BUG: cli auth prompt immediately dismissed with Apple Watch [macOS]

Forum|Forum|4 years ago
March 22, 2022
24 replies
2552 views

Hiya,

I'm having an issue as of this morning using the 1password cli integration with the 1p8 mac beta.
It launches the prompt for me to authorise an action, but its immediately dismissed (i see it flicker), and I get the following error:
authorization prompt dismissed, please try again

1Password Version: 80700002
Extension Version: Not Provided
OS Version: 12.3

CLI

Show previous replies

A

Anonymous

I think I have reproduced this correctly. It seems that this happens with the biometric macOS unlock is disabled and requires it's periodic manual password entry unlock to "re-enable TouchID". I have experienced this in clamshell mode.

A

Anonymous

^ Diagnostics output: [#KYX-41567-836]

A

Anonymous

Thank you for submitting that diagnostics file, @afroman! That will be of great value in our search for the cause of the problem.

Just to make sure that I am correctly recording your findings, when you say that it "happens with the biometric macOS unlock is disabled" do you mean:

a. TouchID is disabled in macOS system settings
b. TouchID is disabled in the Security settings of the 1Password app
c. TouchID is temporarily disabled by macOS (for example because of a few failed attempts) and it will start working again after you have entered your macOS system password once (for example after locking your Mac)
d. Something different

We have seen some similar reports for option c. If that is also the case for you, locking and unlocking your Mac has shown to be a successful workaround for the problem.

In the meantime, we are continuing our investigation to the root cause of the issue. Thanks again for helping us out with that 🙌

A

Anonymous

Hi @Joris_1P !

Option c is what I'm seeing. In my case, it's the biometric (touch/watch) timeout (172800 seconds).

A

Anonymous

I have an interesting variant of this bug:

I have biometric lock enabled but my laptop is closed and i'm connected to an external monitor (therefore biometric lock isn't available) - not a problem when using the Quick Access shortcut to open 1Password, but looks like 1Password being unlocked isn't enough for first run of the op item get command and it's failing on the immediately dismissed biometric authorization prompt

op --version: 2.14.0
os: mac os 13.2
macbook pro m2

A

Anonymous

Thanks for sharing that, @mike0x41! To get the full picture clear: are you using an Apple Watch by any chance?

A

Anonymous

@Joris_1P yes! 😆

A

Anonymous

@Joris_1P I wanted to upvote this thread. I got an apple watch yesterday and enabled "Allow Apple Watch to unlock Mac" in system settings. I immediately started having issues with my ssh-keys and ssh-agent. Once I turned it off, everything started working. 😅