Not considering the situation when the user domain name starts with “admin”. #1557

New Issue

Closed

opened 2025-11-07 07:10:14 -06:00 by GiteaMirror · 17 comments

GiteaMirror commented 2025-11-07 07:10:14 -06:00

Owner

Copy Link

Copy Source

Originally created by @fxzxmic on GitHub (Apr 3, 2023).

Subject of the issue

The file "admin.js" contains the following code:

function getBaseUrl() {
    // If the base URL is `https://vaultwarden.example.com/base/path/`,
    // `window.location.href` should have one of the following forms:
    //
    // - `https://vaultwarden.example.com/base/path/`
    // - `https://vaultwarden.example.com/base/path/#/some/route[?queryParam=...]`
    //
    // We want to get to just `https://vaultwarden.example.com/base/path`.
    const baseUrl = window.location.href;
    const adminPos = baseUrl.indexOf("/admin");
    return baseUrl.substring(0, adminPos != -1 ? adminPos : baseUrl.length);
}

If the domain name is abc.com, the function returns https://abc.com.
But if the domain name is admin.abc.com or just adminxxx.com, the function returns https:/. This is not the expected value.

Additional statements

In addition, I hope you can consider the following discussion when fixing this issue. It is possible not to provide relevant functions, but please do not undermine the currently feasible workarounds.
https://github.com/dani-garcia/vaultwarden/discussions/1494#discussioncomment-5511696

If my domain name is abc.com, in my use case, my background address is https://admin.abc.com/vault.

Originally created by @fxzxmic on GitHub (Apr 3, 2023). <!-- # ### NOTE: Please update to the latest version of vaultwarden before reporting an issue! This saves you and us a lot of time and troubleshooting. See: * https://github.com/dani-garcia/vaultwarden/issues/1180 * https://github.com/dani-garcia/vaultwarden/wiki/Updating-the-vaultwarden-image # ### --> <!-- Please fill out the following template to make solving your problem easier and faster for us. This is only a guideline. If you think that parts are unnecessary for your issue, feel free to remove them. Remember to hide/redact personal or confidential information, such as passwords, IP addresses, and DNS names as appropriate. --> ### Subject of the issue <!-- Describe your issue here. --> The file "admin.js" contains the following code: ``` function getBaseUrl() { // If the base URL is `https://vaultwarden.example.com/base/path/`, // `window.location.href` should have one of the following forms: // // - `https://vaultwarden.example.com/base/path/` // - `https://vaultwarden.example.com/base/path/#/some/route[?queryParam=...]` // // We want to get to just `https://vaultwarden.example.com/base/path`. const baseUrl = window.location.href; const adminPos = baseUrl.indexOf("/admin"); return baseUrl.substring(0, adminPos != -1 ? adminPos : baseUrl.length); } ``` If the domain name is `abc.com`, the function returns `https://abc.com`. But if the domain name is `admin.abc.com` or just `adminxxx.com`, the function returns `https:/`. This is not the expected value. ### Additional statements In addition, I hope you can consider the following discussion when fixing this issue. It is possible not to provide relevant functions, but please do not undermine the currently feasible workarounds. https://github.com/dani-garcia/vaultwarden/discussions/1494#discussioncomment-5511696 If my domain name is `abc.com`, in my use case, my background address is `https://admin.abc.com/vault`.

GiteaMirror added the enhancementbug labels 2025-11-07 07:10:14 -06:00

GiteaMirror closed this issue 2025-11-07 07:10:15 -06:00

GiteaMirror commented 2025-11-07 07:10:16 -06:00

Author

Owner

Copy Link

Copy Source

@BlackDex commented on GitHub (Apr 3, 2023):

So, you internally redirect admin. to /admin?
I'm not sure if we can easily resolve this. It's also a corner case in my opinion.

Since this is a feature request, i tend to move this to the discussions > ideas.

@BlackDex commented on GitHub (Apr 3, 2023): So, you internally redirect `admin.` to `/admin`? I'm not sure if we can easily resolve this. It's also a corner case in my opinion. Since this is a feature request, i tend to move this to the discussions > ideas.

GiteaMirror commented 2025-11-07 07:10:16 -06:00

Author

Owner

Copy Link

Copy Source

@fxzxmic commented on GitHub (Apr 3, 2023):

It's A BUG.

@fxzxmic commented on GitHub (Apr 3, 2023): It's A BUG.

GiteaMirror commented 2025-11-07 07:10:16 -06:00

Author

Owner

Copy Link

Copy Source

@BlackDex commented on GitHub (Apr 3, 2023):

Could you provide your reverse proxy config? And what you configured as your DOMAIN string?

And, provide an answer to my question above please too.

@BlackDex commented on GitHub (Apr 3, 2023): Could you provide your reverse proxy config? And what you configured as your `DOMAIN` string? And, provide an answer to my question above please too.

GiteaMirror commented 2025-11-07 07:10:16 -06:00

Author

Owner

Copy Link

Copy Source

@fxzxmic commented on GitHub (Apr 3, 2023):

The additional statement has the meaning of some feature request, but the previous part was a bug.
I think you should use window.location.protocol, window.location.host, etc in the function getBaseUrl().

@fxzxmic commented on GitHub (Apr 3, 2023): The additional statement has the meaning of some feature request, but the previous part was a bug. I think you should use `window.location.protocol`, `window.location.host`, etc in the `function getBaseUrl()`.

GiteaMirror commented 2025-11-07 07:10:16 -06:00

Author

Owner

Copy Link

Copy Source

@fxzxmic commented on GitHub (Apr 3, 2023):

Please let me finish speaking first.
I think you should use window.location.protocol, window.location.host, etc in the function getBaseUrl().

@fxzxmic commented on GitHub (Apr 3, 2023): Please let me finish speaking first. I think you should use `window.location.protocol`, `window.location.host`, etc in the `function getBaseUrl()`.

GiteaMirror commented 2025-11-07 07:10:17 -06:00

Author

Owner

Copy Link

Copy Source

@fxzxmic commented on GitHub (Apr 3, 2023):

So, you internally redirect admin. to /admin? I'm not sure if we can easily resolve this. It's also a corner case in my opinion.

Yes, you are right. Everything worked fine in the previous version. The newly introduced admin.js messed up everything.

@fxzxmic commented on GitHub (Apr 3, 2023): > So, you internally redirect `admin.` to `/admin`? I'm not sure if we can easily resolve this. It's also a corner case in my opinion. Yes, you are right. Everything worked fine in the previous version. The newly introduced `admin.js` messed up everything.

GiteaMirror commented 2025-11-07 07:10:17 -06:00

Author

Owner

Copy Link

Copy Source

@BlackDex commented on GitHub (Apr 3, 2023):

Please let me finish speaking first. I think you should use window.location.protocol, window.location.host, etc in the function getBaseUrl().

You can put everything in a single comment 😉.
Still, i need more info/details to reproduce this correctly.

@BlackDex commented on GitHub (Apr 3, 2023): > Please let me finish speaking first. I think you should use `window.location.protocol`, `window.location.host`, etc in the `function getBaseUrl()`. You can put everything in a single comment 😉. Still, i need more info/details to reproduce this correctly.

GiteaMirror commented 2025-11-07 07:10:17 -06:00

Author

Owner

Copy Link

Copy Source

@stefan0xC commented on GitHub (Apr 3, 2023):

@BlackDex If you have DOMAIN=https://admin.example.com and access https://admin.example.com/admin
https://github.com/dani-garcia/vaultwarden/blob/0b28ab3be101b58cf27b43da14bcf893fa37c1c8/src/static/scripts/admin.js#L14
will find the first /admin instead of the second.

So we should probably use lastIndexOf instead of indexOf to find the BASE_URL

baseUrl = "https://admin.example.com/admin"
"https://admin.example.com/admin"
baseUrl.indexOf('/admin')
7
baseUrl.lastIndexOf('/admin')
25 

@stefan0xC commented on GitHub (Apr 3, 2023): @BlackDex If you have `DOMAIN=https://admin.example.com` and access `https://admin.example.com/admin` https://github.com/dani-garcia/vaultwarden/blob/0b28ab3be101b58cf27b43da14bcf893fa37c1c8/src/static/scripts/admin.js#L14 will find the first `/admin` instead of the second. So we should probably use `lastIndexOf` instead of `indexOf` to find the `BASE_URL` ```javascript baseUrl = "https://admin.example.com/admin" "https://admin.example.com/admin" baseUrl.indexOf('/admin') 7 baseUrl.lastIndexOf('/admin') 25 ```

GiteaMirror commented 2025-11-07 07:10:17 -06:00

Author

Owner

Copy Link

Copy Source

@fxzxmic commented on GitHub (Apr 3, 2023):

Could you provide your reverse proxy config? And what you configured as your DOMAIN string?

  location /vault {
    auth_basic "Admin Login";
    auth_basic_user_file /data/nginx-server/htpasswd.conf;

    sub_filter "/vw_static" "//abc.com/vw_static";
    sub_filter "/admin/" "/vault/";
    sub_filter "\"/admin\"" "\"/vault\"";
    sub_filter "class=\"nav-link\" href=\"/\"" "style=\"display: none;\" href=\"/\"";
    sub_filter "class=\"btn btn-sm btn-secondary\"" "style=\"display: none;\"";
    sub_filter_once off;

    proxy_pass http://localhost:80/admin/;
    proxy_set_header Host abc.com;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    more_set_headers "Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' abc.com; style-src 'self' 'unsafe-inline' abc.com; img-src 'self' data: abc.com https://haveibeenpwned.com/ https://www.gravatar.com ; child-src 'self' https://*.duosecurity.com https://*.duofederal.com; frame-src 'self' https://*.duosecurity.com https://*.duofederal.com; connect-src 'self' https://api.pwnedpasswords.com/range/ https://2fa.directory/api/ https://app.simplelogin.io/api/ https://app.anonaddy.com/api/ https://relay.firefox.com/api/; object-src 'self' blob:; frame-ancestors 'self' chrome-extension://nngceckbapebfimnlniiiahkandclblb chrome-extension://jbkfoedolllekgbhcbcoahefnbanhhlh moz-extension://* ;";
  }

I replaced my front-end domain name with abc.com. My backend address is https://admin.abc.com/vault.

@fxzxmic commented on GitHub (Apr 3, 2023): > Could you provide your reverse proxy config? And what you configured as your `DOMAIN` string? ``` location /vault { auth_basic "Admin Login"; auth_basic_user_file /data/nginx-server/htpasswd.conf; sub_filter "/vw_static" "//abc.com/vw_static"; sub_filter "/admin/" "/vault/"; sub_filter "\"/admin\"" "\"/vault\""; sub_filter "class=\"nav-link\" href=\"/\"" "style=\"display: none;\" href=\"/\""; sub_filter "class=\"btn btn-sm btn-secondary\"" "style=\"display: none;\""; sub_filter_once off; proxy_pass http://localhost:80/admin/; proxy_set_header Host abc.com; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; more_set_headers "Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' abc.com; style-src 'self' 'unsafe-inline' abc.com; img-src 'self' data: abc.com https://haveibeenpwned.com/ https://www.gravatar.com ; child-src 'self' https://*.duosecurity.com https://*.duofederal.com; frame-src 'self' https://*.duosecurity.com https://*.duofederal.com; connect-src 'self' https://api.pwnedpasswords.com/range/ https://2fa.directory/api/ https://app.simplelogin.io/api/ https://app.anonaddy.com/api/ https://relay.firefox.com/api/; object-src 'self' blob:; frame-ancestors 'self' chrome-extension://nngceckbapebfimnlniiiahkandclblb chrome-extension://jbkfoedolllekgbhcbcoahefnbanhhlh moz-extension://* ;"; } ``` I replaced my front-end domain name with `abc.com`. My backend address is `https://admin.abc.com/vault`.

GiteaMirror commented 2025-11-07 07:10:18 -06:00

Author

Owner

Copy Link

Copy Source

@BlackDex commented on GitHub (Apr 3, 2023):

Ah, well, the that is clear info, thx @stefan0xC .
We do indeed need to address that.

And we did need the extra info, since the OP removes /admin also.
With this data we could try and reproduce the same behavior.

@BlackDex commented on GitHub (Apr 3, 2023): Ah, well, the that is clear info, thx @stefan0xC . We do indeed need to address that. And we did need the extra info, since the OP removes `/admin` also. With this data we could try and reproduce the same behavior.

GiteaMirror commented 2025-11-07 07:10:18 -06:00

Author

Owner

Copy Link

Copy Source

@fxzxmic commented on GitHub (Apr 3, 2023):

@BlackDex If you have DOMAIN=https://admin.example.com and access https://admin.example.com/admin

https://github.com/dani-garcia/vaultwarden/blob/0b28ab3be101b58cf27b43da14bcf893fa37c1c8/src/static/scripts/admin.js#L14

will find the first /admin instead of the second.
So we should probably use lastIndexOf instead of indexOf to find the BASE_URL

baseUrl = "https://admin.example.com/admin"
"https://admin.example.com/admin"
baseUrl.indexOf('/admin')
7
baseUrl.lastIndexOf('/admin')
25 

In my use case, there is no /admin in the path at all. That's why I said please consider some special situations when fixing.

@fxzxmic commented on GitHub (Apr 3, 2023): > @BlackDex If you have `DOMAIN=https://admin.example.com` and access `https://admin.example.com/admin` > > https://github.com/dani-garcia/vaultwarden/blob/0b28ab3be101b58cf27b43da14bcf893fa37c1c8/src/static/scripts/admin.js#L14 > > > will find the first `/admin` instead of the second. > So we should probably use `lastIndexOf` instead of `indexOf` to find the `BASE_URL` > > ```js > baseUrl = "https://admin.example.com/admin" > "https://admin.example.com/admin" > baseUrl.indexOf('/admin') > 7 > baseUrl.lastIndexOf('/admin') > 25 > ``` In my use case, there is no `/admin` in the path at all. That's why I said please consider some special situations when fixing.

GiteaMirror commented 2025-11-07 07:10:18 -06:00

Author

Owner

Copy Link

Copy Source

@fxzxmic commented on GitHub (Apr 3, 2023):

Ah, well, the that is clear info, thx @stefan0xC . We do indeed need to address that.

And we did need the extra info, since the OP removes /admin also. With this data we could try and reproduce the same behavior.

I think you understand my situation now, thank you very much.

At present, it seems that you don't need to fix anything to the main program, except for admin.js and anywhere the BASE_URL variable is used.

@fxzxmic commented on GitHub (Apr 3, 2023): > Ah, well, the that is clear info, thx @stefan0xC . We do indeed need to address that. > > And we did need the extra info, since the OP removes `/admin` also. With this data we could try and reproduce the same behavior. I think you understand my situation now, thank you very much. At present, it seems that you don't need to fix anything to the main program, except for `admin.js` and anywhere the `BASE_URL` variable is used.

GiteaMirror commented 2025-11-07 07:10:18 -06:00

Author

Owner

Copy Link

Copy Source

@fxzxmic commented on GitHub (Apr 3, 2023):

https://github.com/dani-garcia/vaultwarden/blob/0b28ab3be101b58cf27b43da14bcf893fa37c1c8/src/static/scripts/admin_organizations.js#L22

I don't understand why not just use it this way:
_post(`organizations/${org_uuid}/delete`,

@fxzxmic commented on GitHub (Apr 3, 2023): https://github.com/dani-garcia/vaultwarden/blob/0b28ab3be101b58cf27b43da14bcf893fa37c1c8/src/static/scripts/admin_organizations.js#L22 I don't understand why not just use it this way: ``_post(`organizations/${org_uuid}/delete`,``

GiteaMirror commented 2025-11-07 07:10:19 -06:00

Author

Owner

Copy Link

Copy Source

@BlackDex commented on GitHub (Apr 3, 2023):

https://github.com/dani-garcia/vaultwarden/blob/0b28ab3be101b58cf27b43da14bcf893fa37c1c8/src/static/scripts/admin_organizations.js#L22

I don't understand why not just use it this way: _post(`organizations/${org_uuid}/delete`,

That doesn't work as far as i know, since fetch needs a FQDN.
And, even if it does not need a FQDN, it would be an issue, since we need it relative to /admin, some links might not go to there respective page.

Anyways, i think we have the right info to try and see if we can fix this.

@BlackDex commented on GitHub (Apr 3, 2023): > https://github.com/dani-garcia/vaultwarden/blob/0b28ab3be101b58cf27b43da14bcf893fa37c1c8/src/static/scripts/admin_organizations.js#L22 > > I don't understand why not just use it this way: `` _post(`organizations/${org_uuid}/delete`, `` That doesn't work as far as i know, since fetch needs a FQDN. And, even if it does not need a FQDN, it would be an issue, since we need it relative to `/admin`, some links might not go to there respective page. Anyways, i think we have the right info to try and see if we can fix this.

GiteaMirror commented 2025-11-07 07:10:19 -06:00

Author

Owner

Copy Link

Copy Source

@BlackDex commented on GitHub (Apr 4, 2023):

I did some quick testing. And the problem more lays in that you do not use sub_filter on the new *.js files.
If you do that, your problem would be solved for your specific use-case.

So, if you use this for example, that should solve your issues.

  location /vault {
    proxy_pass http://127.0.0.1:8080/admin;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;

    # Replace cookie path so authentication still works
    proxy_cookie_path /admin /vault;

    sub_filter "/vw_static" "//$host/vw_static";
    sub_filter "/admin/" "/vault/";
    sub_filter "\"/admin\"" "\"/vault\"";
    sub_filter_once off;

    more_set_headers "Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' abc.com; img-src 'self' data: abc.com https://haveibeenpwned.com/ https://www.gravatar.com ; child-src 'self' https://*.duosecurity.com https://*.duofederal.com; frame-src 'self' https://*.duosecurity.com https://*.duofederal.com; connect-src 'self' https://api.pwnedpasswords.com/range/ https://2fa.directory/api/ https://app.simplelogin.io/api/ https://app.anonaddy.com/api/ https://relay.firefox.com/api/; object-src 'self' blob:; frame-ancestors 'self' chrome-extension://nngceckbapebfimnlniiiahkandclblb chrome-extension://jbkfoedolllekgbhcbcoahefnbanhhlh moz-extension://* ;";
  }

  location /vw_static {
    proxy_pass http://127.0.0.1:8080/vw_static;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;

    sub_filter_types "application/javascript"
    sub_filter "/vw_static" "//$host/vw_static";
    sub_filter "/admin/" "/vault/";
    sub_filter "\"/admin\"" "\"/vault\"";
    sub_filter_once off;

    more_set_headers "Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' admin.bwrsdev.vyus.nl; style-src 'self' 'unsafe-inline' abc.com; img-src 'self' data: abc.com https://haveibeenpwned.com/ https://www.gravatar.com ; child-src 'self' https://*.duosecurity.com https://*.duofederal.com; frame-src 'self' https://*.duosecurity.com https://*.duofederal.com; connect-src 'self' https://api.pwnedpasswords.com/range/ https://2fa.directory/api/ https://app.simplelogin.io/api/ https://app.anonaddy.com/api/ https://relay.firefox.com/api/; object-src 'self' blob:; frame-ancestors 'self' chrome-extension://nngceckbapebfimnlniiiahkandclblb chrome-extension://jbkfoedolllekgbhcbcoahefnbanhhlh moz-extension://* ;";
  }

I'm not planning on adding something flexible to change the /admin path it self. That is to much hassle in my opinion, and probably causes more issues then it would solve.

I Already have a fix so it will not replace the starting /admin locally on my laptop, but not yet pushed.

@BlackDex commented on GitHub (Apr 4, 2023): I did some quick testing. And the problem more lays in that you do not use `sub_filter` on the new `*.js` files. If you do that, your problem would be solved for your specific use-case. So, if you use this for example, that should solve your issues. ```nginx location /vault { proxy_pass http://127.0.0.1:8080/admin; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; # Replace cookie path so authentication still works proxy_cookie_path /admin /vault; sub_filter "/vw_static" "//$host/vw_static"; sub_filter "/admin/" "/vault/"; sub_filter "\"/admin\"" "\"/vault\""; sub_filter_once off; more_set_headers "Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' abc.com; img-src 'self' data: abc.com https://haveibeenpwned.com/ https://www.gravatar.com ; child-src 'self' https://*.duosecurity.com https://*.duofederal.com; frame-src 'self' https://*.duosecurity.com https://*.duofederal.com; connect-src 'self' https://api.pwnedpasswords.com/range/ https://2fa.directory/api/ https://app.simplelogin.io/api/ https://app.anonaddy.com/api/ https://relay.firefox.com/api/; object-src 'self' blob:; frame-ancestors 'self' chrome-extension://nngceckbapebfimnlniiiahkandclblb chrome-extension://jbkfoedolllekgbhcbcoahefnbanhhlh moz-extension://* ;"; } location /vw_static { proxy_pass http://127.0.0.1:8080/vw_static; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; sub_filter_types "application/javascript" sub_filter "/vw_static" "//$host/vw_static"; sub_filter "/admin/" "/vault/"; sub_filter "\"/admin\"" "\"/vault\""; sub_filter_once off; more_set_headers "Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' admin.bwrsdev.vyus.nl; style-src 'self' 'unsafe-inline' abc.com; img-src 'self' data: abc.com https://haveibeenpwned.com/ https://www.gravatar.com ; child-src 'self' https://*.duosecurity.com https://*.duofederal.com; frame-src 'self' https://*.duosecurity.com https://*.duofederal.com; connect-src 'self' https://api.pwnedpasswords.com/range/ https://2fa.directory/api/ https://app.simplelogin.io/api/ https://app.anonaddy.com/api/ https://relay.firefox.com/api/; object-src 'self' blob:; frame-ancestors 'self' chrome-extension://nngceckbapebfimnlniiiahkandclblb chrome-extension://jbkfoedolllekgbhcbcoahefnbanhhlh moz-extension://* ;"; } ``` I'm not planning on adding something flexible to change the `/admin` path it self. That is to much hassle in my opinion, and probably causes more issues then it would solve. I Already have a fix so it will not replace the starting `/admin` locally on my laptop, but not yet pushed.

GiteaMirror commented 2025-11-07 07:10:19 -06:00

Author

Owner

Copy Link

Copy Source

@fxzxmic commented on GitHub (Apr 5, 2023):

I did some quick testing. And the problem more lays in that you do not use sub_filter on the new *.js files. If you do that, your problem would be solved for your specific use-case.

So, if you use this for example, that should solve your issues.

Thanks.

@fxzxmic commented on GitHub (Apr 5, 2023): > I did some quick testing. And the problem more lays in that you do not use `sub_filter` on the new `*.js` files. If you do that, your problem would be solved for your specific use-case. > > So, if you use this for example, that should solve your issues. Thanks.

GiteaMirror commented 2025-11-07 07:10:20 -06:00

Author

Owner

Copy Link

Copy Source

@fxzxmic commented on GitHub (Apr 5, 2023):

I found an issue when I specified disable_admin_token in the configuration file config.json, the disable_admin_token item will be removed from the configuration file every time I save the settings.

Update: Actually, I noticed that many settings are reset to default values after every time I save the settings.

@fxzxmic commented on GitHub (Apr 5, 2023): I found an issue when I specified `disable_admin_token` in the configuration file `config.json`, the `disable_admin_token` item will be removed from the configuration file every time I save the settings. Update: Actually, I noticed that many settings are reset to default values after every time I save the settings.

GiteaMirror referenced this issue 2026-04-20 13:05:47 -05:00

[GH-ISSUE #1557] send: "current access count" not updating in web vault #9813

GiteaMirror referenced this issue 2026-04-23 05:31:22 -05:00

[GH-ISSUE #1557] send: "current access count" not updating in web vault #13790

GiteaMirror referenced this issue 2026-04-25 20:01:12 -05:00

[GH-ISSUE #1557] send: "current access count" not updating in web vault #17773

GiteaMirror referenced this issue 2026-06-17 08:08:20 -05:00

[GH-ISSUE #1557] send: "current access count" not updating in web vault #28493

GiteaMirror referenced this issue 2026-07-13 18:38:46 -05:00

[GH-ISSUE #1557] send: "current access count" not updating in web vault #33953

GiteaMirror referenced this issue 2026-07-17 01:15:16 -05:00

[GH-ISSUE #1557] send: "current access count" not updating in web vault #38246

Sign in to join this conversation.

No Branch/Tag Specified

Branches Tags

main

v2-registration

revert-7033-patch-1

cached-config-operations

test_dylint

1.37.2

1.37.1

1.37.0

1.36.0

1.35.8

1.35.7

1.35.6

1.35.5

1.35.4

1.35.3

1.35.2

1.35.1

1.35.0

1.34.3

1.34.2

1.34.1

1.34.0

1.33.2

1.33.1

1.33.0

1.32.7

1.32.6

1.32.5

1.32.4

1.32.3

1.32.2

1.32.1

1.32.0

1.31.0

1.30.5

1.30.4

1.30.3

1.30.2

1.30.1

1.30.0

1.29.2

1.29.1

1.29.0

1.28.1

1.28.0

1.27.0

1.26.0

1.25.2

1.25.1

1.25.0

1.24.0

1.23.1

1.23.0

1.22.2

1.22.1

1.22.0

1.21.0

1.20.0

1.19.0

1.18.0

1.17.0

1.16.3

1.16.2

1.16.1

1.16.0

1.15.1

1.15.0

1.14.2

1.14.1

1.14

1.13.1

1.13.0

1.12.0

1.11.0

1.10.0

1.9.1

1.9.0

1.8.0

1.7.0

1.6.1

1.6.0

1.5.0

1.4.0

1.3.0

1.2.0

1.1.0

1.0.0

0.13.0

0.12.0

0.11.0

0.10.0

0.9.0

Labels

Clear labels

better for forum

bug

documentation

duplicate

enhancement

future Vault

good first issue

help wanted

low priority

notes

pull-request

Mirrored from GitHub Pull Request

question

SSO

Third party

troubleshooting

wontfix

No labels bug enhancement

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

GiteaMirror ninjasurge (Kaehlen Rog)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/vaultwarden#1557