Google 2FA check dialog

[mrexox]

Hey! I've got stuck trying to solve the issue with authentication through Google OAuth when 2FA is enabled. By default Google checks for the fingerprint and I see the dialog when I sign in in browser.

Google Chrome asks for a fingerprint, Safari asks for a security key. Both are configured for my Google account.

Screenshots of Google Chrome and Safari dialogs

I assume Google is trying to call something similar when authenticating in Tauri, but instead I just get "Something went wrong" message and nothing useful in Console.

Screenshot of "Something went wrong" message

When I sign in with a password I see next options for 2FA and security key is unsupported

Is there a way to enable support for security key, fingerprint authentication in Tauri app? What's required for this to work?

Here is how I trigger the authentication through Google in Rust command:

google_auth_code command (Rust)

#[command]
pub(crate) async fn google_auth_code(app: AppHandle) -> Result<(String, String), String> {
  let auth_url = Url::parse_with_params(
    "https://accounts.google.com/o/oauth2/v2/auth",
    &[
      ("client_id", CLIENT_ID),
      ("redirect_uri", CALLBACK_URL),
      ("response_type", "code"),
      ("scope", "openid profile email"),
    ],
  )
  .unwrap();

  let (tx, rx): (Sender<String>, Receiver<String>) = channel();
  let (err_tx, err_rx): (Sender<String>, Receiver<String>) = channel();
  let auth_window = tauri::WindowBuilder::new(&app, "auth", tauri::WindowUrl::External(auth_url))
    .center()
    .title("Authenticate")
    .on_navigation(move |url| {
        dbg!(&url);
      if url.scheme() == "http"
        && url.host() == Some(url::Host::Domain("localhost"))
        && url.path() == "/callback"
      {
        let query: HashMap<_, _> = url.query_pairs().into_owned().collect();
        if let Some(code) = query.get("code") {
          tx.send(code.to_string()).expect("couldn't send auth code");
          err_tx
            .send("".to_string())
            .expect("couldn't send empty error");
        } else {
          err_tx
            .send("failed to parse the code".to_string())
            .expect("couldn't send error message");
        }

        return false;
      }

      true
    })
    .build()
    .expect("can't open an auth window");

  let error = err_rx.recv().map_err(|err| err.to_string())?;
  if !error.is_empty() {
    let _ = auth_window.close();
    return Err(error);
  }

  let res = rx.recv().map_err(|err| err.to_string())?;

  let _ = auth_window.close();

  Ok((res, CALLBACK_URL.to_string()))
}

tauri.conf.json

{
  "build": {
    "beforeBuildCommand": "DESKTOP=true yarn build",
    "beforeDevCommand": "yarn dev",
    "devPath": "http://localhost:3000",
    "distDir": "../out",
    "withGlobalTauri": true
  },
  "package": {
    "productName": "My Test App",
    "version": "0.0.1"
  },
  "tauri": {
    "systemTray": {
      "iconPath": "icons/icon.ico",
      "iconAsTemplate": true,
      "title": "My Test App"
    },
    "macOSPrivateApi": true,
    "allowlist": {
      "all": true,
      "dialog": {
        "all": true
      }, 
      "notification": {
        "all": true
      },
      "window": {
        "startDragging": true
      }
    },
    "bundle": {
      "active": true,
      "category": "DeveloperTool",
      "copyright": "",
      "deb": {
        "depends": []
      },
      "icon": [
        "icons/32x32.png",
        "icons/128x128.png",
        "icons/128x128@2x.png",
        "icons/icon.icns",
        "icons/icon.ico"
      ],
      "identifier": "my.app.com",
      "longDescription": "",
      "macOS": {
        "entitlements": "entitlements.plist",
        "exceptionDomain": "",
        "frameworks": [],
        "providerShortName": null,
        "signingIdentity": null
      },
      "resources": [],
      "shortDescription": "",
      "targets": "all",
      "windows": {
        "certificateThumbprint": null,
        "digestAlgorithm": "sha256",
        "timestampUrl": ""
      }
    },
    "security": {
      "csp": null,
      "dangerousRemoteDomainIpcAccess": [
        {
          "windows": ["auth"],
          "domain": "accounts.google.com"
        }
      ]
    }
  }
}