Duo Web v4 SDK compatibility with JavaFX WebView

Brett_Smith — Thu, 15 Sep 2022 10:06:48 GMT

We hava a JavaFX application that makes use of the toolkit’s WebView component. This is essentially an embedded WebKit browser.

We use this component to perform our applications authentication process in this embedded browser.

This is the result we end up with.

(or see HERE for a video of the process)

The server is using the Duo Web v4 SDK, and works fine in a desktop browser, but does not work using this embedded browser. See HERE for a video of this working.

These are the URLs that are visited …

Loading https://blue:8444/
Loading https://■■■■■■■■■■■■■■■■■■■■■■■■■■■■/oauth/v1/authorize?scope=openid&response_type=code&redirect_uri=https://blue:8444/app/api/duo/auth&client_id=■■■■■■■■■■■■■■■■■■■■&request=eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.eyJkdW9fdW5hbWUiOiJicmV0dCI■■■■■■■■■■■■■■■■■■■■kIiwicmVzcG9uc2VfdHlwZ■■■■■■■■■■■■■■■■■■■■mVjdF91cmkiOiJodHRwczovL2JsdWU6ODQ0NC9hcHAvYXBpL2R1by9hdXRoIiwic3RhdGUiOiJmYzhjZjcxZTMxYzEwZWQ1MThkYjU5NDczNzVhZTNmYjJjNDQiLCJleHAiOjE2NjMyMzY4Mzg■■■■■■■■■■■■■■■■■■■■hdHRyaWJ1dGUiOnRydWU■■■■■■■■■■■■■■■■■■■■JN042TFg1S0hLMFE5MU82U1hEIn0.prcMm5mJyVnWN9FjoU0KlwtUn5aiP4_RoNJL8KS7qJM1bsT7M-moce6ZShLukym58o_NSVr6gReE0e2Xxxi1dQ
Loading https://■■■■■■■■■■■■■■■■■■■■■■■■■■■■/frame/frameless/v4/auth?sid=frameless-047a73a4-04c1-4d8e-8f30-62396a21b47f&tx=eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.eyJkdW9fdW5hbWUiOiJicmV0dCI■■■■■■■■■■■■■■■■■■■■kIiwicmVzcG9uc2VfdHlwZ■■■■■■■■■■■■■■■■■■■■mVjdF91cmkiOiJodHRwczovL2JsdWU6ODQ0NC9hcHAvYXBpL2R1by9hdXRoIiwic3RhdGUiOiJmYzhjZjcxZTMxYzEwZWQ1MThkYjU5NDczNzVhZTNmYjJjNDQiLCJleHAiOjE2NjMyMzY4Mzg■■■■■■■■■■■■■■■■■■■■hdHRyaWJ1dGUiOnRydWU■■■■■■■■■■■■■■■■■■■■JN042TFg1S0hLMFE5MU82U1hEIn0.prcMm5mJyVnWN9FjoU0KlwtUn5aiP4_RoNJL8KS7qJM1bsT7M-moce6ZShLukym58o_NSVr6gReE0e2Xxxi1dQ

Unfortunately, it is quite difficult to get a view on what might be happening inside this embedded browser, such as the console or other browser debugger features. Just about the only information we have at the moment are the URLs being visited.

I have made simple standalone Maven project that demonstrates the problem, and can provide a test server if needed.

At the very least, does anyone have any tips for debugging in such an environment?

Re: Duo Web v4 SDK compatibility with JavaFX WebView

choptastic — Wed, 05 Oct 2022 13:47:12 GMT

Can confirm, I’m also experiencing this, however it does seem, in my case, to be a recent development.

@Brett_Smith Were you able to find a solution?

Re: Duo Web v4 SDK compatibility with JavaFX WebView

Brett_Smith — Thu, 06 Oct 2022 12:05:40 GMT

@choptastic , no not yet. But, we are told (via the customer we investigated this for), that Duo have found a bug and are investigating.

It is interesting you have seen this work, as we have had the problem for some time and never seen it work. I should say that the legacy SDK has always and still works fine.

Re: Duo Web v4 SDK compatibility with JavaFX WebView

Brett_Smith — Mon, 17 Oct 2022 11:05:18 GMT

@choptastic, good news. This now works.

We were informed via our customer that Duo have deployed a fix, and our internal testing has shown it to now work work correctly. Hope this helps you too.

So thanks Duo for the resolution.

Re: Duo Web v4 SDK compatibility with JavaFX WebView

choptastic — Mon, 17 Oct 2022 13:46:26 GMT

@Brett_Smith that is excellent news. I’ve just tested and confirmed that it is indeed fixed for me as well. Excellent! Thanks for the heads up and I appreciate Duo putting out a fix for this.

topic Re: Duo Web v4 SDK compatibility with JavaFX WebView in APIs

Duo Web v4 SDK compatibility with JavaFX WebView

Re: Duo Web v4 SDK compatibility with JavaFX WebView

Re: Duo Web v4 SDK compatibility with JavaFX WebView

Re: Duo Web v4 SDK compatibility with JavaFX WebView

Re: Duo Web v4 SDK compatibility with JavaFX WebView