WebaAuthn: VersionMismatchException

Mats Luspa mats.luspa at irf.se
Fri Mar 27 07:19:46 UTC 2026


Hello!

I encountered this regarding WebAuthn.

2026-03-27 06:45:10,065 - WARN 
[net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion:240] 
- Profile Action ValidateWebAuthnAssertion: Error validating 
authenticator assertion for 'matsl' 
  net.shibboleth.idp.plugin.authn.webauthn.exception.AssertionFailureException: 
net.shibboleth.idp.plugin.authn.webauthn.exception.CredentialRepositoryException: 
org.opensaml.storage.VersionMismatchException                      at 
net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion.updateSignatureCount(ValidateWebAuthnAssertion.java:312) 
                                  Caused by: 
net.shibboleth.idp.plugin.authn.webauthn.exception.CredentialRepositoryException: 
org.opensaml.storage.VersionMismatchException                       at 
net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRepository.updateSignatureCounter(IdPStorageServiceCredentialRepository.java:1012) 
Caused by: org.opensaml.storage.VersionMismatchException: null
         at 
net.shibboleth.plugin.storage.jdbc.impl.JDBCStorageService.updateImpl(JDBCStorageService.java:808) 

2026-03-27 06:45:10,076 - WARN 
[org.opensaml.profile.action.impl.LogEvent:94] - A non-proceed event 
occurred while processing the request: InvalidCredentials

I wonder how this could have happened and is there a way to fix it 
without removing and reinserting the passkeys?
idp version is 5.2.1.

/Regards Mats

-- 
-- 
Mats Luspa
Phone: +46 (0)980 79 022
Cellular phone: +46 (0)725813330
Institutet för rymdfysik               Fax: +46 (0)980 79 050
Swedish Institute of Space Physics      email: matsl at irf.se
Visiting/Delivery address: Bengt Hultqvists väg 1, SE-981 92 Kiruna
Postal address: Box 812, SE-981 28 Kiruna
-- 
PGP Public Key: https://www.irf.se/pgp/matsl
Digital vcard: https://www.irf.se/vcard/mats.luspa

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4382 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://shibboleth.net/pipermail/users/attachments/20260327/1d5c5bf1/attachment.p7s>


More information about the users mailing list