note: I use cloudflare's dns-only records, so no js manipulation is happening there, js files appear as js in my browser.
3. Open https://vault.example.com, try to sign up, once you click the button it shows a toast "this.append is not a function" and you are unable to login. (this is an issue for SSO too)
Expected Result
Normal login procedure
Actual Result
error message + not able to login
Logs
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/organizations/<org_id>/tax
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] DELETE /api/organizations/<org_id>/users
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/organizations/<org_id>/users?<data..>
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/<member_id> [1]
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] DELETE /api/organizations/<org_id>/users/<member_id>
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/<member_id> [1]
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/organizations/<org_id>/users/<member_id>?<data..> [2]
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/<member_id>/accept
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/<member_id>/activate
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/<member_id>/confirm
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/<member_id>/deactivate
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/<member_id>/delete
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/organizations/<org_id>/users/<member_id>/events?<data..>
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/<member_id>/groups
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/<member_id>/groups
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/organizations/<org_id>/users/<member_id>/groups
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/<member_id>/reinvite
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/<member_id>/reset-password
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/organizations/<org_id>/users/<member_id>/reset-password-details
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/<member_id>/reset-password-enrollment
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/<member_id>/restore
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/<member_id>/revoke
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/activate
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/confirm
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/deactivate
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/invite
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/organizations/<org_id>/users/mini-details [1]
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/public-keys
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/reinvite
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/restore
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/revoke
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/domain/sso/verified
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/plans
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/plans/all
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/plans/sales-tax-rates
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/public/organization/import
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/sends
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/sends
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/sends/<send_id>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] DELETE /api/sends/<send_id>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/sends/<send_id>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/sends/<send_id>/<file_id>?<t>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/sends/<send_id>/access/file/<file_id>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/sends/<send_id>/file/<file_id>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/sends/<send_id>/remove-password
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/sends/access/<access_id>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/sends/file
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/sends/file/v2
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/settings/domains
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/settings/domains
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/settings/domains
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/sync?<data..>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/tasks
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/two-factor
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/two-factor/authenticator
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] DELETE /api/two-factor/authenticator
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/authenticator
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/two-factor/disable
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/disable
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/two-factor/duo
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/duo
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/two-factor/email
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/get-authenticator
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/two-factor/get-device-verification-settings
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/get-duo
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/get-email
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/get-recover
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/get-webauthn
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/get-webauthn-challenge
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/get-yubikey
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/recover
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/send-email
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/send-email-login
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/two-factor/webauthn
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] DELETE /api/two-factor/webauthn
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/webauthn
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/two-factor/yubikey
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/yubikey
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/users/<user_id>/public-key
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/version
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/webauthn
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /app-id.json
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /attachments/<cipher_id>/<file_id>?<token>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /css/vaultwarden.css
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /events/collect
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /icons/<domain>/icon.png
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /identity/accounts/prelogin
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /identity/accounts/register
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /identity/accounts/register/finish
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /identity/accounts/register/send-verification-email
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /identity/connect/authorize?<data..>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /identity/connect/oidc-signin?<code>&<state> [1]
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /identity/connect/oidc-signin?<state>&<error>&<error_description> [2]
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /identity/connect/token
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /identity/sso/prevalidate
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /index.html
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /notifications/anonymous-hub?<token..>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /notifications/hub?<data..>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /vw_static/<filename> [2]
[vaultwarden] [2026-01-27 17:21:34.038][start][INFO] Rocket has launched from http://0.0.0.0:80
[vaultwarden] [2026-01-27 17:22:34.011][request][INFO] GET /alive
[vaultwarden] [2026-01-27 17:22:34.012][response][INFO] (alive) GET /alive => 200 OK
[vaultwarden] [2026-01-27 17:22:34.026][vaultwarden::api::core::two_factor][DEBUG] Sending notifications for incomplete 2FA logins
[vaultwarden] [2026-01-27 17:22:34.026][vaultwarden::api::core::two_factor::duo_oidc][DEBUG] Purging Duo authentication contexts
[vaultwarden] [2026-01-27 17:22:34.026][vaultwarden::api::core::accounts][DEBUG] Purging auth requests
[vaultwarden] [2026-01-27 17:22:53.069][request][INFO] GET /
[vaultwarden] [2026-01-27 17:22:53.070][response][INFO] (web_index) GET / => 200 OK
[vaultwarden] [2026-01-27 17:22:53.821][request][INFO] GET /api/config
[vaultwarden] [2026-01-27 17:22:53.821][response][INFO] (config) GET /api/config => 200 OK
[vaultwarden] [2026-01-27 17:23:34.028][vaultwarden::api::core::accounts][DEBUG] Purging auth requests
[vaultwarden] [2026-01-27 17:23:34.028][vaultwarden::api::core::two_factor::duo_oidc][DEBUG] Purging Duo authentication contexts
[vaultwarden] [2026-01-27 17:23:34.028][vaultwarden::api::core::two_factor][DEBUG] Sending notifications for incomplete 2FA logins
[vaultwarden] [2026-01-27 17:23:34.154][request][INFO] GET /alive
[vaultwarden] [2026-01-27 17:23:34.155][response][INFO] (alive) GET /alive => 200 OK
note: used debug log level, first tried using sso login, then normal account creation.
Screenshots or Videos
Additional Context
I run another instance the same way (traefik + cloudflare + alpine) which worked perfectly fine in the past but since upgrading the same issue appeared. for that instance the bitwarden android app and browser extension continued to work, just the web vault is causing problems.
Originally created by @spizzadev on GitHub (Jan 27, 2026).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/6763
### Prerequisites
- [x] I have searched the existing **Closed _AND_ Open** [Issues](https://github.com/dani-garcia/vaultwarden/issues?q=is%3Aissue%20) **_AND_** [Discussions](https://github.com/dani-garcia/vaultwarden/discussions?discussions_q=)
- [x] I have searched and read the [documentation](https://github.com/dani-garcia/vaultwarden/wiki/)
### Vaultwarden Support String
not applicable
### Vaultwarden Build Version
v1.35.2/latest/v1.35.2-alpine
### Deployment method
Official Container Image
### Custom deployment method
_No response_
### Reverse Proxy
traefik 3.4.4
### Host/Server Operating System
Linux
### Operating System Version
Alpine Linux
### Clients
Web Vault
### Client Version
2025.12.1
### Steps To Reproduce
1. deploy vaultwarden using this config:
```
services:
vaultwarden:
image: vaultwarden/server:latest
environment:
DOMAIN: https://vault.example.com
WEB_VAULT_ENABLED: "true"
volumes:
- vaultwarden-data:/data/
labels:
- traefik.enable=true
- traefik.http.routers.vaultwarden.rule=Host(`vault.example.com`)
- traefik.http.routers.vaultwarden.entryPoints=websecure
- traefik.http.routers.vaultwarden.tls.certresolver=cloudflare
- traefik.http.services.vaultwarden.loadbalancer.server.port=80
volumes:
vaultwarden-data:
```
note: I use cloudflare's dns-only records, so no js manipulation is happening there, js files appear as js in my browser.
3. Open https://vault.example.com, try to sign up, once you click the button it shows a toast "this.append is not a function" and you are unable to login. (this is an issue for SSO too)
### Expected Result
Normal login procedure
### Actual Result
error message + not able to login
### Logs
```text
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/organizations/<org_id>/tax
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] DELETE /api/organizations/<org_id>/users
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/organizations/<org_id>/users?<data..>
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/<member_id> [1]
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] DELETE /api/organizations/<org_id>/users/<member_id>
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/<member_id> [1]
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/organizations/<org_id>/users/<member_id>?<data..> [2]
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/<member_id>/accept
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/<member_id>/activate
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/<member_id>/confirm
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/<member_id>/deactivate
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/<member_id>/delete
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/organizations/<org_id>/users/<member_id>/events?<data..>
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/<member_id>/groups
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/<member_id>/groups
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/organizations/<org_id>/users/<member_id>/groups
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/<member_id>/reinvite
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/<member_id>/reset-password
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/organizations/<org_id>/users/<member_id>/reset-password-details
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/<member_id>/reset-password-enrollment
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/<member_id>/restore
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/<member_id>/revoke
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/activate
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/confirm
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/deactivate
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/invite
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/organizations/<org_id>/users/mini-details [1]
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/public-keys
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/<org_id>/users/reinvite
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/restore
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] PUT /api/organizations/<org_id>/users/revoke
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] POST /api/organizations/domain/sso/verified
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/plans
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/plans/all
[vaultwarden] [2026-01-27 17:21:34.037][routes][INFO] GET /api/plans/sales-tax-rates
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/public/organization/import
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/sends
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/sends
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/sends/<send_id>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] DELETE /api/sends/<send_id>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/sends/<send_id>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/sends/<send_id>/<file_id>?<t>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/sends/<send_id>/access/file/<file_id>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/sends/<send_id>/file/<file_id>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/sends/<send_id>/remove-password
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/sends/access/<access_id>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/sends/file
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/sends/file/v2
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/settings/domains
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/settings/domains
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/settings/domains
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/sync?<data..>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/tasks
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/two-factor
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/two-factor/authenticator
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] DELETE /api/two-factor/authenticator
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/authenticator
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/two-factor/disable
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/disable
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/two-factor/duo
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/duo
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/two-factor/email
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/get-authenticator
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/two-factor/get-device-verification-settings
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/get-duo
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/get-email
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/get-recover
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/get-webauthn
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/get-webauthn-challenge
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/get-yubikey
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/recover
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/send-email
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/send-email-login
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/two-factor/webauthn
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] DELETE /api/two-factor/webauthn
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/webauthn
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] PUT /api/two-factor/yubikey
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /api/two-factor/yubikey
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/users/<user_id>/public-key
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/version
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /api/webauthn
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /app-id.json
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /attachments/<cipher_id>/<file_id>?<token>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /css/vaultwarden.css
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /events/collect
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /icons/<domain>/icon.png
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /identity/accounts/prelogin
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /identity/accounts/register
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /identity/accounts/register/finish
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /identity/accounts/register/send-verification-email
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /identity/connect/authorize?<data..>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /identity/connect/oidc-signin?<code>&<state> [1]
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /identity/connect/oidc-signin?<state>&<error>&<error_description> [2]
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] POST /identity/connect/token
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /identity/sso/prevalidate
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /index.html
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /notifications/anonymous-hub?<token..>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /notifications/hub?<data..>
[vaultwarden] [2026-01-27 17:21:34.038][routes][INFO] GET /vw_static/<filename> [2]
[vaultwarden] [2026-01-27 17:21:34.038][start][INFO] Rocket has launched from http://0.0.0.0:80
[vaultwarden] [2026-01-27 17:22:34.011][request][INFO] GET /alive
[vaultwarden] [2026-01-27 17:22:34.012][response][INFO] (alive) GET /alive => 200 OK
[vaultwarden] [2026-01-27 17:22:34.026][vaultwarden::api::core::two_factor][DEBUG] Sending notifications for incomplete 2FA logins
[vaultwarden] [2026-01-27 17:22:34.026][vaultwarden::api::core::two_factor::duo_oidc][DEBUG] Purging Duo authentication contexts
[vaultwarden] [2026-01-27 17:22:34.026][vaultwarden::api::core::accounts][DEBUG] Purging auth requests
[vaultwarden] [2026-01-27 17:22:53.069][request][INFO] GET /
[vaultwarden] [2026-01-27 17:22:53.070][response][INFO] (web_index) GET / => 200 OK
[vaultwarden] [2026-01-27 17:22:53.821][request][INFO] GET /api/config
[vaultwarden] [2026-01-27 17:22:53.821][response][INFO] (config) GET /api/config => 200 OK
[vaultwarden] [2026-01-27 17:23:34.028][vaultwarden::api::core::accounts][DEBUG] Purging auth requests
[vaultwarden] [2026-01-27 17:23:34.028][vaultwarden::api::core::two_factor::duo_oidc][DEBUG] Purging Duo authentication contexts
[vaultwarden] [2026-01-27 17:23:34.028][vaultwarden::api::core::two_factor][DEBUG] Sending notifications for incomplete 2FA logins
[vaultwarden] [2026-01-27 17:23:34.154][request][INFO] GET /alive
[vaultwarden] [2026-01-27 17:23:34.155][response][INFO] (alive) GET /alive => 200 OK
note: used debug log level, first tried using sso login, then normal account creation.
```
### Screenshots or Videos
<img width="345" height="105" alt="Image" src="https://github.com/user-attachments/assets/4cf405fd-b344-49da-8345-2274aea47eb7" />
### Additional Context
I run another instance the same way (traefik + cloudflare + alpine) which worked perfectly fine in the past but since upgrading the same issue appeared. for that instance the bitwarden android app and browser extension continued to work, just the web vault is causing problems.
GiteaMirror
added the bug label 2026-04-25 21:52:10 -05:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @spizzadev on GitHub (Jan 27, 2026).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/6763
Prerequisites
Vaultwarden Support String
not applicable
Vaultwarden Build Version
v1.35.2/latest/v1.35.2-alpine
Deployment method
Official Container Image
Custom deployment method
No response
Reverse Proxy
traefik 3.4.4
Host/Server Operating System
Linux
Operating System Version
Alpine Linux
Clients
Web Vault
Client Version
2025.12.1
Steps To Reproduce
note: I use cloudflare's dns-only records, so no js manipulation is happening there, js files appear as js in my browser.
3. Open https://vault.example.com, try to sign up, once you click the button it shows a toast "this.append is not a function" and you are unable to login. (this is an issue for SSO too)
Expected Result
Normal login procedure
Actual Result
error message + not able to login
Logs
Screenshots or Videos
Additional Context
I run another instance the same way (traefik + cloudflare + alpine) which worked perfectly fine in the past but since upgrading the same issue appeared. for that instance the bitwarden android app and browser extension continued to work, just the web vault is causing problems.