Gluu Flex, not possible to register any FIDO device

[zackbum]

Hi @nynymike,

I have installed Gluu Flex version 5.8.0 and I am not able to register any FIDO devices. The bug is the same as for Jans server 1.8.0 and already identified: fix(jans-casa): error "invalid registration status obtained by server" #11606. I thought that this enterprise grade software has less bugs :)
Please fix asap.

Thanks

[nynymike]

Jans 1.8 and Flex 5.8 have identical core components: FIDO, Auth Server, SCIM, Config-API, Casa

We would never make the open source "worse"! :-) Flex just has the extra Admin-UI and comes under a commercial license, required for enteprise t&c's.

The issue #11606 is only 7% done by @imran-ishaq . There has been a lot of work recently to upgrade FIDO to adjust for the 2022 breaking changes-so apologies for any issues. We're introducing automated testing for FIDO in Jans 1.9 to head off future snafus such as this one. As soon as you see the issue is fixed, you can grab a nightly build https://docs.jans.io/nightly/ and let us know if it's not resolved.

[zackbum]

Hi @nynymike,

Thanks for clarification. I would recommend to provide a "Known issues" section with every new release note. This will lower the frustration of the testing community instead of looking into the "hidden" development issues :)

Thanks

[nynymike]

Agreed. Now we know! @ossdhaval where do you think we should add this note to 1.8?

[ossdhaval]

@zackbum @nynymike

All the open issues in the Janssen Server GitHub repo are known issues for Jans. And Flex too.
So we don't have to list them separately in the release notes. Beside, it'll be a huge list if we list the issue backlog.

In each release we fix some of these open issues and we list them in the release notes.

I am not getting the point around hidden issues. Issue #11606 is WIP.

[nynymike]

Yes, but clearly 1.8 should not have been released without FIDO working. (Although hopefully that's not something that will ever happen again.) And if it was, there should be a special callout. I agree with Zack. I'm raising with @manojs1978 why I was not informed about this prior to release. If FIDO is broken, then release is no-go...

[zackbum]

Hi @nynymike @ossdhaval,

Just a tip from my site: To save time, trouble and money: Instead of bringing every month an alpha release bring out e.g. every six months a thoroughly tested release. Jans server is not just an app on the Iphone which installs with one click but needs some hours to set up. Thus, a good testing of a certain release is mandatory not to scaring away the testing community :)

[nynymike]

@zackbum can you send me a linkedin connection request, and I'd love to get your further feedback.

[zackbum]

Hi @nynymike,

Thanks for the invite. Unfortunately, I had closed my LinkedIn account some years ago. I have only a profile at ReseachGate. I saw
your publications there but no profile. Thus, no option to connect via this portal.

[nynymike]

You could email me mike at gluu dot org too!