Access to fetch at 'https://2fa.directory/api/v3/totp.json' has been blocked by CORS policy #1829

New Issue

MrUnknownDE · 2026-04-06T02:27:14+02:00

MrUnknownDE commented

2026-04-06 02:27:14 +02:00

Originally created by @ob-tk on 12/29/2022

Subject of the issue

After update to 1.27.0 [Latest] the ability to check for enabled 2FA is broken.

In the Chrome browser console, the following information:
"Access to fetch at 'https://2fa.directory/api/v3/totp.json' from origin 'https://my.doma.in' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled."

In the Web Vault always "good news".

Deployment environment

vaultwarden version: 1.27.0 [Latest]

Install method: Docker image (vaultwarden/server:latest)
Clients used: web wault (Chrome/Firefox/Opera browsers)
Reverse proxy and version: nginx/1.23.2
MySQL/MariaDB or PostgreSQL version: sqlite3
Other relevant details:

Steps to reproduce

Expected behaviour

Actual behaviour

Troubleshooting data

*Originally created by @ob-tk on 12/29/2022*   ### Subject of the issue  After update to **1.27.0 [Latest]** the ability to check for enabled 2FA is broken. In the Chrome browser console, the following information: "Access to fetch at 'https://2fa.directory/api/v3/totp.json' from origin 'https://my.doma.in' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled." In the Web Vault always "**good news**". ![image](https://user-images.githubusercontent.com/17561825/209979702-e38be947-d063-4408-9e4c-bd264b9fafe4.png) ### Deployment environment     * vaultwarden version: **1.27.0 [Latest]**  * Install method: **Docker image** (vaultwarden/server:latest) * Clients used:  **web wault** (Chrome/Firefox/Opera browsers) * Reverse proxy and version:  **nginx**/1.23.2 * MySQL/MariaDB or PostgreSQL version:  **sqlite3** * Other relevant details: ### Steps to reproduce  ### Expected behaviour  ### Actual behaviour  ### Troubleshooting data

MrUnknownDE closed this issue

2026-04-06 02:27:14 +02:00

MrUnknownDE added the future Vault Third party future Vault future Vault Third party Third party Third party Third party Third party Third party Third party labels 2026-04-06 02:27:15 +02:00

Sign in to join this conversation.

No Label Third party Third party Third party Third party Third party Third party Third party Third party future Vault future Vault future Vault

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/vaultwarden#1829