Skip to content

fix(auth): properly extract stdout from gnubby webauthn plugin failures#17885

Open
macastelaz wants to merge 4 commits into
mainfrom
fix-webauthn-swallowed-errors
Open

fix(auth): properly extract stdout from gnubby webauthn plugin failures#17885
macastelaz wants to merge 4 commits into
mainfrom
fix-webauthn-swallowed-errors

Conversation

@macastelaz

Copy link
Copy Markdown
Contributor

Context: b/534311894

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request modifies the webauthn handler to manually handle non-zero exit statuses from the plugin subprocess, allowing for more detailed error reporting. The feedback points out that unconditionally stripping the first four bytes of stdout can corrupt plain-text error messages, and suggests verifying if the unpacked length matches the remaining bytes before stripping.

Comment thread packages/google-auth/google/oauth2/webauthn_handler.py Outdated
@macastelaz
macastelaz force-pushed the fix-webauthn-swallowed-errors branch from 0d45360 to cb03c15 Compare July 23, 2026 21:45
@macastelaz
macastelaz marked this pull request as ready for review July 23, 2026 21:53
@macastelaz
macastelaz requested review from a team as code owners July 23, 2026 21:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant