<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Ok, thank you. Yes, I noticed that an old blob was working.</p>
<p>/Regards Mats</p>
<div class="moz-cite-prefix">On 5/20/26 4:23 AM, Philip Smart wrote:<br>
</div>
<blockquote type="cite"
cite="mid:PAXPR07MB86970CAD565ECC1EAC21AA07A6012@PAXPR07MB8697.eurprd07.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator"
content="Microsoft Word 15 (filtered medium)">
<style>@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}@font-face
{font-family:Aptos;
panose-1:2 11 0 4 2 2 2 2 2 4;}p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:10.0pt;
font-family:"Aptos",sans-serif;}a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}div.WordSection1
{page:WordSection1;}</style>
<div class="WordSection1">
<p class="MsoNormal"><span
style="font-size:12.0pt;mso-fareast-language:EN-US">Hi Mats,<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;mso-fareast-language:EN-US">Yes, the
Yubico parser failed to parse the FIDO metadata after new
values were added to it [1]. They’ve fixed that, and we are
looking to patch and ship a new version of the WebAuthn
plugin in the next few hours. <o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;mso-fareast-language:EN-US">[1]
<a
href="https://shibboleth.atlassian.net/browse/JWEBAUTHN-76"
moz-do-not-send="true" class="moz-txt-link-freetext">https://shibboleth.atlassian.net/browse/JWEBAUTHN-76</a><o:p></o:p></span></p>
<p class="MsoNormal"><span
style="font-size:12.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div id="mail-editor-reference-message-container">
<div>
<div>
<div
style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span
style="font-size:12.0pt;color:black">From:
</span></b><span
style="font-size:12.0pt;color:black">dev
<a class="moz-txt-link-rfc2396E" href="mailto:dev-bounces@shibboleth.net"><dev-bounces@shibboleth.net></a> on behalf of Mats
Luspa via dev <a class="moz-txt-link-rfc2396E" href="mailto:dev@shibboleth.net"><dev@shibboleth.net></a><br>
<b>Date: </b>Wednesday, 20 May 2026 at 08:00<br>
<b>To: </b><a class="moz-txt-link-abbreviated" href="mailto:users@shibboleth.net">users@shibboleth.net</a>
<a class="moz-txt-link-rfc2396E" href="mailto:users@shibboleth.net"><users@shibboleth.net></a>, Shib Dev
<a class="moz-txt-link-rfc2396E" href="mailto:dev@shibboleth.net"><dev@shibboleth.net></a><br>
<b>Cc: </b>Mats Luspa <a class="moz-txt-link-rfc2396E" href="mailto:mats.luspa@irf.se"><mats.luspa@irf.se></a><br>
<b>Subject: </b>Webauthn problems with FIDO
Metadata Service<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span
style="font-size:11.0pt">Hello!<br>
<br>
I restarted jetty and got this in the log files and
webauthn is not <br>
working now:<br>
<br>
2026-05-20 06:53:44,282 - ERROR <br>
[org.springframework.web.context.ContextLoader:291]
- Context <br>
initialization failed<br>
org.springframework.beans.factory.BeanCreationException: Error creating
<br>
bean with name <br>
'shibboleth.authn.WebAuthn.DefaultWebAuthnAuthenticationClientFactory' <br>
defined in URL <br>
[<a class="moz-txt-link-freetext" href="jar:file:/tmp/jetty-0_0_0_0-8080-idp_war-_idp-any-8368797749509679685/webinf/WEB-INF/lib/idp-plugin-webauthn-impl-1.4.1.jar!/META-INF/net.shibboleth.idp/postconfig.xml">jar:file:/tmp/jetty-0_0_0_0-8080-idp_war-_idp-any-8368797749509679685/webinf/WEB-INF/lib/idp-plugin-webauthn-impl-1.4.1.jar!/META-INF/net.shibboleth.idp/postconfig.xml</a>]:
<br>
Expression parsing failed<br>
at <br>
org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:610)
<br>
<br>
Caused by:
org.springframework.beans.factory.BeanExpressionException:
<br>
Expression parsing failed<br>
at <br>
org.springframework.context.expression.StandardBeanExpressionResolver.evaluate(StandardBeanExpressionResolver.java:185)
<br>
<br>
Caused by:
org.springframework.beans.factory.BeanCreationException:
<br>
Error creating bean with name <br>
'shibboleth.authn.WebAuthn.DefaultWebAuthnFidoMetadataServiceFactory': <br>
FactoryBean threw exception on object creation<br>
at <br>
org.springframework.beans.factory.support.FactoryBeanRegistrySupport.doGetObjectFromFactoryBean(FactoryBeanRegistrySupport.java:209)
<br>
<br>
Caused by:
org.springframework.beans.FatalBeanException: Can
not <br>
construct FIDO Metadata service<br>
at <br>
net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory.getObject(FidoMetadataServiceFactory.java:135)
<br>
<br>
Caused by:
com.fasterxml.jackson.databind.exc.InvalidFormatException:
<br>
Cannot deserialize value of type <br>
`com.yubico.fido.metadata.AttachmentHint` from
String "smart-card": not <br>
one of the values accepted for Enum class: [ready,
external, internal, <br>
bluetooth, wired, wifi_direct, nfc, wireless,
network]<br>
at [Source: REDACTED
(`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` <br>
disabled); line: 1, column: 1230384] (through
reference chain: <br>
com.yubico.fido.metadata.MetadataBLOBPayload$MetadataBLOBPayloadBuilder["entries"]->java.util.HashSet[84]->com.yubico.fido.metadata.MetadataBLOBPayloadEntry$MetadataBLOBPayloadEntryBuilder["metadataStatement"]->com.yubico.fido.metadata.MetadataStatement$MetadataStatementBuilder["attachmentHint"]->java.util.HashSet[4])
<br>
<br>
at <br>
com.fasterxml.jackson.databind.exc.InvalidFormatException.from(InvalidFormatException.java:67)
<br>
<br>
JavaScript error:
<a class="moz-txt-link-freetext" href="resource:///modules/MailNotificationManager.sys.mjs">resource:///modules/MailNotificationManager.sys.mjs</a>,
<br>
line 539: NS_ERROR_FAILURE: Component returned
failure code: 0x80004005 <br>
(NS_ERROR_FAILURE) [nsIAlertsService.showAlert]<br>
<br>
It seem that WevAuthn cannot understand "smart-card"
in FIDO metadata?<br>
<br>
What has happened?<br>
<br>
/Regards Mats<br>
<br>
-- <br>
-- <br>
Mats Luspa<br>
Phone: +46 (0)980 79 022<br>
Cellular phone: +46 (0)725813330<br>
Institutet för rymdfysik Fax: +46
(0)980 79 050<br>
Swedish Institute of Space Physics email:
<a class="moz-txt-link-abbreviated" href="mailto:matsl@irf.se">matsl@irf.se</a><br>
Visiting/Delivery address: Bengt Hultqvists väg 1,
SE-981 92 Kiruna<br>
Postal address: Box 812, SE-981 28 Kiruna<br>
-- <br>
PGP Public Key: </span><a
href="https://www.irf.se/pgp/matsl"
moz-do-not-send="true"><span
style="font-size:11.0pt">https://www.irf.se/pgp/matsl</span></a><span
style="font-size:11.0pt"><br>
Digital vcard: </span><a
href="https://www.irf.se/vcard/mats.luspa"
moz-do-not-send="true"><span
style="font-size:11.0pt">https://www.irf.se/vcard/mats.luspa</span></a><span
style="font-size:11.0pt"><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
<mc type="body"><font size="1"><font face="Corbel"><br>
<p>Jisc is a registered charity (in England and Wales under
charity number 1149740; in Scotland under charity number
SC053607) and a company limited by guarantee registered in
England under company number 05747339, VAT number GB 197
0632 86. Jisc's registered office is: 4 Portwall Lane,
Bristol, BS1 6NB. T 0203 697 5800.<br>
<br>
</p>
<p>Jisc Services Limited is a wholly owned Jisc subsidiary
and a company limited by guarantee which is registered in
England under company number 02881024, VAT number GB 197
0632 86. The registered office is: 4 Portwall Lane,
Bristol, BS1 6NB. T 0203 697 5800.<br>
<br>
</p>
<p>For more details on how Jisc handles your data see our
privacy notice here:
<a class="moz-txt-link-freetext" href="https://www.jisc.ac.uk/website/privacy-notice">https://www.jisc.ac.uk/website/privacy-notice</a></p>
</font></font>
</mc></blockquote>
<pre class="moz-signature" cols="72">--
--
Mats Luspa
Phone: +46 (0)980 79 022
Cellular phone: +46 (0)725813330
Institutet för rymdfysik Fax: +46 (0)980 79 050
Swedish Institute of Space Physics email: <a class="moz-txt-link-abbreviated" href="mailto:matsl@irf.se">matsl@irf.se</a>
Visiting/Delivery address: Bengt Hultqvists väg 1, SE-981 92 Kiruna
Postal address: Box 812, SE-981 28 Kiruna
--
PGP Public Key: <a class="moz-txt-link-freetext" href="https://www.irf.se/pgp/matsl">https://www.irf.se/pgp/matsl</a>
Digital vcard: <a class="moz-txt-link-freetext" href="https://www.irf.se/vcard/mats.luspa">https://www.irf.se/vcard/mats.luspa</a></pre>
</body>
</html>