XF 2.3 Server error log - Two-step verification

[MITK]

Getting an error and trying to figure out how to prevent it in the future. Below is the output to the error and its seems to be related to two step verification which is set to passkey.

Anyone have any syggestions?

• lbuchs\WebAuthn\WebAuthnException: invalid origin
• src/vendor/lbuchs/webauthn/src/WebAuthn.php:455
• Generated by: Unknown account
• May 18, 2025 at 6:11 AM

Stack trace​

#0 src/XF/Service/Passkey/ManagerService.php(124): lbuchs\WebAuthn\WebAuthn->processGet('{"type":"webaut...', [invalid], [invalid], '-----BEGIN PUBL...', Object(lbuchs\WebAuthn\Binary\ByteBuffer))
#1 src/XF/Tfa/Passkey.php(57): XF\Service\Passkey\ManagerService->validate(Object(XF\Http\Request), NULL)
#2 src/XF/Service/User/TfaService.php(136): XF\Tfa\Passkey->verify('login', Object(XF\Entity\User), Array, Object(XF\Http\Request))
#3 src/XF/ControllerPlugin/LoginPlugin.php(135): XF\Service\User\TfaService->verify(Object(XF\Http\Request), 'passkey')
#4 src/XF/Pub/Controller/LoginController.php(188): XF\ControllerPlugin\LoginPlugin->runTfaCheck('https://wdw360....')
#5 src/XF/Mvc/Dispatcher.php(362): XF\Pub\Controller\LoginController->actionTwoStep(Object(XF\Mvc\ParameterBag))
#6 src/XF/Mvc/Dispatcher.php(264): XF\Mvc\Dispatcher->dispatchClass('XF:Login', 'TwoStep', Object(XF\Mvc\RouteMatch), Object(XF\Pub\Controller\LoginController), NULL)
#7 src/XF/Mvc/Dispatcher.php(121): XF\Mvc\Dispatcher->dispatchFromMatch(Object(XF\Mvc\RouteMatch), Object(XF\Pub\Controller\LoginController), NULL)
#8 src/XF/Mvc/Dispatcher.php(63): XF\Mvc\Dispatcher->dispatchLoop(Object(XF\Mvc\RouteMatch))
#9 src/XF/App.php(2826): XF\Mvc\Dispatcher->run()
#10 src/XF.php(806): XF\App->run()
#11 index.php(23): XF::runApp('XF\\Pub\\App')
#12 {main}

Request state​

array(4) {
["url"] => string(15) "/login/two-step"
["referrer"] => string(95) "https://wdw360.com/login/two-step?_xfRedirect=https://wdw360.com/?_pwa=1&remember=1"
["_GET"] => array(0) {
}
["_POST"] => array(11) {
["_xfToken"] => string(8) "********"
["webauthn_payload"] => string(591) "{"id":"f0+TXQhNt7DNq4NFMUlncfC3ks8=","authenticatorData":"70+3Zohs8Hf6hUCLQ+vargvcu4ezhfuCV2hbDu/1flwdAAAAAA==","clientDataJSON":"eyJ0eXBlIjoid2ViYXV0aG4uZ2V0IiwiY2hhbGxlbmdlIjoiVmswelV6ZGZVMDAwT1RVdGRFdFNZVWRMU0RKUlJtSXRkMnBmZUMxNU1VMXljVXhaZEZJeGIwZHljVWxvYVhadE1uQjROMWhRWDB4SFUyZElXbXBYT0ZSSlpGSlNPVzFIYm13NU9HMWFkVFI1VG13MlNrTkdhbGc0VkZkZlRrdHRiV2cyYlU1bmFtTlNSRTV5WWtwRFMyNXpPVmN0ZFRCblJuQmpVRTF6TVVVIiwib3JpZ2luIjoiaHR0cHM6Ly93ZHczNjAuY29tIiwiY3Jvc3NPcmlnaW4iOmZhbHNlfQ==","signature":"MEQCIFlkM0gHaxr9pr3eoJA8xbL7ig3892jSjM8B38MeVwwHAiBuRzDugHDbDDjnVBq6hDdMQNtqOp9GLPVXfMde7unZeA=="}"
["webauthn_challenge"] => string(128) "VM3S7_SM495-tKRaGKH2QFb-wj_x-y1MrqLYtR1oGrqIhivm2px7XP_LGSgHZjW8TIdRR9mGnl98mZu4yNl6JCFjX8TW_NKmmh6mNgjcRDNrbJCKns9W-u0gFpcPMs1E"
["trust"] => string(1) "1"
["confirm"] => string(1) "1"
["provider"] => string(7) "passkey"
["remember"] => string(1) "1"
["_xfRedirect"] => string(26) "https://wdw360.com/?_pwa=1"
["_xfResponseType"] => string(4) "json"
["_xfWithData"] => string(1) "1"
["_xfRequestUri"] => string(77) "/login/two-step?_xfRedirect=https%3A%2F%2Fwdw360.com%2F%3F_pwa%3D1&remember=1"
}
}