Possible NPE in exchangeAuthorizationCodeFor2FAResult about duo_universal_java HOT 10 CLOSED

This should be fixed by a49b3a0 from May, as soon as we can get a release done.

from duo_universal_java.

@philsmart @nie7321 We just released 1.1.2 with the fix for this issue. It should be making its way to Maven mirrors over the next few hours.

from duo_universal_java.

@DuoKristina Aye, our ops folks are talking to support about that. I don't have access to the Duo console, so I can't speak to that stuff. I was just helping them out with an updated OpenAM plugin 😁

The Java SDK doesn't handle that case very well though -- they had an NPE in their logs and I had to go debug it to figure out what the response was. That could definitely be improved.

Thanks for your help!

from duo_universal_java.

I observed similar issue. It seems that happened when Remembered-Device feature is utilized.

from duo_universal_java.

I'm hitting this NPE with some of my integrations. They're getting a 401 Unauthorized response, with this body:

{"error": "invalid_client", "error_description": "Customer does not have frameless access enabled."}

For whatever reason, this isn't throwing a Duo exception but instead returns a null instead of the expected response object.

I don't know how to reliably reproduce that -- it only seems to affect some of my integrations, not all of them.

from duo_universal_java.

@nie7321 That's definitely not expected as Duo's frameless Web SDK was GA last October.

Are you using this new SDK with an application that supports the frameless prompt (like the one called "Web SDK" or another from the list here? When you look at an application that throws this 401 in the Duo Admin Panel, does the Universal Prompt part of the page show that the status is either "App Update Ready" or "Waiting on Duo"? If the status shows "Waiting on App Provider" then that application type does not yet have Duo frameless support, and can't be used with this SDK.

If your applications indicate they should work with the Universal Prompt but you still receive that 401 message, please get in touch with Duo Support so they can review your account information.

from duo_universal_java.

This is a bug in the code and should be fixed.

from duo_universal_java.

Thanks!

from duo_universal_java.

@DuoKristina I'm the Duo admin and work with @nie7321. I created a new Duo application integration to work around the issue - it's identical to the existing one as far as I can see. Both are using Web SDK, and both say "App Update Ready". Well, the new (working) one now says "Waiting on Duo" but you get the idea. I emailed support yesterday afternoon but haven't heard back yet.

from duo_universal_java.

@philliptracy Can you respond to the "Thank you for contacting Duo Security Support!" email message you received yesterday with the ikey/client ID of the Web SDK application that isn't working and responds with "Customer does not have frameless access enabled", and we can continue to investigate via that channel instead of here in this unrelated issue?

from duo_universal_java.