Hi,
 We encounter the same issue under v7.1.2, with only the web-authn 
dependencies : while the new device is registered, an error occurs at the 
interface.

In CAS logs, the error is as you described it : *Exception thrown in state 
'viewRegistrationWebAuthn' of flow 'account'.* Albeit with this added 
message : *no ''saveRegistration' state in flow 'account'.*

The culprit code seems to be in "
*support/cas-server-support-webauthn-core-webflow/src/main/java/org/apereo/cas/webauthn/web/flow/account/WebAuthnMultifactorAccountProfileWebflowConfigurer.java*'.
 
BTW, this class does not seem to have a TestCase. 

Harsh to be blocked on such a problem :(.

P. 

Le mercredi 11 septembre 2024 à 16:21:46 UTC+2, Frédéric Dussurget a écrit :

> Hi,
>
> Context : version=7.2.0-SNAPSHOT 
>
> Extract of build.gradle :
>     //MFA TOTP
>     implementation "org.apereo.cas:cas-server-support-gauth"
>     implementation "org.apereo.cas:cas-server-support-gauth-redis"
>
>     // MFA FIDO2 WEBAUTHN
>     implementation "org.apereo.cas:cas-server-support-webauthn"
>     implementation "org.apereo.cas:cas-server-support-webauthn-redis"
>
>     //MFA TRUSTED DEVICE
>     implementation "org.apereo.cas:cas-server-support-trusted-mfa"
>     implementation "org.apereo.cas:cas-server-support-trusted-mfa-redis" 
>
> My issue :
> I have an issue with Account Profile Management (/cas/login page), but 
> only with webauthn devices (mfa-gauth devices work fine) :
>
> - with build.gradle containing only web-authn dependencies, I'm able to 
> register a webauthn device thru account profile management, but I get an 
> 500 error message at the very end of the ceremony : 
> Error: jakarta.servlet.ServletException: Request processing failed: 
> org.springframework.webflow.execution.FlowExecutionException: Exception 
> thrown in state 'viewRegistrationWebAuthn' of flow 'account'
>
> BUT, the webauthn device is registered and fully functionnal.
>
> - with build.gradle containing web-authn AND mfa-gauth dependencies, I 
> cannot get the webauthn device registering ceremony : every time I end up 
> on the mfa-gauth device registering ceremony. So, the only way to register 
> mfa-webauthn devices is on the fly, accessing directly to a service.
>
> Regards,
>
>

-- 
- Website: https://apereo.github.io/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/8832264e-e01d-470e-8d19-a12c326047aan%40apereo.org.

Reply via email to