I'm getting this same error when using mfa-simple and mfa-gauth, so it
seems like it's related to multiple MFA implementations after delegated
auth. Did you ever find a fix for it?
-Brent
On Friday, October 26, 2018 at 9:04:39 PM UTC-4, Daniel Ramos wrote:
>
> Whoops, sorry if you all received this more than once. I accidentally
> submitted this to the old dev mailing list.
>
>
> I'm trying to setup a new CAS server that delegates authentication but
> also uses U2F multifactor authentication.
>
> Delegated authentication works fine, but when I try to enable U2F MFA I'm
> getting errors:
> Caused by: org.thymeleaf.exceptions.TemplateProcessingException: Error
> during execution of processor
> 'org.thymeleaf.spring4.processor.SpringInputGeneralFieldTagProcessor' (
> template: "casU2fLoginView" - line 53, col 78)
> at org.thymeleaf.processor.element.AbstractAttributeTagProcessor.
> doProcess(AbstractAttributeTagProcessor.java:117) ~[thymeleaf-3.0.
> 9.RELEASE.jar:3.0.9.RELEASE]
> {...}
> Caused by: org.springframework.expression.spel.SpelEvaluationException:
> EL1008E: Property or field 'token' cannot be found on object of type
> 'org.apereo.cas.authentication.principal.ClientCredential' - maybe not
> public or not valid?
>
> Seems to me instead of a `U2FTokenCredential` being set as the
> "credential" variable for the template, the Delegated Authentication
> related `ClientCredential` is being used.
>
> I was able to get it to work by modifying
> U2FAccountCheckRegistrationAction to include:
>
> WebUtils.putCredential(requestContext,new U2FTokenCredential());
>
>
> I would *love* to submit a pull request to fix this but I know this isn't
> the correct fix. I'm not even sure if this issue is specific to U2F or all
> MFA after a delegated authentication.
> Can anyone offer suggestions on where I should look at to fix this
> correctly? Unfortunately I'm still new to the CAS codebase.
>
> Thank you all.
>
> - Danny
>
>
--
You received this message because you are subscribed to the Google Groups "CAS
Developer" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-dev/df12eaf0-5984-43e6-9ddc-d1367e4b2ef9%40apereo.org.
