WebaAuthn: VersionMismatchException

Mats Luspa mats.luspa at irf.se
Fri Mar 27 07:50:23 UTC 2026


It started to work again when I resetted the version manually to 1.
Update StorageRecords set version=1 where context like '%webauthn%' and 
id like '%matsl%';

But question remains why this happened.

/Regards Mats

On 3/27/26 8:19 AM, Mats Luspa via users wrote:
> Hello!
>
> I encountered this regarding WebAuthn.
>
> 2026-03-27 06:45:10,065 - WARN 
> [net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion:240] 
> - Profile Action ValidateWebAuthnAssertion: Error validating 
> authenticator assertion for 'matsl' 
>  net.shibboleth.idp.plugin.authn.webauthn.exception.AssertionFailureException: 
> net.shibboleth.idp.plugin.authn.webauthn.exception.CredentialRepositoryException: 
> org.opensaml.storage.VersionMismatchException  at 
> net.shibboleth.idp.plugin.authn.webauthn.impl.ValidateWebAuthnAssertion.updateSignatureCount(ValidateWebAuthnAssertion.java:312) 
>                                  Caused by: 
> net.shibboleth.idp.plugin.authn.webauthn.exception.CredentialRepositoryException: 
> org.opensaml.storage.VersionMismatchException   at 
> net.shibboleth.idp.plugin.authn.webauthn.storage.impl.IdPStorageServiceCredentialRepository.updateSignatureCounter(IdPStorageServiceCredentialRepository.java:1012) 
> Caused by: org.opensaml.storage.VersionMismatchException: null
>         at 
> net.shibboleth.plugin.storage.jdbc.impl.JDBCStorageService.updateImpl(JDBCStorageService.java:808) 
>
> 2026-03-27 06:45:10,076 - WARN 
> [org.opensaml.profile.action.impl.LogEvent:94] - A non-proceed event 
> occurred while processing the request: InvalidCredentials
>
> I wonder how this could have happened and is there a way to fix it 
> without removing and reinserting the passkeys?
> idp version is 5.2.1.
>
> /Regards Mats
>
>
-- 
-- 
Mats Luspa
Phone: +46 (0)980 79 022
Cellular phone: +46 (0)725813330
Institutet för rymdfysik               Fax: +46 (0)980 79 050
Swedish Institute of Space Physics      email: matsl at irf.se
Visiting/Delivery address: Bengt Hultqvists väg 1, SE-981 92 Kiruna
Postal address: Box 812, SE-981 28 Kiruna
-- 
PGP Public Key: https://www.irf.se/pgp/matsl
Digital vcard: https://www.irf.se/vcard/mats.luspa

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4382 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://shibboleth.net/pipermail/users/attachments/20260327/f89e89bc/attachment.p7s>


More information about the users mailing list