Problem
The webauthn4j-core direct dependency (implementation 'com.webauthn4j:webauthn4j-core:0.31.1.RELEASE') was added by mistake.
- Spring Security's
spring-security-webauthn module already depends on webauthn4j-core transitively
- The codebase has zero direct imports of
com.webauthn4j.* — all WebAuthn code uses Spring Security's abstraction layer
- Having it as an
implementation dependency forces webauthn4j-core onto consuming applications even if they don't use WebAuthn features
Fix
Remove the implementation 'com.webauthn4j:webauthn4j-core:0.31.1.RELEASE' line from build.gradle.
No other files need changes.
Problem
The
webauthn4j-coredirect dependency (implementation 'com.webauthn4j:webauthn4j-core:0.31.1.RELEASE') was added by mistake.spring-security-webauthnmodule already depends onwebauthn4j-coretransitivelycom.webauthn4j.*— all WebAuthn code uses Spring Security's abstraction layerimplementationdependency forceswebauthn4j-coreonto consuming applications even if they don't use WebAuthn featuresFix
Remove the
implementation 'com.webauthn4j:webauthn4j-core:0.31.1.RELEASE'line frombuild.gradle.No other files need changes.