this.append is not a function error when trying to log in #136

New Issue

MrUnknownDE · 2026-04-05T20:31:50+02:00

MrUnknownDE commented

2026-04-05 20:31:50 +02:00

Originally created by @spizzadev on 1/27/2026

Prerequisites

I have searched the existing Closed AND Open Issues AND Discussions
I have searched and read the documentation

Vaultwarden Support String

not applicable

Vaultwarden Build Version

v1.35.2/latest/v1.35.2-alpine

Deployment method

Official Container Image

Custom deployment method

No response

Reverse Proxy

traefik 3.4.4

Host/Server Operating System

Linux

Operating System Version

Alpine Linux

Clients

Web Vault

Client Version

2025.12.1

Steps To Reproduce

deploy vaultwarden using this config:

services:
  vaultwarden:
    image: vaultwarden/server:latest
    environment:
      DOMAIN: https://vault.example.com
      WEB_VAULT_ENABLED: "true"
    volumes:
      - vaultwarden-data:/data/
    labels:
      - traefik.enable=true
      - traefik.http.routers.vaultwarden.rule=Host(`vault.example.com`)
      - traefik.http.routers.vaultwarden.entryPoints=websecure
      - traefik.http.routers.vaultwarden.tls.certresolver=cloudflare
      - traefik.http.services.vaultwarden.loadbalancer.server.port=80

volumes:
  vaultwarden-data:

note: I use cloudflare's dns-only records, so no js manipulation is happening there, js files appear as js in my browser.
3. Open https://vault.example.com, try to sign up, once you click the button it shows a toast "this.append is not a function" and you are unable to login. (this is an issue for SSO too)

Expected Result

Normal login procedure

Actual Result

error message + not able to login

Logs

[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET    /api/organizations/<org_id>/tax
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] DELETE /api/organizations/<org_id>/users
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET    /api/organizations/<org_id>/users?<data..>
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT    /api/organizations/<org_id>/users/<member_id> [1]
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] DELETE /api/organizations/<org_id>/users/<member_id>
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST   /api/organizations/<org_id>/users/<member_id> [1]
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET    /api/organizations/<org_id>/users/<member_id>?<data..> [2]
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST   /api/organizations/<org_id>/users/<member_id>/accept
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT    /api/organizations/<org_id>/users/<member_id>/activate
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST   /api/organizations/<org_id>/users/<member_id>/confirm
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT    /api/organizations/<org_id>/users/<member_id>/deactivate
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST   /api/organizations/<org_id>/users/<member_id>/delete
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET    /api/organizations/<org_id>/users/<member_id>/events?<data..>
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT    /api/organizations/<org_id>/users/<member_id>/groups
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST   /api/organizations/<org_id>/users/<member_id>/groups
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET    /api/organizations/<org_id>/users/<member_id>/groups
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST   /api/organizations/<org_id>/users/<member_id>/reinvite
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT    /api/organizations/<org_id>/users/<member_id>/reset-password
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET    /api/organizations/<org_id>/users/<member_id>/reset-password-details
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT    /api/organizations/<org_id>/users/<member_id>/reset-password-enrollment
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT    /api/organizations/<org_id>/users/<member_id>/restore
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT    /api/organizations/<org_id>/users/<member_id>/revoke
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT    /api/organizations/<org_id>/users/activate
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST   /api/organizations/<org_id>/users/confirm
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT    /api/organizations/<org_id>/users/deactivate
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST   /api/organizations/<org_id>/users/invite
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET    /api/organizations/<org_id>/users/mini-details [1]
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST   /api/organizations/<org_id>/users/public-keys
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST   /api/organizations/<org_id>/users/reinvite
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT    /api/organizations/<org_id>/users/restore
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT    /api/organizations/<org_id>/users/revoke
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST   /api/organizations/domain/sso/verified
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET    /api/plans
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET    /api/plans/all
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET    /api/plans/sales-tax-rates
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /api/public/organization/import
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /api/sends
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET    /api/sends
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT    /api/sends/<send_id>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] DELETE /api/sends/<send_id>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET    /api/sends/<send_id>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET    /api/sends/<send_id>/<file_id>?<t>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /api/sends/<send_id>/access/file/<file_id>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /api/sends/<send_id>/file/<file_id>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT    /api/sends/<send_id>/remove-password
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /api/sends/access/<access_id>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /api/sends/file
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /api/sends/file/v2
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT    /api/settings/domains
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /api/settings/domains
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET    /api/settings/domains
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET    /api/sync?<data..>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET    /api/tasks
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET    /api/two-factor
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT    /api/two-factor/authenticator
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] DELETE /api/two-factor/authenticator
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /api/two-factor/authenticator
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT    /api/two-factor/disable
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /api/two-factor/disable
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT    /api/two-factor/duo
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /api/two-factor/duo
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT    /api/two-factor/email
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /api/two-factor/get-authenticator
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET    /api/two-factor/get-device-verification-settings
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /api/two-factor/get-duo
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /api/two-factor/get-email
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /api/two-factor/get-recover
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /api/two-factor/get-webauthn
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /api/two-factor/get-webauthn-challenge
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /api/two-factor/get-yubikey
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /api/two-factor/recover
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /api/two-factor/send-email
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /api/two-factor/send-email-login
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT    /api/two-factor/webauthn
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] DELETE /api/two-factor/webauthn
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /api/two-factor/webauthn
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT    /api/two-factor/yubikey
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /api/two-factor/yubikey
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET    /api/users/<user_id>/public-key
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET    /api/version
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET    /api/webauthn
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET    /app-id.json
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET    /attachments/<cipher_id>/<file_id>?<token>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET    /css/vaultwarden.css
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /events/collect
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET    /icons/<domain>/icon.png
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /identity/accounts/prelogin
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /identity/accounts/register
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /identity/accounts/register/finish
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /identity/accounts/register/send-verification-email
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET    /identity/connect/authorize?<data..>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET    /identity/connect/oidc-signin?<code>&<state> [1]
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET    /identity/connect/oidc-signin?<state>&<error>&<error_description> [2]
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST   /identity/connect/token
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET    /identity/sso/prevalidate
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET    /index.html
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET    /notifications/anonymous-hub?<token..>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET    /notifications/hub?<data..>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET    /vw_static/<filename> [2]
[vaultwarden] [2026-01-27 17:21:34.038][start][INFO] Rocket has launched from http://0.0.0.0:80
[vaultwarden] [2026-01-27 17:22:34.011][request][INFO] GET /alive
[vaultwarden] [2026-01-27 17:22:34.012][response][INFO] (alive) GET /alive => 200 OK
[vaultwarden] [2026-01-27 17:22:34.026][vaultwarden::api::core::two_factor][DEBUG] Sending notifications for incomplete 2FA logins
[vaultwarden] [2026-01-27 17:22:34.026][vaultwarden::api::core::two_factor::duo_oidc][DEBUG] Purging Duo authentication contexts
[vaultwarden] [2026-01-27 17:22:34.026][vaultwarden::api::core::accounts][DEBUG] Purging auth requests
[vaultwarden] [2026-01-27 17:22:53.069][request][INFO] GET /
[vaultwarden] [2026-01-27 17:22:53.070][response][INFO] (web_index) GET / => 200 OK
[vaultwarden] [2026-01-27 17:22:53.821][request][INFO] GET /api/config
[vaultwarden] [2026-01-27 17:22:53.821][response][INFO] (config) GET /api/config => 200 OK
[vaultwarden] [2026-01-27 17:23:34.028][vaultwarden::api::core::accounts][DEBUG] Purging auth requests
[vaultwarden] [2026-01-27 17:23:34.028][vaultwarden::api::core::two_factor::duo_oidc][DEBUG] Purging Duo authentication contexts
[vaultwarden] [2026-01-27 17:23:34.028][vaultwarden::api::core::two_factor][DEBUG] Sending notifications for incomplete 2FA logins
[vaultwarden] [2026-01-27 17:23:34.154][request][INFO] GET /alive
[vaultwarden] [2026-01-27 17:23:34.155][response][INFO] (alive) GET /alive => 200 OK



note: used debug log level, first tried using sso login, then normal account creation.

Screenshots or Videos

Additional Context

I run another instance the same way (traefik + cloudflare + alpine) which worked perfectly fine in the past but since upgrading the same issue appeared. for that instance the bitwarden android app and browser extension continued to work, just the web vault is causing problems.

*Originally created by @spizzadev on 1/27/2026* ### Prerequisites - [x] I have searched the existing **Closed _AND_ Open** [Issues](https://github.com/dani-garcia/vaultwarden/issues?q=is%3Aissue%20) **_AND_** [Discussions](https://github.com/dani-garcia/vaultwarden/discussions?discussions_q=) - [x] I have searched and read the [documentation](https://github.com/dani-garcia/vaultwarden/wiki/) ### Vaultwarden Support String not applicable ### Vaultwarden Build Version v1.35.2/latest/v1.35.2-alpine ### Deployment method Official Container Image ### Custom deployment method _No response_ ### Reverse Proxy traefik 3.4.4 ### Host/Server Operating System Linux ### Operating System Version Alpine Linux ### Clients Web Vault ### Client Version 2025.12.1 ### Steps To Reproduce 1. deploy vaultwarden using this config: ``` services: vaultwarden: image: vaultwarden/server:latest environment: DOMAIN: https://vault.example.com WEB_VAULT_ENABLED: "true" volumes: - vaultwarden-data:/data/ labels: - traefik.enable=true - traefik.http.routers.vaultwarden.rule=Host(`vault.example.com`) - traefik.http.routers.vaultwarden.entryPoints=websecure - traefik.http.routers.vaultwarden.tls.certresolver=cloudflare - traefik.http.services.vaultwarden.loadbalancer.server.port=80 volumes: vaultwarden-data: ``` note: I use cloudflare's dns-only records, so no js manipulation is happening there, js files appear as js in my browser. 3. Open https://vault.example.com, try to sign up, once you click the button it shows a toast "this.append is not a function" and you are unable to login. (this is an issue for SSO too) ### Expected Result Normal login procedure ### Actual Result error message + not able to login ### Logs ```text [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/organizations/<org_id>/tax [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] DELETE /api/organizations/<org_id>/users [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/organizations/<org_id>/users?<data..> [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/<member_id> [1] [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] DELETE /api/organizations/<org_id>/users/<member_id> [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/<member_id> [1] [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/organizations/<org_id>/users/<member_id>?<data..> [2] [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/<member_id>/accept [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/<member_id>/activate [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/<member_id>/confirm [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/<member_id>/deactivate [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/<member_id>/delete [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/organizations/<org_id>/users/<member_id>/events?<data..> [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/<member_id>/groups [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/<member_id>/groups [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/organizations/<org_id>/users/<member_id>/groups [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/<member_id>/reinvite [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/<member_id>/reset-password [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/organizations/<org_id>/users/<member_id>/reset-password-details [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/<member_id>/reset-password-enrollment [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/<member_id>/restore [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/<member_id>/revoke [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/activate [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/confirm [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/deactivate [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/invite [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/organizations/<org_id>/users/mini-details [1] [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/public-keys [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/reinvite [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/restore [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/revoke [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/domain/sso/verified [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/plans [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/plans/all [vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/plans/sales-tax-rates [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/public/organization/import [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/sends [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/sends [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/sends/<send_id> [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] DELETE /api/sends/<send_id> [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/sends/<send_id> [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/sends/<send_id>/<file_id>?<t> [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/sends/<send_id>/access/file/<file_id> [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/sends/<send_id>/file/<file_id> [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/sends/<send_id>/remove-password [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/sends/access/<access_id> [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/sends/file [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/sends/file/v2 [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/settings/domains [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/settings/domains [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/settings/domains [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/sync?<data..> [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/tasks [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/two-factor [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/two-factor/authenticator [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] DELETE /api/two-factor/authenticator [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/authenticator [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/two-factor/disable [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/disable [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/two-factor/duo [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/duo [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/two-factor/email [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/get-authenticator [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/two-factor/get-device-verification-settings [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/get-duo [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/get-email [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/get-recover [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/get-webauthn [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/get-webauthn-challenge [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/get-yubikey [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/recover [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/send-email [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/send-email-login [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/two-factor/webauthn [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] DELETE /api/two-factor/webauthn [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/webauthn [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/two-factor/yubikey [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/yubikey [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/users/<user_id>/public-key [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/version [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/webauthn [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /app-id.json [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /attachments/<cipher_id>/<file_id>?<token> [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /css/vaultwarden.css [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /events/collect [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /icons/<domain>/icon.png [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /identity/accounts/prelogin [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /identity/accounts/register [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /identity/accounts/register/finish [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /identity/accounts/register/send-verification-email [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /identity/connect/authorize?<data..> [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /identity/connect/oidc-signin?<code>&<state> [1] [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /identity/connect/oidc-signin?<state>&<error>&<error_description> [2] [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /identity/connect/token [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /identity/sso/prevalidate [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /index.html [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /notifications/anonymous-hub?<token..> [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /notifications/hub?<data..> [vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /vw_static/<filename> [2] [vaultwarden] [2026-01-27 17:21:34.038][start][INFO] Rocket has launched from http://0.0.0.0:80 [vaultwarden] [2026-01-27 17:22:34.011][request][INFO] GET /alive [vaultwarden] [2026-01-27 17:22:34.012][response][INFO] (alive) GET /alive => 200 OK [vaultwarden] [2026-01-27 17:22:34.026][vaultwarden::api::core::two_factor][DEBUG] Sending notifications for incomplete 2FA logins [vaultwarden] [2026-01-27 17:22:34.026][vaultwarden::api::core::two_factor::duo_oidc][DEBUG] Purging Duo authentication contexts [vaultwarden] [2026-01-27 17:22:34.026][vaultwarden::api::core::accounts][DEBUG] Purging auth requests [vaultwarden] [2026-01-27 17:22:53.069][request][INFO] GET / [vaultwarden] [2026-01-27 17:22:53.070][response][INFO] (web_index) GET / => 200 OK [vaultwarden] [2026-01-27 17:22:53.821][request][INFO] GET /api/config [vaultwarden] [2026-01-27 17:22:53.821][response][INFO] (config) GET /api/config => 200 OK [vaultwarden] [2026-01-27 17:23:34.028][vaultwarden::api::core::accounts][DEBUG] Purging auth requests [vaultwarden] [2026-01-27 17:23:34.028][vaultwarden::api::core::two_factor::duo_oidc][DEBUG] Purging Duo authentication contexts [vaultwarden] [2026-01-27 17:23:34.028][vaultwarden::api::core::two_factor][DEBUG] Sending notifications for incomplete 2FA logins [vaultwarden] [2026-01-27 17:23:34.154][request][INFO] GET /alive [vaultwarden] [2026-01-27 17:23:34.155][response][INFO] (alive) GET /alive => 200 OK note: used debug log level, first tried using sso login, then normal account creation. ``` ### Screenshots or Videos <img width="345" height="105" alt="Image" src="https://github.com/user-attachments/assets/4cf405fd-b344-49da-8345-2274aea47eb7" /> ### Additional Context I run another instance the same way (traefik + cloudflare + alpine) which worked perfectly fine in the past but since upgrading the same issue appeared. for that instance the bitwarden android app and browser extension continued to work, just the web vault is causing problems.

MrUnknownDE closed this issue

2026-04-05 20:31:50 +02:00

MrUnknownDE added the bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug labels 2026-04-05 20:31:55 +02:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/vaultwarden#136