FIDO2 WebAuthn frame no longer loads in Web Vault #1949

New Issue

MrUnknownDE · 2026-04-06T02:41:44+02:00

MrUnknownDE commented

2026-04-06 02:41:44 +02:00

Originally created by @ducmthai on 10/19/2022

FIDO2 WebAuthn prompt frame does not load

The iframe is saying my-selfhost-vault.com refused to connect. my-selfhost-vault.com is served through Cloudflare

Deployment environment

vaultwarden version: 1.26-alpine

Install method: docker
Clients used: web vault
Reverse proxy and version: nginx 1.18
MySQL/MariaDB or PostgreSQL version: N/A
Other relevant details: Cloudflare -> nginx -> vaultwarden docker

Steps to reproduce

Setup a Yubikey as FIDO2 WebAuthn 2fa, then login via webvault

Expected behaviour

The FIDO2 WebAuthn page should prompt for a toutch/tap the security key.

Actual behaviour

The iframe where /images/u2fkey.webp is usually showed just says my-selfhost-vault.com refused to connect.

Troubleshooting data

1.25.0-alpine works with /webauthn-connector.html?data=<token> has x-frame-options: SAMEORIGIN in its response header. 1.26.0-alpine does not have this header.

1.26.0

1.25.0

*Originally created by @ducmthai on 10/19/2022*   ### FIDO2 WebAuthn prompt frame does not load The iframe is saying `my-selfhost-vault.com` refused to connect. `my-selfhost-vault.com` is served through Cloudflare ### Deployment environment     * vaultwarden version: 1.26-alpine  * Install method: docker * Clients used: web vault * Reverse proxy and version: nginx 1.18 * MySQL/MariaDB or PostgreSQL version: N/A * Other relevant details: Cloudflare -> nginx -> vaultwarden docker ### Steps to reproduce Setup a Yubikey as FIDO2 WebAuthn 2fa, then login via webvault ### Expected behaviour The FIDO2 WebAuthn page should prompt for a toutch/tap the security key. ### Actual behaviour The iframe where `/images/u2fkey.webp` is usually showed just says `my-selfhost-vault.com` refused to connect. ### Troubleshooting data `1.25.0-alpine` works with `/webauthn-connector.html?data=<token>` has `x-frame-options: SAMEORIGIN` in its response header. `1.26.0-alpine` does not have this header. ### 1.26.0 ![1 26 0](https://user-images.githubusercontent.com/13193688/196568071-399adf9e-cbf9-4415-96e5-c5636432c573.png) ### 1.25.0 ![1 25 0](https://user-images.githubusercontent.com/13193688/196568077-817da357-a88e-46f2-9022-18cdc64efb53.png)

MrUnknownDE closed this issue

2026-04-06 02:41:44 +02:00

Sign in to join this conversation.

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/vaultwarden#1949