Organization invites fail based on keywords such as 'lock' in the email. #1191

Closed
opened 2026-04-06 01:41:24 +02:00 by MrUnknownDE · 0 comments
Owner

Originally created by @gigaion on 3/16/2024

Subject of the issue

Organization invites fail based on keywords such as 'lock' in the email.

Deployment environment

  • vaultwarden version:
    • Vaultwarden version: 1.30.5
  • Install method:

    • Tested on both latest docker running on either Ubuntu or Debian. Also tested on two separate unrelated installations of vaultwarden.
  • Clients used:

    • Web vault (Join Organization Now) link
  • Reverse proxy and version

    • Tested on both Nginx Proxy Manager (NPM) and Cloudflare Tunnels to verify it wasn't the reverse proxy causing the issue.
  • MySQL/MariaDB or PostgreSQL version:

    • PostgreSQL: Docker Image postgres:14.9
  • Other relevant details:

    • I've discovered a temporary work around to the issue. To get around the problem and have the user join do the following:
  1. Invite user to Organization like usual
  2. Have them create account and use link like normal.
  3. After they login and fail to join organization, have them stay on the logged in tab.
  4. While still logged in, copy the invite link and paste it into the Google Chrome browser URL bar and hit enter.
  5. The page will reload but remain logged in, and the link will work successfully on joining the organization.

I am unsure if this is a bug related specifically to Vaultwarden or the Web Vault code by Bitwarden. Any help by people with resources to test this on Bitwarden official clients would be beneficial in this troubleshooting.

Steps to reproduce

  • Install Vaultwarden like usual
  • Create an organization
  • Invite a user that contains a keyword such as 'lock' in it. In my example i did a username like testlock@input-your-domain-here.com
  • When they go to register using the link, they will be unable to join the organization even after doing the registration.
  • Out of 100+ people invited, there is a possibility this affects more then just the keyword 'lock', and I am actively going to start troubleshooting with another user to see if another blocked keyword exists.

Expected behaviour

  • User should be able to join organization like any other user.

Actual behaviour

  • User organization invite link does nothing for joining organization, unless you do the workaround method.
*Originally created by @gigaion on 3/16/2024* ### Subject of the issue Organization invites fail based on keywords such as 'lock' in the email. ### Deployment environment * vaultwarden version: - Vaultwarden version: 1.30.5 <!-- How the server was installed: Docker image, OS package, built from source, etc. --> * Install method: - Tested on both latest docker running on either Ubuntu or Debian. Also tested on two separate unrelated installations of vaultwarden. * Clients used: <!-- web vault, desktop, Android, iOS, etc. (if applicable) --> - Web vault (Join Organization Now) link * Reverse proxy and version - Tested on both Nginx Proxy Manager (NPM) and Cloudflare Tunnels to verify it wasn't the reverse proxy causing the issue. * MySQL/MariaDB or PostgreSQL version: <!-- if applicable --> - PostgreSQL: Docker Image postgres:14.9 * Other relevant details: - I've discovered a temporary work around to the issue. To get around the problem and have the user join do the following: 1. Invite user to Organization like usual 2. Have them create account and use link like normal. 3. After they login and fail to join organization, have them stay on the logged in tab. 4. While still logged in, copy the invite link and paste it into the Google Chrome browser URL bar and hit enter. 5. The page will reload but remain logged in, and the link will work successfully on joining the organization. I am unsure if this is a bug related specifically to Vaultwarden or the Web Vault code by Bitwarden. Any help by people with resources to test this on Bitwarden official clients would be beneficial in this troubleshooting. ### Steps to reproduce - Install Vaultwarden like usual - Create an organization - Invite a user that contains a keyword such as 'lock' in it. In my example i did a username like testlock@input-your-domain-here.com - When they go to register using the link, they will be unable to join the organization even after doing the registration. - Out of 100+ people invited, there is a possibility this affects more then just the keyword 'lock', and I am actively going to start troubleshooting with another user to see if another blocked keyword exists. ### Expected behaviour - User should be able to join organization like any other user. ### Actual behaviour - User organization invite link does nothing for joining organization, unless you do the workaround method.
Sign in to join this conversation.
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github/vaultwarden#1191