Can't log in on android with FIDO2 WebAuthn enabled #1306

Closed
opened 2026-04-06 01:44:25 +02:00 by MrUnknownDE · 0 comments
Owner

Originally created by @jonas-w on 12/20/2023

Subject of the issue

Logging in on Android fails with a stuck screen on "Validating" and the server logs say:
"2FA token not provided"

Deployment environment

  • vaultwarden version: 1.30.1
  • Install method: Docker image

  • Clients used: Android 2023.12.0 (both F-Droid and Google Play Store)

  • Reverse proxy and version: nginx 1.22.1

  • MySQL/MariaDB or PostgreSQL version: PostgreSQL 16

  • Other relevant details:

Steps to reproduce

Expected behaviour

  1. Select self-hosted
  2. Enter Vaultwarden URL
  3. Enter E-Mail Address
  4. Enter password
  5. Follow FIDO2 WebAuthn instructions
  6. login

Actual behaviour

[...]
5. See: "Validating" and spinner circle, and in the background the FIDO2 WebAuthn instructions are visible but it's loading infinitely.
6. no login

Troubleshooting data

This is the complete log data from starting the Android app until the "Validating" spinner logo.

vaultwarden  | [2023-12-20 00:57:57.826][request][INFO] GET /api/config/
vaultwarden  | [2023-12-20 00:57:57.826][response][INFO] (config) GET /api/config => 200 OK
vaultwarden  | [2023-12-20 00:57:59.055][request][INFO] GET /api/devices/knowndevice
vaultwarden  | [2023-12-20 00:57:59.058][response][INFO] (get_known_device) GET /api/devices/knowndevice => 200 OK
vaultwarden  | [2023-12-20 00:58:10.488][request][INFO] POST /identity/accounts/prelogin
vaultwarden  | [2023-12-20 00:58:10.489][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK
vaultwarden  | [2023-12-20 00:58:13.108][request][INFO] POST /identity/connect/token
vaultwarden  | [2023-12-20 00:58:13.162][error][ERROR] 2FA token not provided
vaultwarden  | [2023-12-20 00:58:13.163][response][INFO] (login) POST /identity/connect/token => 400 Bad Request

Maybe relevant: I've tried logging in via the Bitwarden Firefox extension and that worked.

*Originally created by @jonas-w on 12/20/2023* <!-- Please fill out the following template to make solving your problem easier and faster for us. This is only a guideline. If you think that parts are unnecessary for your issue, feel free to remove them. Remember to hide/redact personal or confidential information, such as passwords, IP addresses, and DNS names as appropriate. --> ### Subject of the issue Logging in on Android fails with a stuck screen on "Validating" and the server logs say: "2FA token not provided" ### Deployment environment <!-- ========================================================================================= Preferably, use the `Generate Support String` button on the admin page's Diagnostics tab. That will auto-generate most of the info requested in this section. ========================================================================================= --> <!-- The version number, obtained from the logs (at startup) or the admin diagnostics page --> <!-- This is NOT the version number shown on the web vault, which is versioned separately from vaultwarden --> <!-- Remember to check if your issue exists on the latest version first! --> * vaultwarden version: 1.30.1 <!-- How the server was installed: Docker image, OS package, built from source, etc. --> * Install method: Docker image * Clients used: Android 2023.12.0 (both F-Droid and Google Play Store) <!-- web vault, desktop, Android, iOS, etc. (if applicable) --> * Reverse proxy and version: nginx 1.22.1 <!-- if applicable --> * MySQL/MariaDB or PostgreSQL version: PostgreSQL 16 <!-- if applicable --> * Other relevant details: ### Steps to reproduce <!-- Tell us how to reproduce this issue. What parameters did you set (differently from the defaults) and how did you start vaultwarden? --> ### Expected behaviour <!-- Tell us what you expected to happen --> 1. Select self-hosted 2. Enter Vaultwarden URL 3. Enter E-Mail Address 4. Enter password 5. Follow FIDO2 WebAuthn instructions 6. login ### Actual behaviour <!-- Tell us what actually happened --> [...] 5. See: "Validating" and spinner circle, and in the background the FIDO2 WebAuthn instructions are visible but it's loading infinitely. 6. no login ### Troubleshooting data <!-- Share any log files, screenshots, or other relevant troubleshooting data --> This is the complete log data from starting the Android app until the "Validating" spinner logo. ```log vaultwarden | [2023-12-20 00:57:57.826][request][INFO] GET /api/config/ vaultwarden | [2023-12-20 00:57:57.826][response][INFO] (config) GET /api/config => 200 OK vaultwarden | [2023-12-20 00:57:59.055][request][INFO] GET /api/devices/knowndevice vaultwarden | [2023-12-20 00:57:59.058][response][INFO] (get_known_device) GET /api/devices/knowndevice => 200 OK vaultwarden | [2023-12-20 00:58:10.488][request][INFO] POST /identity/accounts/prelogin vaultwarden | [2023-12-20 00:58:10.489][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK vaultwarden | [2023-12-20 00:58:13.108][request][INFO] POST /identity/connect/token vaultwarden | [2023-12-20 00:58:13.162][error][ERROR] 2FA token not provided vaultwarden | [2023-12-20 00:58:13.163][response][INFO] (login) POST /identity/connect/token => 400 Bad Request ``` Maybe relevant: I've tried logging in via the Bitwarden Firefox extension and that worked.
Sign in to join this conversation.
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github/vaultwarden#1306