Multiple entries when using JPA with u2f resgitration

37 views
Skip to first unread message

John Bond

unread,
Jul 1, 2020, 6:18:06 AM7/1/20
to CAS Community

Hello All,

I have recently been testing the use of JPA for u2f registration, moving away from json.  however it seems im getting many more rows in the U2FDevice_Registration table then expected.

# What i see:

after deleting all entries from the table i login and am asked to register my device.  after registering i see an entry like the following in the Database

*************************** 1. row ***************************
id: 1
created_Date: 2020-07-01 00:00:00
record: ***REDACTED*** 
username: jbond

Im then asked to authenticate with the device to confirm registration.  This creates a second entry in the database exactly the same as the first entry except the id has been incremented

*************************** 1. row ***************************
id: 2
created_Date: 2020-07-01 00:00:00
record: ***REDACTED*** 
username: jbond

Following this each additional login causes another entry to be added to the U2FDevice_Registration table, in all cases the only change is the auto incremented ID.   I'm not asked to re-register so the registration process seems to have worked correctly.

This behaviour seemed unexpected to me and would expect additional logins to cause an update to the initial records and not to a new insert.  Is this expected behaviour of have i  configured something incorrectly.

I have the following u2f related config

cas.authn.mfa.u2f.crypto.signing.key=***REDACTED***
cas.authn.mfa.u2f.jpa.user=cas
cas.authn.mfa.u2f.jpa.password=***REDACTED***
cas.authn.mfa.u2f.jpa.driver-class=org.mariadb.jdbc.Driver
cas.authn.mfa.u2f.jpa.url=jdbc:mysql://db1077.eqiad.wmnet/cas_test?useSSL=true
cas.authn.mfa.u2f.jpa.dialect=org.hibernate.dialect.MariaDBDialect

Any help appreciated thanks

John Bond

unread,
Jul 1, 2020, 6:20:18 AM7/1/20
to CAS Community
> cas.authn.mfa.u2f.crypto.signing.key=***REDACTED***
there is also: cas.authn.mfa.u2f.crypto.encryption.key=***REDACTED***

John Bond

unread,
Jul 3, 2020, 5:54:06 AM7/3/20
to CAS Community
Just a quick update that i tested this with 6.2.0  (original test with 6.1.5) and saw the same behaviour
Reply all
Reply to author
Forward
0 new messages