google-auth: reauth: uses deprecated u2f module

[0-wiz-0]

Determine this is the right repository

• I determined this is the correct repository in which to report this bug.

Summary of the issue

The reauth extension of google-auth uses pyu2f but pyu2f is discontinued and suggests using Yubico/python-fido2 instead, which has backwards compatible support for U2F.

Please switch to that library. Thank you!

(This was previously reported as #15168 but closed without a fix. The problem is still there.)

API client name and version

google-auth 2.53.0 and git head

Reproduction steps: code

Code reading.

Reproduction steps: supporting files

n/a

Reproduction steps: actual results

n/a

Reproduction steps: expected results

n/a

OS & version + platform

all

Python environment

all

Python dependencies

n/a

Additional context

No response

[goutamadwant]

@daniel-sanche I opened #17391 for this.

this change replaces the pyu2f reauth fallback with fido2, while keeping the WebAuthn path as the preferred flow. I also added coverage for the fallback success path, missing dependency, no device, timeout, ineligible key, and the relyingPartyId to applicationId retry case.