Whoops, sorry if you all received this more than once. I accidentally 
submitted this to the old dev mailing list.


I'm trying to setup a new CAS server that delegates authentication but also 
uses U2F multifactor authentication. 

Delegated authentication works fine, but when I try to enable U2F MFA I'm 
getting errors:
Caused by: org.thymeleaf.exceptions.TemplateProcessingException: Error 
during execution of processor 
'org.thymeleaf.spring4.processor.SpringInputGeneralFieldTagProcessor' (
template: "casU2fLoginView" - line 53, col 78)
    at org.thymeleaf.processor.element.AbstractAttributeTagProcessor.
doProcess(AbstractAttributeTagProcessor.java:117) ~[thymeleaf-3.0.9.RELEASE.
jar:3.0.9.RELEASE]
{...}
Caused by: org.springframework.expression.spel.SpelEvaluationException: 
EL1008E: Property or field 'token' cannot be found on object of type 
'org.apereo.cas.authentication.principal.ClientCredential' - maybe not 
public or not valid?

Seems to me instead of a `U2FTokenCredential` being set as the "credential" 
variable for the template, the Delegated Authentication related 
`ClientCredential` is being used. 

I was able to get it to work by modifying U2FAccountCheckRegistrationAction 
to include:

WebUtils.putCredential(requestContext,new U2FTokenCredential());


I would *love* to submit a pull request to fix this but I know this isn't 
the correct fix. I'm not even sure if this issue is specific to U2F or all 
MFA after a delegated authentication. 
Can anyone offer suggestions on where I should look at to fix this 
correctly? Unfortunately I'm still new to the CAS codebase.

Thank you all.

     - Danny

-- 
You received this message because you are subscribed to the Google Groups "CAS 
Developer" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
Visit this group at https://groups.google.com/a/apereo.org/group/cas-dev/.

Reply via email to