Hi, We encounter the same issue under v7.1.2, with only the web-authn dependencies : while the new device is registered, an error occurs at the interface.
In CAS logs, the error is as you described it : *Exception thrown in state 'viewRegistrationWebAuthn' of flow 'account'.* Albeit with this added message : *no ''saveRegistration' state in flow 'account'.* The culprit code seems to be in " *support/cas-server-support-webauthn-core-webflow/src/main/java/org/apereo/cas/webauthn/web/flow/account/WebAuthnMultifactorAccountProfileWebflowConfigurer.java*'. BTW, this class does not seem to have a TestCase. Harsh to be blocked on such a problem :(. P. Le mercredi 11 septembre 2024 à 16:21:46 UTC+2, Frédéric Dussurget a écrit : > Hi, > > Context : version=7.2.0-SNAPSHOT > > Extract of build.gradle : > //MFA TOTP > implementation "org.apereo.cas:cas-server-support-gauth" > implementation "org.apereo.cas:cas-server-support-gauth-redis" > > // MFA FIDO2 WEBAUTHN > implementation "org.apereo.cas:cas-server-support-webauthn" > implementation "org.apereo.cas:cas-server-support-webauthn-redis" > > //MFA TRUSTED DEVICE > implementation "org.apereo.cas:cas-server-support-trusted-mfa" > implementation "org.apereo.cas:cas-server-support-trusted-mfa-redis" > > My issue : > I have an issue with Account Profile Management (/cas/login page), but > only with webauthn devices (mfa-gauth devices work fine) : > > - with build.gradle containing only web-authn dependencies, I'm able to > register a webauthn device thru account profile management, but I get an > 500 error message at the very end of the ceremony : > Error: jakarta.servlet.ServletException: Request processing failed: > org.springframework.webflow.execution.FlowExecutionException: Exception > thrown in state 'viewRegistrationWebAuthn' of flow 'account' > > BUT, the webauthn device is registered and fully functionnal. > > - with build.gradle containing web-authn AND mfa-gauth dependencies, I > cannot get the webauthn device registering ceremony : every time I end up > on the mfa-gauth device registering ceremony. So, the only way to register > mfa-webauthn devices is on the fly, accessing directly to a service. > > Regards, > > -- - Website: https://apereo.github.io/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/8832264e-e01d-470e-8d19-a12c326047aan%40apereo.org.
