[GH-ISSUE #7047] [PM-38801] Congstar: passkey does not work #127812

Open
opened 2026-06-13 21:15:01 -05:00 by GiteaMirror · 6 comments
Owner

Originally created by @WebworkrNet on GitHub (Jun 9, 2026).
Original GitHub issue: https://github.com/bitwarden/android/issues/7047

Origin

Native Application (non-browser app)

Web URL or App name

sso.congstar.de

Passkey Action

  • Creating new passkey (Registration)
  • Signing in (Authentication)

Build Information

© Bitwarden Inc. 2015-2026

Version: 2026.4.2 (21562)
📱 samsung SM-A176B 🤖 16@36 📦 prod
🧱 commit: https://github.com/bitwarden/android/commit/2e88a418a11a042fed230a0871cdcaa9bbff0c04
💻 build source: bitwarden/android/actions/runs/25866701011/attempts/1
🦀 SDK: 2.0.0-6825-release-hotfix-v2026.4.1-bwpm
🌩 Server: 2026.5.0 @ EU

Additional Information

Passkey: Congstar presumably does not support third-party providers (like Bitwarden) and only allows a single key to be stored.

In the past, however, creating and logging in using Google's passkey worked without any problems.

Issue Tracking Info

  • I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.
Originally created by @WebworkrNet on GitHub (Jun 9, 2026). Original GitHub issue: https://github.com/bitwarden/android/issues/7047 ### Origin Native Application (non-browser app) ### Web URL or App name sso.congstar.de ### Passkey Action - [x] Creating new passkey (Registration) - [ ] Signing in (Authentication) ### Build Information © Bitwarden Inc. 2015-2026 Version: 2026.4.2 (21562) 📱 samsung SM-A176B 🤖 16@36 📦 prod 🧱 commit: https://github.com/bitwarden/android/commit/2e88a418a11a042fed230a0871cdcaa9bbff0c04 💻 build source: bitwarden/android/actions/runs/25866701011/attempts/1 🦀 SDK: 2.0.0-6825-release-hotfix-v2026.4.1-bwpm 🌩 Server: 2026.5.0 @ EU ### Additional Information Passkey: `Congstar` presumably does not support third-party providers (like Bitwarden) and only allows a single key to be stored. In the past, however, creating and logging in using Google's passkey worked without any problems. ### Issue Tracking Info - [x] I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.
GiteaMirror added the bug-passkeyapp:password-manager labels 2026-06-13 21:15:01 -05:00
Author
Owner

@bitwarden-bot commented on GitHub (Jun 9, 2026):

Thank you for your report! We've added this to our internal board for review.
ID: PM-38801

<!-- gh-comment-id:4663690004 --> @bitwarden-bot commented on GitHub (Jun 9, 2026): Thank you for your report! We've added this to our internal board for review. ID: [PM-38801](https://bitwarden.atlassian.net/browse/PM-38801) [PM-38801]: https://bitwarden.atlassian.net/browse/PM-38801?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ
Author
Owner

@WebworkrNet commented on GitHub (Jun 9, 2026):

The login domain is used by the following apps:

(This list is not exhaustive!)

<!-- gh-comment-id:4663815008 --> @WebworkrNet commented on GitHub (Jun 9, 2026): The login domain is used by the following apps: - [ja! mobil](https://play.google.com/store/apps/details?id=de.congstar.ja) - [Penny Mobil](https://play.google.com/store/apps/details?id=de.congstar.penny) (This list is not exhaustive!)
Author
Owner

@WebworkrNet commented on GitHub (Jun 9, 2026):

The following apps probably also use the login domain: https://play.google.com/store/apps/developer?id=congstar+GmbH.

<!-- gh-comment-id:4663882073 --> @WebworkrNet commented on GitHub (Jun 9, 2026): The following apps probably also use the login domain: https://play.google.com/store/apps/developer?id=congstar+GmbH.
Author
Owner

@WebworkrNet commented on GitHub (Jun 9, 2026):

To the best of my knowledge, both Congstar GmbH and Congstar Services GmbH are subsidiaries of Deutsche Telekom. They use the same mobile network as their parent company. It can be assumed that the Passkey architecture is consistent behind the scenes, even though different domains are in use.

See also: #7046,
(PM-38800 Deutsche Telekom: passkey does not work).

<!-- gh-comment-id:4664172405 --> @WebworkrNet commented on GitHub (Jun 9, 2026): To the best of my knowledge, both `Congstar GmbH` and `Congstar Services GmbH` are subsidiaries of `Deutsche Telekom`. They use the same mobile network as their parent company. It can be assumed that the Passkey architecture is consistent behind the scenes, even though different domains are in use. See also: #7046, (_[PM-38800] `Deutsche Telekom`: passkey does not work)_. [PM-38800]: https://bitwarden.atlassian.net/browse/PM-38800?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ
Author
Owner

@WebworkrNet commented on GitHub (Jun 9, 2026):

See also:
https://bugzilla.mozilla.org/show_bug.cgi?id=2046255.

<!-- gh-comment-id:4665161733 --> @WebworkrNet commented on GitHub (Jun 9, 2026): See also: https://bugzilla.mozilla.org/show_bug.cgi?id=2046255.
Author
Owner

@WebworkrNet commented on GitHub (Jun 10, 2026):

In light of the developments in #7046, I suggest we wait and see what our colleagues at Mozilla come up with.

<!-- gh-comment-id:4670145158 --> @WebworkrNet commented on GitHub (Jun 10, 2026): In light of the developments in #7046, I suggest we wait and see what our colleagues at Mozilla come up with.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/android#127812