fix email as 2fa provider #277

New Issue

MrUnknownDE · 2026-04-05T20:46:21+02:00

MrUnknownDE commented

2026-04-05 20:46:21 +02:00

Originally created by @stefan0xC on 11/18/2025

as discussed in https://github.com/dani-garcia/vaultwarden/discussions/6471#discussioncomment-14978860 we want to get the correct user account for a given mail address when sending the 2fa via mail so I've reverted some of the changes introduced by e3d66216f6

NOTE: this won't fix the invitation flow change because we can only activate email as second factor, so this will still be set up automatically between signup and login if 2fa is required. after registration you will be sent an email (unless you have disabled mail as second factor) which you have to confirm. if you do everything in one session this will also accept the invitation. (if you have disabled 2fa as second factor the flow will be broken a bit because you will have to setup 2fa the old fashioned way after signup. you will also likely have to be reinvited because the generated link is missing the needed parameter orgUserHasExistingUser=true to redirect you to login instead of the signup form.)

*Originally created by @stefan0xC on 11/18/2025* as discussed in https://github.com/dani-garcia/vaultwarden/discussions/6471#discussioncomment-14978860 we want to get the correct user account for a given mail address when sending the 2fa via mail so I've reverted some of the changes introduced by https://github.com/dani-garcia/vaultwarden/commit/e3d66216f66e25d27a017232205c08dec94e0d32 NOTE: this won't fix the invitation flow change because we can only activate email as second factor, so this will still be set up automatically between signup and login if 2fa is required. after registration you will be sent an email (unless you have disabled mail as second factor) which you have to confirm. if you do everything in one session this will also accept the invitation. (if you have disabled 2fa as second factor the flow will be broken a bit because you will have to setup 2fa the old fashioned way after signup. you will also likely have to be reinvited because the generated link is missing the needed parameter `orgUserHasExistingUser=true` to redirect you to login instead of the signup form.)

MrUnknownDE closed this issue

2026-04-05 20:46:21 +02:00

Sign in to join this conversation.

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/vaultwarden#277