Hi, We encounter the same issue under v7.1.2, with only the web-authn dependencies : while the new device is registered, an error occurs at the interface.
In CAS logs, the error is as you described it : *Exception thrown in state 'viewRegistrationWebAuthn' of flow 'account'.* Albeit with this added message : *no ''saveRegistration' state in flow 'account'.* The culprit code seems to be in " *support/cas-server-support-webauthn-core-webflow/src/main/java/org/apereo/cas/webauthn/web/flow/account/WebAuthnMultifactorAccountProfileWebflowConfigurer.java*'. BTW, this class does not seem to have a TestCase. Harsh to be blocked on such a problem :(. P. Le mercredi 11 septembre 2024 à 16:21:46 UTC+2, Frédéric Dussurget a écrit : > Hi, > > Context : version=7.2.0-SNAPSHOT > > Extract of build.gradle : > //MFA TOTP > implementation "org.apereo.cas:cas-server-support-gauth" > implementation "org.apereo.cas:cas-server-support-gauth-redis" > > // MFA FIDO2 WEBAUTHN > implementation "org.apereo.cas:cas-server-support-webauthn" > implementation "org.apereo.cas:cas-server-support-webauthn-redis" > > //MFA TRUSTED DEVICE > implementation "org.apereo.cas:cas-server-support-trusted-mfa" > implementation "org.apereo.cas:cas-server-support-trusted-mfa-redis" > > My issue : > I have an issue with Account Profile Management (/cas/login page), but > only with webauthn devices (mfa-gauth devices work fine) : > > - with build.gradle containing only web-authn dependencies, I'm able to > register a webauthn device thru account profile management, but I get an > 500 error message at the very end of the ceremony : > Error: jakarta.servlet.ServletException: Request processing failed: > org.springframework.webflow.execution.FlowExecutionException: Exception > thrown in state 'viewRegistrationWebAuthn' of flow 'account' > > BUT, the webauthn device is registered and fully functionnal. > > - with build.gradle containing web-authn AND mfa-gauth dependencies, I > cannot get the webauthn device registering ceremony : every time I end up > on the mfa-gauth device registering ceremony. So, the only way to register > mfa-webauthn devices is on the fly, accessing directly to a service. > > Regards, > > -- - Website: https://apereo.github.io/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/8832264e-e01d-470e-8d19-a12c326047aan%40apereo.org.
