U2F Chrome extension #3781

New Issue

GiteaMirror · 2026-03-07T19:11:30-06:00

GiteaMirror commented

2026-03-07 19:11:30 -06:00

Originally created by @dheimerl on GitHub (Nov 27, 2018).

I have U2F working, when I log into the web vault, it prompts me to insert my U2F key and press the button. When I try to log into the Chrome extension, it never prompts for the U2F key and in the console error logs in Chrome, I get this message

Refused to display 'https://bw.unitelinc.com:6443/u2f-connector.html?data=eyJhcHBJZCI6Imh0dHBzOi8vYncudW5pdGVsaW5jLmNvbTo2NDQzL2FwcC1pZC5qc29uIiwiY2hhbGxlbmdlIjoiVG1aR2FFVldMemswTURjNGJIVTRjalY1TkhOYWEzWTBjMHh1UWxvMmQxRXJlRkZTV1dsRlptbFViejA9Iiwia2V5cyI6W3sidmVyc2lvbiI6IlUyRl9WMiIsImtleUhhbmRsZSI6IkFUcm1sYjJha1FJTE16VmRZNFozZWxnVzA2amgtcGlxcFJTYWxibGZVRnFuVWN1dGFvUHZROGV6XzVQcDEzNmF3MGozc0pkSDdLVW5DelFiQW4wdmZ0NUtXWksyaWlONVpGZ3dZQlcwdVV5Z1MtTElYNFUzY3F6a194QVI2R2RqIn1dfQ==&parent=chrome-extension%3A%2F%2Fnngceckbapebfimnlniiiahkandclblb%2Fpopup%2Findex.html%23%2F2fa&v=1' in a frame because it set 'X-Frame-Options' to 'sameorigin'.

Any ideas? I'm running the latest bitwarden_rs docker image, just pulled it this afternoon.

Originally created by @dheimerl on GitHub (Nov 27, 2018). I have U2F working, when I log into the web vault, it prompts me to insert my U2F key and press the button. When I try to log into the Chrome extension, it never prompts for the U2F key and in the console error logs in Chrome, I get this message `Refused to display 'https://bw.unitelinc.com:6443/u2f-connector.html?data=eyJhcHBJZCI6Imh0dHBzOi8vYncudW5pdGVsaW5jLmNvbTo2NDQzL2FwcC1pZC5qc29uIiwiY2hhbGxlbmdlIjoiVG1aR2FFVldMemswTURjNGJIVTRjalY1TkhOYWEzWTBjMHh1UWxvMmQxRXJlRkZTV1dsRlptbFViejA9Iiwia2V5cyI6W3sidmVyc2lvbiI6IlUyRl9WMiIsImtleUhhbmRsZSI6IkFUcm1sYjJha1FJTE16VmRZNFozZWxnVzA2amgtcGlxcFJTYWxibGZVRnFuVWN1dGFvUHZROGV6XzVQcDEzNmF3MGozc0pkSDdLVW5DelFiQW4wdmZ0NUtXWksyaWlONVpGZ3dZQlcwdVV5Z1MtTElYNFUzY3F6a194QVI2R2RqIn1dfQ==&parent=chrome-extension%3A%2F%2Fnngceckbapebfimnlniiiahkandclblb%2Fpopup%2Findex.html%23%2F2fa&v=1' in a frame because it set 'X-Frame-Options' to 'sameorigin'.` Any ideas? I'm running the latest bitwarden_rs docker image, just pulled it this afternoon.

GiteaMirror closed this issue

2026-03-07 19:11:30 -06:00

GiteaMirror commented

2026-03-07 19:11:31 -06:00

@dani-garcia commented on GitHub (Nov 27, 2018):

Something like this already ocurred to someone else, I think the solution was making some changes to the content security policy, but I can't find the comment right now. I'll see if I can find it later.

@dani-garcia commented on GitHub (Nov 27, 2018): Something like this already ocurred to someone else, I think the solution was making some changes to the content security policy, but I can't find the comment right now. I'll see if I can find it later.

GiteaMirror commented

2026-03-07 19:11:31 -06:00

@fbartels commented on GitHub (Nov 27, 2018):

I was about to write the same. Are you running bitwarden_rs through a reverse proxy? Such errors usually appears when embedding sites in an iframe.

@fbartels commented on GitHub (Nov 27, 2018): I was about to write the same. Are you running bitwarden_rs through a reverse proxy? Such errors usually appears when embedding sites in an iframe.

GiteaMirror commented

2026-03-07 19:11:31 -06:00

@fbartels commented on GitHub (Nov 28, 2018):

https://github.com/dani-garcia/bitwarden_rs/issues/44 is likely the ticket @dani-garcia had in mind. I initially read it wrong thinking you were trying to use the u2f token in the web vault directly, but you already said you were using the chrome extension.

@fbartels commented on GitHub (Nov 28, 2018): https://github.com/dani-garcia/bitwarden_rs/issues/44 is likely the ticket @dani-garcia had in mind. I initially read it wrong thinking you were trying to use the u2f token in the web vault directly, but you already said you were using the chrome extension.

GiteaMirror commented

2026-03-07 19:11:32 -06:00

@dani-garcia commented on GitHub (Dec 18, 2018):

This has been fixed by #293.

@dani-garcia commented on GitHub (Dec 18, 2018): This has been fixed by #293.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/vaultwarden#3781