Support webauthn MFA factor

[sharpone74]

Looks like webauthn (yubikey 5c nano in this case) isn't supported. It would be great if it was.

DEBU[0022] Step: 2
INFO[0022] Requesting MFA. Please complete two-factor authentication with your second device
DEBU[0022] 00uMrQE7-7jbCWJZz61wCH5d4PKf7V8YVp2IgMb0S4
DEBU[0022] Failed to validate credentials: factor webauthn not supported
Failed to validate credentials```

[nickatsegment]

I don't have access to a webauthn device here, so don't look at me :D Happy to accept a PR.

[sharpone74]

How about if I buy you one? ;)

[nickatsegment]

How about if I buy you one? ;)

Haha, yeah, I can't really do that; I answer only to the crystalline entity that runs Segment.

[smiller171]

https://www.yubico.com/product/security-key-by-yubico

[stale]

This issue has been automatically marked stale because it has not had any activity in the last 60 days. If no further activity occurs within 7 days, it will be closed. Closed does not mean "never", just that it has no momentum to get accomplished any time soon.
See CONTRIBUTING.md for more info.

[nickatsegment]

Well I actually bought a Yubikey 5c myself. I believe this would give us TouchID support as well, which would be super cool.

That said, there are no plans to implement this as yet. Happy to accept a PR though, and I can even test it now

[smiller171]

I believe this would give us TouchID support as well

Right now I'm pretty sure only Chrome can use TouchID for WebAuthn, so you'd need to open a browser for the auth request.

[stale]

This issue has been automatically marked stale because it has not had any activity in the last 60 days. If no further activity occurs within 7 days, it will be closed. Closed does not mean "never", just that it has no momentum to get accomplished any time soon.
See CONTRIBUTING.md for more info.

[smiller171]

Even if it's not being tackled right now, I think it makes sense to keep this issue open

[bennumo]

Yeah, I'm happy to buy you one as well! We're looking to shift from YubiKey + Seedfile to the U2F / WebAuthN implementation in Okta. For us, this would help us to manage the growing list of YubiKeys we have. It's getting difficult to manage seed files at scale.

[nickatsegment]

@bennumo fair enough, but like I said, no plans to implement this by maintainers at present. PRs encouraged (after #236 is lifted)

[stale]

This issue has been automatically marked stale because it has not had any activity in the last 60 days. If no further activity occurs within 7 days, it will be closed. Closed does not mean "never", just that it has no momentum to get accomplished any time soon.
See CONTRIBUTING.md for more info.

[smiller171]

I really don't like this definition of closed personally. I'm more in favor of a label indicating that an issue is low-priority but that PRs are welcome

[nickatsegment]

#278