<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Aptos;
panose-1:2 11 0 4 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:10.0pt;
font-family:"Aptos",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-GB" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:12.0pt;mso-fareast-language:EN-US">Hi Mats,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;mso-fareast-language:EN-US">Yes, the Yubico parser failed to parse the FIDO metadata after new values were added to it [1]. They’ve fixed that, and we are looking to patch and ship a new version of the WebAuthn
plugin in the next few hours. <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;mso-fareast-language:EN-US">[1]
<a href="https://shibboleth.atlassian.net/browse/JWEBAUTHN-76">https://shibboleth.atlassian.net/browse/JWEBAUTHN-76</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div id="mail-editor-reference-message-container">
<div>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:12.0pt;color:black">From:
</span></b><span style="font-size:12.0pt;color:black">dev <dev-bounces@shibboleth.net> on behalf of Mats Luspa via dev <dev@shibboleth.net><br>
<b>Date: </b>Wednesday, 20 May 2026 at 08:00<br>
<b>To: </b>users@shibboleth.net <users@shibboleth.net>, Shib Dev <dev@shibboleth.net><br>
<b>Cc: </b>Mats Luspa <mats.luspa@irf.se><br>
<b>Subject: </b>Webauthn problems with FIDO Metadata Service<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-size:11.0pt">Hello!<br>
<br>
I restarted jetty and got this in the log files and webauthn is not <br>
working now:<br>
<br>
2026-05-20 06:53:44,282 - ERROR <br>
[org.springframework.web.context.ContextLoader:291] - Context <br>
initialization failed<br>
org.springframework.beans.factory.BeanCreationException: Error creating <br>
bean with name <br>
'shibboleth.authn.WebAuthn.DefaultWebAuthnAuthenticationClientFactory' <br>
defined in URL <br>
[jar:file:/tmp/jetty-0_0_0_0-8080-idp_war-_idp-any-8368797749509679685/webinf/WEB-INF/lib/idp-plugin-webauthn-impl-1.4.1.jar!/META-INF/net.shibboleth.idp/postconfig.xml]:
<br>
Expression parsing failed<br>
at <br>
org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:610)
<br>
<br>
Caused by: org.springframework.beans.factory.BeanExpressionException: <br>
Expression parsing failed<br>
at <br>
org.springframework.context.expression.StandardBeanExpressionResolver.evaluate(StandardBeanExpressionResolver.java:185)
<br>
<br>
Caused by: org.springframework.beans.factory.BeanCreationException: <br>
Error creating bean with name <br>
'shibboleth.authn.WebAuthn.DefaultWebAuthnFidoMetadataServiceFactory': <br>
FactoryBean threw exception on object creation<br>
at <br>
org.springframework.beans.factory.support.FactoryBeanRegistrySupport.doGetObjectFromFactoryBean(FactoryBeanRegistrySupport.java:209)
<br>
<br>
Caused by: org.springframework.beans.FatalBeanException: Can not <br>
construct FIDO Metadata service<br>
at <br>
net.shibboleth.idp.plugin.authn.webauthn.metadata.impl.FidoMetadataServiceFactory.getObject(FidoMetadataServiceFactory.java:135)
<br>
<br>
Caused by: com.fasterxml.jackson.databind.exc.InvalidFormatException: <br>
Cannot deserialize value of type <br>
`com.yubico.fido.metadata.AttachmentHint` from String "smart-card": not <br>
one of the values accepted for Enum class: [ready, external, internal, <br>
bluetooth, wired, wifi_direct, nfc, wireless, network]<br>
at [Source: REDACTED (`StreamReadFeature.INCLUDE_SOURCE_IN_LOCATION` <br>
disabled); line: 1, column: 1230384] (through reference chain: <br>
com.yubico.fido.metadata.MetadataBLOBPayload$MetadataBLOBPayloadBuilder["entries"]->java.util.HashSet[84]->com.yubico.fido.metadata.MetadataBLOBPayloadEntry$MetadataBLOBPayloadEntryBuilder["metadataStatement"]->com.yubico.fido.metadata.MetadataStatement$MetadataStatementBuilder["attachmentHint"]->java.util.HashSet[4])
<br>
<br>
at <br>
com.fasterxml.jackson.databind.exc.InvalidFormatException.from(InvalidFormatException.java:67)
<br>
<br>
JavaScript error: resource:///modules/MailNotificationManager.sys.mjs, <br>
line 539: NS_ERROR_FAILURE: Component returned failure code: 0x80004005 <br>
(NS_ERROR_FAILURE) [nsIAlertsService.showAlert]<br>
<br>
It seem that WevAuthn cannot understand "smart-card" in FIDO metadata?<br>
<br>
What has happened?<br>
<br>
/Regards Mats<br>
<br>
-- <br>
-- <br>
Mats Luspa<br>
Phone: +46 (0)980 79 022<br>
Cellular phone: +46 (0)725813330<br>
Institutet för rymdfysik Fax: +46 (0)980 79 050<br>
Swedish Institute of Space Physics email: matsl@irf.se<br>
Visiting/Delivery address: Bengt Hultqvists väg 1, SE-981 92 Kiruna<br>
Postal address: Box 812, SE-981 28 Kiruna<br>
-- <br>
PGP Public Key: </span><a href="https://www.irf.se/pgp/matsl"><span style="font-size:11.0pt">https://www.irf.se/pgp/matsl</span></a><span style="font-size:11.0pt"><br>
Digital vcard: </span><a href="https://www.irf.se/vcard/mats.luspa"><span style="font-size:11.0pt">https://www.irf.se/vcard/mats.luspa</span></a><span style="font-size:11.0pt"><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
<mc type="body"><font size="1"><font face="Corbel"><br>
<p>Jisc is a registered charity (in England and Wales under charity number 1149740; in Scotland under charity number SC053607) and a company limited by guarantee registered in England under company number 05747339, VAT number GB 197 0632 86. Jisc's registered
office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.<br>
<br>
</p>
<p>Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 02881024, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.<br>
<br>
</p>
<p>For more details on how Jisc handles your data see our privacy notice here: https://www.jisc.ac.uk/website/privacy-notice</p>
</font></font>
</body>
</html>