WebAuthn: Issue with Fido metadata?

[Philip Smart]

Hi Mats,

Sorry for the confusion, but version 0.0.3 is not the latest version of the plugin, I should probably remove that. The current release candidate is 0.9.0-SNAPSHOT, see https://shibboleth.net/cgi-bin/projstatus.cgi. That should be up to date and include the fixed version of the Yubico metadata library that deals gracefully with unrecognised fields.

Please note that the release candidate (version 0.9.0) differs slightly from the earlier beta version (0.0.3). So it would be best to remove the old one and install the new one fresh.

Phil

On 29 Oct 2024, at 06:31, Mats Luspa via dev <dev at shibboleth.net> wrote:

Hello!

I've installed webauthn plugin version 0.0.3 (downloadable pre-release) and I tried to use Fido metadata service.

However I got the following error message:

at net.shibboleth.idp.plugin.authn.webauthn.metadata.FidoMetadataServiceFactory.getObject(FidoMetadataServiceFactory.java:121)^M
Caused by: com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "iAPARThreshold" (class com.yubico.fido.metadata.BiometricAccuracyDescriptor$BiometricAccuracyDescriptorBuilder), not marked as ignorable (5 known properties: "blockSlowdown", "maxRetries", "maxTemplates", "selfAttestedFRR", "selfAttestedFAR"])

It seems the field "iAPARThreshold" in the metadata is not recognized.

When I disable the use of Fido metadata service the registration process works, but of course I want to use the service.

Is it possible to work around this with some configuration?

/Regards Mats

--
--
Mats Luspa
Phone: +46 (0)980 79 022
Cellular phone: +46 (0)725813330
Institutet för rymdfysik               Fax: +46 (0)980 79 050
Swedish Institute of Space Physics      email: matsl at irf.se
Visiting/Delivery address: Bengt Hultqvists väg 1, SE-981 92 Kiruna
Postal address: Box 812, SE-981 28 Kiruna
--
PGP Public Key: https://www.irf.se/pgp/matsl
Digital vcard: https://www.irf.se/vcard/mats.luspa

--
To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net



Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under company number. 05747339, VAT number GB 197 0632 86. Jisc’s registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 02881024, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


Jisc Commercial Limited is a wholly owned Jisc subsidiary and a company limited by shares which is registered in England under company number 09316933, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.


For more details on how Jisc handles your data see our privacy notice here: https://www.jisc.ac.uk/website/privacy-notice
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20241029/398b59f3/attachment-0001.htm>