstream: github.com/bitwarden/clients
upstream-relation: maintainer
plugs:
   hardware-observe:
     interface: hardware-observe
     request-type: auto-connection
     reasoning: Hardware observe is needed to list USB fido2 authenticators for 2-factor authenticator. 2-factor authentication is a basic feature users expect to work and should not require manual plug connection.

https://github.com/bitwarden/clients/pull/22885 contains a detailed description of the bug, but essentially u2f-devices is not sufficient by itself to make fido2 authenticators over usb work over the electron based implementation. While u2f-devices does allow talking to the devices directly, it does not allow enumerating the devices via the interface chromium/electron use. Thus, hardware-observe is needed as an additional interface in order to allow users to authenticate with fido2 keys as a second-factor.

Thank you for your consideration.

2

This request has been added to the queue for review by the @reviewers team.

3

+1 from me (#voteFor) - this is entirely reasonable and expected to allow the u2f-devices interface to function (and that interface is already auto-connected).

1 Like
4

Hi @quexten :slight_smile:

Thank you for the well-documented request! The upstream PR reference and the clear explanation of why u2f-devices alone is insufficient are much appreciated.

Thus, +1 from me for auto-connecting hardware-observe for the bitwarden snap!

5

Hey folks!

The bug report makes it clear that hardware-observe is needed in this case. +1 from me for granting bitwarden auto-connection to the hardware-observe interface.

6

Hello @quexten :slight_smile:

+2 votes for, 0 against, the request is approved. I will proceed with granting auto-connection to the hardware-observe interface, when you update the snapcraft file!

1 Like
7

Thank you so much @yomonokio !