search

GluuFederation / fido2

Fido2 server
MIT License
2 stars 4 forks source link

Disable automatic U2F->FIDO2 migration #46

Closed capile closed 1 year ago

capile commented 1 year ago

U2F keys are being converted to FIDO2 tokens upon sign in, and this is breaking FIDO2 authentication.

When a user contains migrated keys, the internal FIDO2 API returns error 500 (internally) to all user queries, this is also being thrown at the javascript console to the user (and can be reproduced with local API calls):

Executing get assertion Fido2 request {
"cause2":"java.lang.NullPointerException",
"cause1":"java.lang.NullPointerException",
"servlet":"org.gluu.fido2.service.app.ResteasyInitializer",
"cause0":"org.jboss.resteasy.spi.UnhandledException: java.lang.NullPointerException",
"message":"org.jboss.resteasy.spi.UnhandledException: java.lang.NullPointerException",
"url":"/fido2/restv1/fido2/assertion/options",
"status":"500"
}

So neither U2F or FIDO2 remains working after key migration.