BUG: cli auth prompt immediately dismissed with Apple Watch [macOS]

Hi @Joris_1P !

Option c is what I'm seeing. In my case, it's the biometric (touch/watch) timeout (172800 seconds).

Thank you for submitting that diagnostics file, @afroman! That will be of great value in our search for the cause of the problem.

Just to make sure that I am correctly recording your findings, when you say that it "happens with the biometric macOS unlock is disabled" do you mean:

a. TouchID is disabled in macOS system settings
b. TouchID is disabled in the Security settings of the 1Password app
c. TouchID is temporarily disabled by macOS (for example because of a few failed attempts) and it will start working again after you have entered your macOS system password once (for example after locking your Mac)
d. Something different

We have seen some similar reports for option c. If that is also the case for you, locking and unlocking your Mac has shown to be a successful workaround for the problem.

In the meantime, we are continuing our investigation to the root cause of the issue. Thanks again for helping us out with that 🙌

^ Diagnostics output: [#KYX-41567-836]

I think I have reproduced this correctly. It seems that this happens with the biometric macOS unlock is disabled and requires it's periodic manual password entry unlock to "re-enable TouchID". I have experienced this in clamshell mode.

Thank you @jamesstidard! We'll be here to take any further information you should have on this if the issue returns.

I've not been wearing my watch while working because of this, just put it on to try and get you the details love, but it's working again now. Will report back with stuff above if it breaks again.

Thanks.

Thank you both for reporting back with more details. We have seen some similar reports when using Apple Watch. To see if these cases are indeed similar:

• When you are running into this problem, is your Mac in clamshell mode by any chance?
• And when you run into this problem, are you still able to unlock macOS itself with the Apple Watch?

@jamesstidard, logs are definitely helpful! The logs do not contain any secrets like your account password and we go out of our way to make sure there is as little sensitive information in there as possible.

About 1Password diagnostics information

You can send a diagnostics report by following these instructions:

Sending Diagnostics Reports (Mac)

Attach the diagnostics to an email message addressed to support+forum@1password.com.

With your email please include:

• A link to this thread: https://1password.community/discussion/128135/bug-cli-auth-prompt-immediately-dismissed
• Your forum username

You should receive an automated reply from our BitBot assistant with a Support ID number. Please post that number here. Thanks very much!

Hi,

I'm also experiencing the same thing. For me my Apple Watch auth prompt closes itself. I'f I'm not wearing my watch, it won't ask via fingerprint (when available) will instead just take a password or give me a "allow" option for ssh access.

Happy to post a log in here, if someone can let me know that's no sensitive information in it, and that it'll be useful.

Here's a gif:

I'm not sure what changed, but for some reason it seems to be working now, at least for the moment. Here's what I've done since my previous post, as best I can recall:

1. Disabled biometric unlock and signed in manually with eval $(op signin).
2. Successfully ran a couple of op commands.
3. Tried turning biometric unlock back on after having successfully signed in the old-school way, but it didn't seem to work right away.
4. Turned biometric unlock off again.
5. Closed the terminal where I had tested manual sign-in and went back to other tasks.
6. A few hours later, I decided to give it one more try before closing up shop for the day, so I turned biometric unlock back on one more time.

It was at this point that I ran an authenticated op command and the authentication prompt actually stayed on-screen and allowed me to unlock with my Apple Watch. I then went to the 1Password app, explicitly locked it from the menu, then closed the 1Password window. When I went back to the terminal window and tried the command again, it prompted again for authentication as expected, and again the prompt remained on-screen and allowed me to unlock.

Same problem here. Happens when biometric unlock is enabled. If I disable biometric unlock, I instead get "You are not currently signed in".

1Password for Mac 8.7.1
1Password CLI 2.4.1
MacBook Pro, Intel i9
macOS 12.3.1