github-starred/vaultwarden
2
0
Fork 0
mirror of https://github.com/dani-garcia/vaultwarden.git synced 2026-05-24 00:53:23 -05:00
Code Issues 307 Packages Projects Releases 83 Wiki Activity

TOTP not working with some services #1435

New Issue
Closed
opened 2025-11-07 07:06:32 -06:00 by GiteaMirror · 4 comments
GiteaMirror commented 2025-11-07 07:06:32 -06:00
Owner
Copy Link

Originally created by @0xab3d on GitHub (Dec 16, 2022).

Subject of the issue

TOTP not working with some services such as sucuri.net

Deployment environment

  • vaultwarden version: 1.26

  • Install method: Docker

  • Clients used: web vault and Edge extension

  • Reverse proxy and version: Sucuri SaaS

  • MySQL/MariaDB or PostgreSQL version:

  • Other relevant details:

Steps to reproduce

Edit the Sucuri entry, try to add the TOTP seed, nothing happens. Once I click save, the Edge extension just logs out. Replicated this on the web as well.

Expected behaviour

TOTP seed starts providing the 6 digit codes.

Actual behaviour

The Edge extension and the web session logs out when I save the changes.

Troubleshooting data

Originally created by @0xab3d on GitHub (Dec 16, 2022). <!-- # ### NOTE: Please update to the latest version of vaultwarden before reporting an issue! This saves you and us a lot of time and troubleshooting. See: * https://github.com/dani-garcia/vaultwarden/issues/1180 * https://github.com/dani-garcia/vaultwarden/wiki/Updating-the-vaultwarden-image # ### --> <!-- Please fill out the following template to make solving your problem easier and faster for us. This is only a guideline. If you think that parts are unnecessary for your issue, feel free to remove them. Remember to hide/redact personal or confidential information, such as passwords, IP addresses, and DNS names as appropriate. --> ### Subject of the issue <!-- Describe your issue here. --> TOTP not working with some services such as _sucuri.net_ ### Deployment environment <!-- ========================================================================================= Preferably, use the `Generate Support String` button on the admin page's Diagnostics tab. That will auto-generate most of the info requested in this section. ========================================================================================= --> <!-- The version number, obtained from the logs (at startup) or the admin diagnostics page --> <!-- This is NOT the version number shown on the web vault, which is versioned separately from vaultwarden --> <!-- Remember to check if your issue exists on the latest version first! --> * vaultwarden version: 1.26 <!-- How the server was installed: Docker image, OS package, built from source, etc. --> * Install method: Docker * Clients used: <!-- web vault, desktop, Android, iOS, etc. (if applicable) --> web vault and Edge extension * Reverse proxy and version: <!-- if applicable --> Sucuri SaaS * MySQL/MariaDB or PostgreSQL version: <!-- if applicable --> * Other relevant details: ### Steps to reproduce <!-- Tell us how to reproduce this issue. What parameters did you set (differently from the defaults) and how did you start vaultwarden? --> Edit the Sucuri entry, try to add the TOTP seed, nothing happens. Once I click save, the Edge extension just logs out. Replicated this on the web as well. ### Expected behaviour <!-- Tell us what you expected to happen --> TOTP seed starts providing the 6 digit codes. ### Actual behaviour <!-- Tell us what actually happened --> The Edge extension and the web session logs out when I save the changes. ### Troubleshooting data <!-- Share any log files, screenshots, or other relevant troubleshooting data -->
GiteaMirror commented 2025-11-07 07:06:32 -06:00
Author
Owner
Copy Link

@BlackDex commented on GitHub (Dec 16, 2022):

I'm not sure how Sucuri SaaS works. Does that add an extra layer of authentication, then that could be an issue.

@BlackDex commented on GitHub (Dec 16, 2022): I'm not sure how Sucuri SaaS works. Does that add an extra layer of authentication, then that could be an issue.
GiteaMirror commented 2025-11-07 07:06:33 -06:00
Author
Owner
Copy Link

@0xab3d commented on GitHub (Dec 16, 2022):

Hey, it is a reverse proxy (acting as WAF)

@0xab3d commented on GitHub (Dec 16, 2022): Hey, it is a reverse proxy (acting as WAF)
GiteaMirror commented 2025-11-07 07:06:33 -06:00
Author
Owner
Copy Link

@BlackDex commented on GitHub (Dec 16, 2022):

I think the WAF is removing some headers or other items, which breaks either the client or server.

Check the logs, maybe set the log-level to debug for some more info.

@BlackDex commented on GitHub (Dec 16, 2022): I think the WAF is removing some headers or other items, which breaks either the client or server. Check the logs, maybe set the log-level to debug for some more info.
GiteaMirror commented 2025-11-07 07:06:33 -06:00
Author
Owner
Copy Link

@0xab3d commented on GitHub (Dec 16, 2022):

You're totally right. I have checked the logs and turned out the WAF is blocking PUT methods..

@0xab3d commented on GitHub (Dec 16, 2022): You're totally right. I have checked the logs and turned out the WAF is blocking PUT methods..
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
better for forum
bug
documentation
duplicate
enhancement
future Vault
good first issue
help wanted
low priority
notes
pull-request
Mirrored from GitHub Pull Request
 question
SSO
Third party
troubleshooting
wontfix
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/vaultwarden#1435
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?