Call for help: Dart/flutter & yubico-authenticator

[Patrick Winnertz]

Hey,

Yubico has recently published it's EOL notification for the
yubikey-manager gui [1]. The yubioath-desktop version which we ship
within debian is already >3 years outated (and EOL) as yubico started to
rewrite the app in flutter [2]. There is a also a RFP for flutter from
2019, but nobody seems to care or to work on [3].

Over the time this new yubioath-flutter gui was renamed to yubico
authenticator and all (or almost all) functionality of the
yubikey-manager gui was added. [4] The EOL notification for the old gui
is (sadly) the next logical step.

Due to missing dependencies (e.g. dart language [5], flutter [6])
we are currently unable to ship the new app. This looks at a first
glance as a bunch of work, which I can't handle alone. For me it looks
like as if a complete new programming language + gui framework needs to
be packaged + a lot of dart packages as dependencies.

==
To sum it up:
Debian will be no longer able to ship a upstream maintained gui
configurator for a security related device, which is also broadly used
by fellow DDs. To change the situation a new programming language + gui
framework needs to be packaged.

Any suggestions/help on how to improve this miserable situation is
appreciated.

With best regards,
Patrick

[1]:
https://www.yubico.com/support/terms-conditions/yubico-end-of-life-policy/eol-products/
[2]: https://bugs.debian.org/1034701
[3]: https://bugs.debian.org/931793
[4]: https://www.yubico.com/products/yubico-authenticator/ &&
https://github.com/Yubico/yubioath-flutter
[5]: https://github.com/dart-lang/sdk
[6]: https://github.com/flutter/flutter

--
⢀⣎⠟⠻⢶⣊⠀
⣟⠁⢠⠒⠀⣿⡁ ***@debian.org/***@winnertz.eu
⢿⡄⠘⠷⠚⠋⠀ OpenPGP: 8D208172388840811B85DA1CC6D50A4188C70E43
⠈⠳⣄

The people who refer to the pandemic in the past tense and climate
change in the future tense are the reason everything is going to shit.

[Thomas Goirand]

Hey,
Yubico has recently published it's EOL notification for the yubikey-
manager gui [1]. The yubioath-desktop version which we ship within
debian is already >3 years outated (and EOL) as yubico started to
rewrite the app in flutter [2]. There is a also a RFP for flutter from
2019, but nobody seems to care or to work on [3].
Over the time this new yubioath-flutter gui was renamed to yubico
authenticator and all (or almost all) functionality of the yubikey-
manager gui was added. [4] The EOL notification for the old gui is
(sadly) the next logical step.
Due to missing dependencies (e.g. dart language [5], flutter [6])
 we are currently unable to ship the new app. This looks at a first
glance as a bunch of work, which I can't handle alone. For me it looks
like as if a complete new programming language + gui framework needs to
be packaged + a lot of dart packages as dependencies.
==
Debian will be no longer able to ship a upstream maintained gui
configurator for a security related device, which is also broadly used
by fellow DDs. To change the situation a new programming language + gui
framework needs to be packaged.
Any suggestions/help on how to improve this miserable situation is
appreciated.

IMO, this isn't as miserable as you are saying. Unless I missed
something, there's still the command line thingy that works quite well, no?

Cheers,

Thomas Goirand (zigo)

[Patrick Winnertz]

Hey Thomas,

Post by Thomas Goirand
IMO, this isn't as miserable as you are saying. Unless I missed
something, there's still the command line thingy that works quite well, no?

You're right - the cmd command is still there and it's not EOL. That's
why I wrote in the mail "gui configurator". I know that your're able to
do basically everything with the ykman command (I personally do use it)
- but if we're losing all graphical interfaces for the yubikeys we'll
lock out in my eyes quite a lot of people. The only option for these
people is to install packages via flatpak.

More and more packages/programs are just available using flatpak/co and
I really dislike that trend.

With best regards
Patrick

--
⢀⣎⠟⠻⢶⣊⠀
⣟⠁⢠⠒⠀⣿⡁ ***@debian.org/***@winnertz.eu
⢿⡄⠘⠷⠚⠋⠀ OpenPGP: 8D208172388840811B85DA1CC6D50A4188C70E43
⠈⠳⣄

The people who refer to the pandemic in the past tense and climate
change in the future tense are the reason everything is going to shit.

[Matthew Vernon]

Post by Patrick Winnertz
Yubico has recently published it's EOL notification for the
yubikey-manager gui [1]. The yubioath-desktop version which we ship
within debian is already >3 years outated (and EOL) as yubico started
to rewrite the app in flutter [2]. There is a also a RFP for flutter
from 2019, but nobody seems to care or to work on [3].

Mmm, I wrote a Flutter app a while back and looked at the work needed to
get dart & flutter packaged for Debian and ran away :-/

Matthew