github-starred/vaultwarden
2
0
Fork 0
mirror of https://github.com/dani-garcia/vaultwarden.git synced 2026-07-15 18:12:14 -05:00
Code Issues 479 Packages Projects Releases 83 Wiki Activity

[GH-ISSUE #2985] 2FA login recovery broken #18205

New Issue
Closed
opened 2026-04-25 20:24:56 -05:00 by GiteaMirror · 1 comment
GiteaMirror commented 2026-04-25 20:24:56 -05:00
Owner
Copy Link

Originally created by @richardmeilinger on GitHub (Dec 14, 2022).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/2985

The 2FA recovery is broken using the most recent docker image testing
It works fine with the latest docker image.

image

[2022-12-14 11:18:11.510][request][INFO] POST /identity/accounts/prelogin
[2022-12-14 11:18:11.511][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK
[2022-12-14 11:18:11.558][request][INFO] POST /api/two-factor/recover
[2022-12-14 11:18:11.558][auth][ERROR] Unauthorized Error: No access token provided
[2022-12-14 11:18:11.558][_][WARN] Request guard `Headers` failed: "No access token provided".
[2022-12-14 11:18:11.558][_][WARN] No 401 catcher registered. Using Rocket default.
[2022-12-14 11:18:11.558][response][INFO] (recover) POST /api/two-factor/recover => 401 Unauthorized
Originally created by @richardmeilinger on GitHub (Dec 14, 2022). Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/2985 The 2FA recovery is broken using the most recent docker image `testing` It works fine with the `latest` docker image. ![image](https://user-images.githubusercontent.com/36570827/207583157-975df08d-abbc-4a11-93c2-8e5e78fb8d42.png) ``` [2022-12-14 11:18:11.510][request][INFO] POST /identity/accounts/prelogin [2022-12-14 11:18:11.511][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK [2022-12-14 11:18:11.558][request][INFO] POST /api/two-factor/recover [2022-12-14 11:18:11.558][auth][ERROR] Unauthorized Error: No access token provided [2022-12-14 11:18:11.558][_][WARN] Request guard `Headers` failed: "No access token provided". [2022-12-14 11:18:11.558][_][WARN] No 401 catcher registered. Using Rocket default. [2022-12-14 11:18:11.558][response][INFO] (recover) POST /api/two-factor/recover => 401 Unauthorized ```
GiteaMirror added the bug label 2026-04-25 20:24:56 -05:00
GiteaMirror commented 2026-04-25 20:24:57 -05:00
Author
Owner
Copy Link

@BlackDex commented on GitHub (Dec 14, 2022):

Looks like they changed the workflow there to. Before you first needed to login, and then you could enter the recovery token. Now they combined them.

Thanks for the report.

<!-- gh-comment-id:1351289062 --> @BlackDex commented on GitHub (Dec 14, 2022): Looks like they changed the workflow there to. Before you first needed to login, and then you could enter the recovery token. Now they combined them. Thanks for the report.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
better for forum
bug
documentation
duplicate
enhancement
future Vault
good first issue
help wanted
low priority
notes
pull-request
Mirrored from GitHub Pull Request
 question
SSO
Third party
troubleshooting
wontfix
No Label bug
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/vaultwarden#18205
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?