Cannot accept invitation to organisation in 1.33.0 #5797

New Issue

Closed

opened 2026-03-07 20:39:12 -06:00 by GiteaMirror · 4 comments

GiteaMirror commented 2026-03-07 20:39:12 -06:00

Owner

Copy Link

Copy Source

Originally created by @pyRammos on GitHub (Jan 26, 2025).

Vaultwarden Support String

When I invite a new user (new or existing) to join an organisation, the email link opens the login page. Upon successful completion of the login, I am again redirected to log in. The second time it is successful but the user has not joined the organisation. I have tried different email addresses and passwords, as well as starting with a new user (create user via invite) or create a user before the invite. The users personal vault works well.
The same thing worked 24hrs ago so I am thinking it may be a change since updating to 1.33.0, which happened last night for me.

Your environment (Generated via diagnostics page)

• Vaultwarden version: v1.33.0
• Web-vault version: v2025.1.1
• OS/Arch: linux/x86_64
• Running within a container: true (Base: Debian)
• Database type: SQLite
• Database version: 3.46.0
• Environment settings overridden!: true
• Uses a reverse proxy: true
• IP Header check: true (X-Real-IP)
• Internet access: true
• Internet access via a proxy: false
• DNS Check: true
• Browser/Server Time Check: true
• Server/NTP Time Check: true
• Domain Configuration Check: true
• HTTPS Check: true
• Websocket Check: true
• HTTP Response Checks: true

Config & Details (Generated via diagnostics page)

Show Config & Details

Environment settings which are overridden: DOMAIN, ADMIN_TOKEN

Config:

{
  "_duo_akey": null,
  "_enable_duo": true,
  "_enable_email_2fa": false,
  "_enable_smtp": true,
  "_enable_yubico": true,
  "_icon_service_csp": "",
  "_icon_service_url": "",
  "_ip_header_enabled": true,
  "_max_note_size": 10000,
  "_smtp_img_src": "***:",
  "admin_ratelimit_max_burst": 3,
  "admin_ratelimit_seconds": 300,
  "admin_session_lifetime": 20,
  "admin_token": "***",
  "allowed_connect_src": "",
  "allowed_iframe_ancestors": "",
  "attachments_folder": "data/attachments",
  "auth_request_purge_schedule": "30 * * * * *",
  "authenticator_disable_time_drift": false,
  "data_folder": "data",
  "database_conn_init": "",
  "database_max_conns": 10,
  "database_timeout": 30,
  "database_url": "***************",
  "db_connection_retries": 15,
  "disable_2fa_remember": false,
  "disable_admin_token": false,
  "disable_icon_download": false,
  "domain": "*****://************",
  "domain_origin": "*****://************",
  "domain_path": "",
  "domain_set": true,
  "duo_context_purge_schedule": "30 * * * * *",
  "duo_host": null,
  "duo_ikey": null,
  "duo_skey": null,
  "duo_use_iframe": false,
  "email_2fa_auto_fallback": false,
  "email_2fa_enforce_on_verified_invite": false,
  "email_attempts_limit": 3,
  "email_change_allowed": true,
  "email_expiration_time": 600,
  "email_token_size": 6,
  "emergency_access_allowed": true,
  "emergency_notification_reminder_schedule": "0 3 * * * *",
  "emergency_request_timeout_schedule": "0 7 * * * *",
  "enable_db_wal": true,
  "enable_websocket": true,
  "enforce_single_org_with_reset_pw_policy": false,
  "event_cleanup_schedule": "0 10 0 * * *",
  "events_days_retain": null,
  "experimental_client_feature_flags": "fido2-vault-credentials",
  "extended_logging": true,
  "helo_name": null,
  "hibp_api_key": null,
  "http_request_block_non_global_ips": true,
  "http_request_block_regex": null,
  "icon_blacklist_non_global_ips": true,
  "icon_blacklist_regex": null,
  "icon_cache_folder": "data/icon_cache",
  "icon_cache_negttl": 259200,
  "icon_cache_ttl": 2592000,
  "icon_download_timeout": 10,
  "icon_redirect_code": 302,
  "icon_service": "internal",
  "incomplete_2fa_schedule": "30 * * * * *",
  "incomplete_2fa_time_limit": 3,
  "increase_note_size_limit": false,
  "invitation_expiration_hours": 120,
  "invitation_org_name": "Rammos Family Password Vault",
  "invitations_allowed": true,
  "ip_header": "X-Real-IP",
  "job_poll_interval_ms": 30000,
  "log_file": null,
  "log_level": "info",
  "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f",
  "login_ratelimit_max_burst": 10,
  "login_ratelimit_seconds": 60,
  "org_attachment_limit": null,
  "org_creation_users": "",
  "org_events_enabled": false,
  "org_groups_enabled": false,
  "password_hints_allowed": true,
  "password_iterations": 600000,
  "push_enabled": false,
  "push_identity_uri": "https://identity.bitwarden.com",
  "push_installation_id": "***",
  "push_installation_key": "***",
  "push_relay_uri": "https://push.bitwarden.com",
  "reload_templates": false,
  "require_device_email": false,
  "rsa_key_filename": "data/rsa_key",
  "send_purge_schedule": "0 5 * * * *",
  "sendmail_command": null,
  "sends_allowed": true,
  "sends_folder": "data/sends",
  "show_password_hint": false,
  "signups_allowed": true,
  "signups_domains_whitelist": "*********",
  "signups_verify": true,
  "signups_verify_resend_limit": 3,
  "signups_verify_resend_time": 300,
  "smtp_accept_invalid_certs": true,
  "smtp_accept_invalid_hostnames": false,
  "smtp_auth_mechanism": "\"Plain\", \"Login\"",
  "smtp_debug": false,
  "smtp_embed_images": true,
  "smtp_explicit_tls": null,
  "smtp_from": "****************",
  "smtp_from_name": "Rammos Family Password Vault",
  "smtp_host": "**********",
  "smtp_password": "***",
  "smtp_port": 465,
  "smtp_security": "force_tls",
  "smtp_ssl": null,
  "smtp_timeout": 20,
  "smtp_username": "****************",
  "templates_folder": "data/templates",
  "tmp_folder": "data/tmp",
  "trash_auto_delete_days": null,
  "trash_purge_schedule": "0 5 0 * * *",
  "use_sendmail": false,
  "use_syslog": false,
  "user_attachment_limit": null,
  "user_send_limit": null,
  "web_vault_enabled": true,
  "web_vault_folder": "web-vault/",
  "yubico_client_id": null,
  "yubico_secret_key": null,
  "yubico_server": null
}

Vaultwarden Build Version

1.33.0

Deployment method

Official Container Image

Custom deployment method

No response

Reverse Proxy

nginx

Host/Server Operating System

Linux

Operating System Version

Debian (Open Media Vault 7)

Clients

Web Vault

Client Version

No response

Steps To Reproduce

1. Create new user
2. Invite them to the organisation
3. Click in the invite link on the email
4. Log In

Expected Result

Login is successful and user accepts the invite

Actual Result

Login process is repeated, then no option to accept the invite

Logs

vaultwarden         | [2025-01-26 15:11:11.979][response][INFO] (reinvite_member) POST /api/organizations/<org_id>/users/<member_id>/reinvite => 200 OK
vaultwarden         | [2025-01-26 15:11:16.850][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/policies/token?token=eyJ0eXAiOiJKV1QiLCJhbGci
vaultwarden         | [2025-01-26 15:11:16.850][response][INFO] (list_policies_token) GET /api/organizations/<org_id>/policies/token?<token> => 200 OK
vaultwarden         | [2025-01-26 15:11:18.671][request][INFO] GET /api/devices/knowndevice
vaultwarden         | [2025-01-26 15:11:18.672][response][INFO] (get_known_device) GET /api/devices/knowndevice => 200 OK
vaultwarden         | [2025-01-26 15:11:35.668][request][INFO] POST /identity/accounts/prelogin
vaultwarden         | [2025-01-26 15:11:35.669][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK
vaultwarden         | [2025-01-26 15:11:35.686][request][INFO] POST /identity/connect/token
vaultwarden         | [2025-01-26 15:11:35.847][vaultwarden::api::identity][INFO] User zoe@rammos.me logged in successfully. IP: 10.0.0.224
vaultwarden         | [2025-01-26 15:11:35.847][response][INFO] (login) POST /identity/connect/token => 200 OK
vaultwarden         | [2025-01-26 15:11:35.878][request][INFO] GET /api/config
vaultwarden         | [2025-01-26 15:11:35.878][response][INFO] (config) GET /api/config => 200 OK
vaultwarden         | [2025-01-26 15:11:35.903][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/policies/token?token=eyJ0eXAiOiJKV1QiLCJhbGci
vaultwarden         | [2025-01-26 15:11:35.904][response][INFO] (list_policies_token) GET /api/organizations/<org_id>/policies/token?<token> => 200 OK
vaultwarden         | [2025-01-26 15:11:35.910][request][INFO] GET /notifications/hub?access_token=eyJ0eXAiOiJKV1QiL
vaultwarden         | [2025-01-26 15:11:35.910][vaultwarden::api::notifications][INFO] Accepting Rocket WS connection from 10.0.0.224
vaultwarden         | [2025-01-26 15:11:35.910][response][INFO] (websockets_hub) GET /notifications/hub?<data..> => 200 OK
vaultwarden         | [2025-01-26 15:11:35.910][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/keys
vaultwarden         | [2025-01-26 15:11:35.911][auth][ERROR] Unauthorized Error: The current user isn't confirmed member of the organization
vaultwarden         | [2025-01-26 15:11:35.911][vaultwarden::api::core::organizations::_][WARN] Request guard `OrgMemberHeaders` failed: "The current user isn't confirmed member of the organization".
vaultwarden         | [2025-01-26 15:11:35.911][response][INFO] (get_organization_keys) GET /api/organizations/<org_id>/keys => 401 Unauthorized
vaultwarden         | [2025-01-26 15:11:35.937][vaultwarden::api::notifications][INFO] Closing WS connection from 10.0.0.224
vaultwarden         | [2025-01-26 15:11:36.092][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/policies/token?token=eyJ0eXAiOiJKV1QiLCJhbGci
vaultwarden         | [2025-01-26 15:11:36.092][response][INFO] (list_policies_token) GET /api/organizations/<org_id>/policies/token?<token> => 200 OK
vaultwarden         | [2025-01-26 15:11:42.684][request][INFO] GET /api/devices/knowndevice
vaultwarden         | [2025-01-26 15:11:42.685][response][INFO] (get_known_device) GET /api/devices/knowndevice => 200 OK
vaultwarden         | [2025-01-26 15:11:44.501][request][INFO] POST /identity/accounts/prelogin
vaultwarden         | [2025-01-26 15:11:44.502][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK
vaultwarden         | [2025-01-26 15:11:44.514][request][INFO] POST /identity/connect/token
vaultwarden         | [2025-01-26 15:11:44.655][vaultwarden::api::identity][INFO] User zoe@rammos.me logged in successfully. IP: 10.0.0.224
vaultwarden         | [2025-01-26 15:11:44.655][response][INFO] (login) POST /identity/connect/token => 200 OK
vaultwarden         | [2025-01-26 15:11:44.685][request][INFO] GET /api/config
vaultwarden         | [2025-01-26 15:11:44.685][response][INFO] (config) GET /api/config => 200 OK
vaultwarden         | [2025-01-26 15:11:44.738][request][INFO] POST /identity/connect/token
vaultwarden         | [2025-01-26 15:11:44.740][response][INFO] (login) POST /identity/connect/token => 200 OK
vaultwarden         | [2025-01-26 15:11:44.764][request][INFO] GET /api/sync?excludeDomains=true
vaultwarden         | [2025-01-26 15:11:44.764][request][INFO] GET /notifications/hub?access_token=eyJ0eXAiOiJKV1QiL
vaultwarden         | [2025-01-26 15:11:44.764][vaultwarden::api::notifications][INFO] Accepting Rocket WS connection from 10.0.0.224
vaultwarden         | [2025-01-26 15:11:44.764][response][INFO] (websockets_hub) GET /notifications/hub?<data..> => 200 OK
vaultwarden         | [2025-01-26 15:11:44.766][response][INFO] (sync) GET /api/sync?<data..> => 200 OK

Screenshots or Videos

No response

Additional Context

No response

Originally created by @pyRammos on GitHub (Jan 26, 2025). ### Vaultwarden Support String When I invite a new user (new or existing) to join an organisation, the email link opens the login page. Upon successful completion of the login, I am again redirected to log in. The second time it is successful but the user has not joined the organisation. I have tried different email addresses and passwords, as well as starting with a new user (create user via invite) or create a user before the invite. The users personal vault works well. The same thing worked 24hrs ago so I am thinking it may be a change since updating to 1.33.0, which happened last night for me. ### Your environment (Generated via diagnostics page) * Vaultwarden version: v1.33.0 * Web-vault version: v2025.1.1 * OS/Arch: linux/x86_64 * Running within a container: true (Base: Debian) * Database type: SQLite * Database version: 3.46.0 * Environment settings overridden!: true * Uses a reverse proxy: true * IP Header check: true (X-Real-IP) * Internet access: true * Internet access via a proxy: false * DNS Check: true * Browser/Server Time Check: true * Server/NTP Time Check: true * Domain Configuration Check: true * HTTPS Check: true * Websocket Check: true * HTTP Response Checks: true ### Config & Details (Generated via diagnostics page) <details><summary>Show Config & Details</summary> **Environment settings which are overridden:** DOMAIN, ADMIN_TOKEN **Config:** ```json { "_duo_akey": null, "_enable_duo": true, "_enable_email_2fa": false, "_enable_smtp": true, "_enable_yubico": true, "_icon_service_csp": "", "_icon_service_url": "", "_ip_header_enabled": true, "_max_note_size": 10000, "_smtp_img_src": "***:", "admin_ratelimit_max_burst": 3, "admin_ratelimit_seconds": 300, "admin_session_lifetime": 20, "admin_token": "***", "allowed_connect_src": "", "allowed_iframe_ancestors": "", "attachments_folder": "data/attachments", "auth_request_purge_schedule": "30 * * * * *", "authenticator_disable_time_drift": false, "data_folder": "data", "database_conn_init": "", "database_max_conns": 10, "database_timeout": 30, "database_url": "***************", "db_connection_retries": 15, "disable_2fa_remember": false, "disable_admin_token": false, "disable_icon_download": false, "domain": "*****://************", "domain_origin": "*****://************", "domain_path": "", "domain_set": true, "duo_context_purge_schedule": "30 * * * * *", "duo_host": null, "duo_ikey": null, "duo_skey": null, "duo_use_iframe": false, "email_2fa_auto_fallback": false, "email_2fa_enforce_on_verified_invite": false, "email_attempts_limit": 3, "email_change_allowed": true, "email_expiration_time": 600, "email_token_size": 6, "emergency_access_allowed": true, "emergency_notification_reminder_schedule": "0 3 * * * *", "emergency_request_timeout_schedule": "0 7 * * * *", "enable_db_wal": true, "enable_websocket": true, "enforce_single_org_with_reset_pw_policy": false, "event_cleanup_schedule": "0 10 0 * * *", "events_days_retain": null, "experimental_client_feature_flags": "fido2-vault-credentials", "extended_logging": true, "helo_name": null, "hibp_api_key": null, "http_request_block_non_global_ips": true, "http_request_block_regex": null, "icon_blacklist_non_global_ips": true, "icon_blacklist_regex": null, "icon_cache_folder": "data/icon_cache", "icon_cache_negttl": 259200, "icon_cache_ttl": 2592000, "icon_download_timeout": 10, "icon_redirect_code": 302, "icon_service": "internal", "incomplete_2fa_schedule": "30 * * * * *", "incomplete_2fa_time_limit": 3, "increase_note_size_limit": false, "invitation_expiration_hours": 120, "invitation_org_name": "Rammos Family Password Vault", "invitations_allowed": true, "ip_header": "X-Real-IP", "job_poll_interval_ms": 30000, "log_file": null, "log_level": "info", "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f", "login_ratelimit_max_burst": 10, "login_ratelimit_seconds": 60, "org_attachment_limit": null, "org_creation_users": "", "org_events_enabled": false, "org_groups_enabled": false, "password_hints_allowed": true, "password_iterations": 600000, "push_enabled": false, "push_identity_uri": "https://identity.bitwarden.com", "push_installation_id": "***", "push_installation_key": "***", "push_relay_uri": "https://push.bitwarden.com", "reload_templates": false, "require_device_email": false, "rsa_key_filename": "data/rsa_key", "send_purge_schedule": "0 5 * * * *", "sendmail_command": null, "sends_allowed": true, "sends_folder": "data/sends", "show_password_hint": false, "signups_allowed": true, "signups_domains_whitelist": "*********", "signups_verify": true, "signups_verify_resend_limit": 3, "signups_verify_resend_time": 300, "smtp_accept_invalid_certs": true, "smtp_accept_invalid_hostnames": false, "smtp_auth_mechanism": "\"Plain\", \"Login\"", "smtp_debug": false, "smtp_embed_images": true, "smtp_explicit_tls": null, "smtp_from": "****************", "smtp_from_name": "Rammos Family Password Vault", "smtp_host": "**********", "smtp_password": "***", "smtp_port": 465, "smtp_security": "force_tls", "smtp_ssl": null, "smtp_timeout": 20, "smtp_username": "****************", "templates_folder": "data/templates", "tmp_folder": "data/tmp", "trash_auto_delete_days": null, "trash_purge_schedule": "0 5 0 * * *", "use_sendmail": false, "use_syslog": false, "user_attachment_limit": null, "user_send_limit": null, "web_vault_enabled": true, "web_vault_folder": "web-vault/", "yubico_client_id": null, "yubico_secret_key": null, "yubico_server": null } ``` </details> ### Vaultwarden Build Version 1.33.0 ### Deployment method Official Container Image ### Custom deployment method _No response_ ### Reverse Proxy nginx ### Host/Server Operating System Linux ### Operating System Version Debian (Open Media Vault 7) ### Clients Web Vault ### Client Version _No response_ ### Steps To Reproduce 1. Create new user 2. Invite them to the organisation 3. Click in the invite link on the email 4. Log In ### Expected Result Login is successful and user accepts the invite ### Actual Result Login process is repeated, then no option to accept the invite ### Logs ```text vaultwarden | [2025-01-26 15:11:11.979][response][INFO] (reinvite_member) POST /api/organizations/<org_id>/users/<member_id>/reinvite => 200 OK vaultwarden | [2025-01-26 15:11:16.850][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/policies/token?token=eyJ0eXAiOiJKV1QiLCJhbGci vaultwarden | [2025-01-26 15:11:16.850][response][INFO] (list_policies_token) GET /api/organizations/<org_id>/policies/token?<token> => 200 OK vaultwarden | [2025-01-26 15:11:18.671][request][INFO] GET /api/devices/knowndevice vaultwarden | [2025-01-26 15:11:18.672][response][INFO] (get_known_device) GET /api/devices/knowndevice => 200 OK vaultwarden | [2025-01-26 15:11:35.668][request][INFO] POST /identity/accounts/prelogin vaultwarden | [2025-01-26 15:11:35.669][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK vaultwarden | [2025-01-26 15:11:35.686][request][INFO] POST /identity/connect/token vaultwarden | [2025-01-26 15:11:35.847][vaultwarden::api::identity][INFO] User zoe@rammos.me logged in successfully. IP: 10.0.0.224 vaultwarden | [2025-01-26 15:11:35.847][response][INFO] (login) POST /identity/connect/token => 200 OK vaultwarden | [2025-01-26 15:11:35.878][request][INFO] GET /api/config vaultwarden | [2025-01-26 15:11:35.878][response][INFO] (config) GET /api/config => 200 OK vaultwarden | [2025-01-26 15:11:35.903][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/policies/token?token=eyJ0eXAiOiJKV1QiLCJhbGci vaultwarden | [2025-01-26 15:11:35.904][response][INFO] (list_policies_token) GET /api/organizations/<org_id>/policies/token?<token> => 200 OK vaultwarden | [2025-01-26 15:11:35.910][request][INFO] GET /notifications/hub?access_token=eyJ0eXAiOiJKV1QiL vaultwarden | [2025-01-26 15:11:35.910][vaultwarden::api::notifications][INFO] Accepting Rocket WS connection from 10.0.0.224 vaultwarden | [2025-01-26 15:11:35.910][response][INFO] (websockets_hub) GET /notifications/hub?<data..> => 200 OK vaultwarden | [2025-01-26 15:11:35.910][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/keys vaultwarden | [2025-01-26 15:11:35.911][auth][ERROR] Unauthorized Error: The current user isn't confirmed member of the organization vaultwarden | [2025-01-26 15:11:35.911][vaultwarden::api::core::organizations::_][WARN] Request guard `OrgMemberHeaders` failed: "The current user isn't confirmed member of the organization". vaultwarden | [2025-01-26 15:11:35.911][response][INFO] (get_organization_keys) GET /api/organizations/<org_id>/keys => 401 Unauthorized vaultwarden | [2025-01-26 15:11:35.937][vaultwarden::api::notifications][INFO] Closing WS connection from 10.0.0.224 vaultwarden | [2025-01-26 15:11:36.092][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/policies/token?token=eyJ0eXAiOiJKV1QiLCJhbGci vaultwarden | [2025-01-26 15:11:36.092][response][INFO] (list_policies_token) GET /api/organizations/<org_id>/policies/token?<token> => 200 OK vaultwarden | [2025-01-26 15:11:42.684][request][INFO] GET /api/devices/knowndevice vaultwarden | [2025-01-26 15:11:42.685][response][INFO] (get_known_device) GET /api/devices/knowndevice => 200 OK vaultwarden | [2025-01-26 15:11:44.501][request][INFO] POST /identity/accounts/prelogin vaultwarden | [2025-01-26 15:11:44.502][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK vaultwarden | [2025-01-26 15:11:44.514][request][INFO] POST /identity/connect/token vaultwarden | [2025-01-26 15:11:44.655][vaultwarden::api::identity][INFO] User zoe@rammos.me logged in successfully. IP: 10.0.0.224 vaultwarden | [2025-01-26 15:11:44.655][response][INFO] (login) POST /identity/connect/token => 200 OK vaultwarden | [2025-01-26 15:11:44.685][request][INFO] GET /api/config vaultwarden | [2025-01-26 15:11:44.685][response][INFO] (config) GET /api/config => 200 OK vaultwarden | [2025-01-26 15:11:44.738][request][INFO] POST /identity/connect/token vaultwarden | [2025-01-26 15:11:44.740][response][INFO] (login) POST /identity/connect/token => 200 OK vaultwarden | [2025-01-26 15:11:44.764][request][INFO] GET /api/sync?excludeDomains=true vaultwarden | [2025-01-26 15:11:44.764][request][INFO] GET /notifications/hub?access_token=eyJ0eXAiOiJKV1QiL vaultwarden | [2025-01-26 15:11:44.764][vaultwarden::api::notifications][INFO] Accepting Rocket WS connection from 10.0.0.224 vaultwarden | [2025-01-26 15:11:44.764][response][INFO] (websockets_hub) GET /notifications/hub?<data..> => 200 OK vaultwarden | [2025-01-26 15:11:44.766][response][INFO] (sync) GET /api/sync?<data..> => 200 OK ``` ### Screenshots or Videos _No response_ ### Additional Context _No response_

GiteaMirror added the bug label 2026-03-07 20:39:12 -06:00

GiteaMirror closed this issue 2026-03-07 20:39:12 -06:00

GiteaMirror commented 2026-03-07 20:39:13 -06:00

Author

Owner

Copy Link

Copy Source

@stefan0xC commented on GitHub (Jan 26, 2025):

Thanks for the report.

vaultwarden         | [2025-01-26 15:11:35.910][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/keys
vaultwarden         | [2025-01-26 15:11:35.911][auth][ERROR] Unauthorized Error: The current user isn't confirmed member of the organization
vaultwarden         | [2025-01-26 15:11:35.911][vaultwarden::api::core::organizations::_][WARN] Request guard `OrgMemberHeaders` failed: "The current user isn't confirmed member of the organization".
vaultwarden         | [2025-01-26 15:11:35.911][response][INFO] (get_organization_keys) GET /api/organizations/<org_id>/keys => 401 Unauthorized

I assume you have automatic account recovery policy active?
I think it's failing because of the confirmed membership requirement.

@BlackDex should we make an InvitedOrgMemberHeader for get_organization_public_key?

@stefan0xC commented on GitHub (Jan 26, 2025): Thanks for the report. ``` vaultwarden | [2025-01-26 15:11:35.910][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/keys vaultwarden | [2025-01-26 15:11:35.911][auth][ERROR] Unauthorized Error: The current user isn't confirmed member of the organization vaultwarden | [2025-01-26 15:11:35.911][vaultwarden::api::core::organizations::_][WARN] Request guard `OrgMemberHeaders` failed: "The current user isn't confirmed member of the organization". vaultwarden | [2025-01-26 15:11:35.911][response][INFO] (get_organization_keys) GET /api/organizations/<org_id>/keys => 401 Unauthorized ``` I assume you have automatic account recovery policy active? I think it's failing because of the confirmed membership requirement. @BlackDex should we make an InvitedOrgMemberHeader for `get_organization_public_key`?

GiteaMirror commented 2026-03-07 20:39:13 -06:00

Author

Owner

Copy Link

Copy Source

@BlackDex commented on GitHub (Jan 26, 2025):

Or that check should also also allow invited users, but not revoked ones

@BlackDex commented on GitHub (Jan 26, 2025): Or that check should also also allow invited users, but not revoked ones

GiteaMirror commented 2026-03-07 20:39:14 -06:00

Author

Owner

Copy Link

Copy Source

@pyRammos commented on GitHub (Jan 27, 2025):

I disabled to policy and it worked. Thank you !

@pyRammos commented on GitHub (Jan 27, 2025): I disabled to policy and it worked. Thank you !

GiteaMirror commented 2026-03-07 20:39:15 -06:00

Author

Owner

Copy Link

Copy Source

@Inno-ooshot commented on GitHub (Jan 27, 2025):

Same issue here since the update, cannot accept invite.
Disabling the policy have resolved the issue as well.

@Inno-ooshot commented on GitHub (Jan 27, 2025): Same issue here since the update, cannot accept invite. Disabling the policy have resolved the issue as well.

GiteaMirror referenced this issue 2026-03-07 21:15:00 -06:00

[PR #5880] [MERGED] Update admin interface #7316

GiteaMirror referenced this issue 2026-04-16 12:31:13 -05:00

[PR #5880] [MERGED] Update admin interface #8616

GiteaMirror referenced this issue 2026-04-20 14:36:15 -05:00

[GH-ISSUE #5797] Minor issue: Unable to fetch NTP time #11060

GiteaMirror referenced this issue 2026-04-20 15:49:08 -05:00

[PR #5880] [MERGED] Update admin interface #12542

GiteaMirror referenced this issue 2026-04-23 06:52:25 -05:00

[GH-ISSUE #5797] Minor issue: Unable to fetch NTP time #15037

GiteaMirror referenced this issue 2026-04-23 07:55:35 -05:00

[PR #5880] [MERGED] Update admin interface #16522

GiteaMirror referenced this issue 2026-04-25 21:25:46 -05:00

[GH-ISSUE #5797] Minor issue: Unable to fetch NTP time #19021

GiteaMirror referenced this issue 2026-04-25 22:34:33 -05:00

[PR #5880] [MERGED] Update admin interface #20509

GiteaMirror referenced this issue 2026-04-30 08:15:34 -05:00

[PR #5880] [MERGED] Update admin interface #21876

GiteaMirror referenced this issue 2026-05-16 05:50:44 -05:00

[PR #5880] [MERGED] Update admin interface #23204

GiteaMirror referenced this issue 2026-05-22 02:02:39 -05:00

[PR #5880] [MERGED] Update admin interface #24545

GiteaMirror referenced this issue 2026-05-29 04:53:12 -05:00

[PR #5880] [MERGED] Update admin interface #25889

GiteaMirror referenced this issue 2026-06-15 14:34:22 -05:00

[PR #5880] [MERGED] Update admin interface #27239

GiteaMirror referenced this issue 2026-06-17 09:23:25 -05:00

[GH-ISSUE #5797] Minor issue: Unable to fetch NTP time #29739

GiteaMirror referenced this issue 2026-06-17 11:17:57 -05:00

[PR #5880] [MERGED] Update admin interface #31285

GiteaMirror referenced this issue 2026-06-20 19:27:24 -05:00

[PR #5880] [MERGED] Update admin interface #32698

GiteaMirror referenced this issue 2026-07-13 19:59:52 -05:00

[GH-ISSUE #5797] Minor issue: Unable to fetch NTP time #35199

GiteaMirror referenced this issue 2026-07-13 21:20:54 -05:00

[PR #5880] [MERGED] Update admin interface #36765

GiteaMirror referenced this issue 2026-07-17 15:32:09 -05:00

[GH-ISSUE #5797] Minor issue: Unable to fetch NTP time #39494

GiteaMirror referenced this issue 2026-07-18 04:25:59 -05:00

[PR #5880] [MERGED] Update admin interface #41062

Sign in to join this conversation.

No Branch/Tag Specified

Branches Tags

main

v2-registration

revert-7033-patch-1

cached-config-operations

test_dylint

1.37.2

1.37.1

1.37.0

1.36.0

1.35.8

1.35.7

1.35.6

1.35.5

1.35.4

1.35.3

1.35.2

1.35.1

1.35.0

1.34.3

1.34.2

1.34.1

1.34.0

1.33.2

1.33.1

1.33.0

1.32.7

1.32.6

1.32.5

1.32.4

1.32.3

1.32.2

1.32.1

1.32.0

1.31.0

1.30.5

1.30.4

1.30.3

1.30.2

1.30.1

1.30.0

1.29.2

1.29.1

1.29.0

1.28.1

1.28.0

1.27.0

1.26.0

1.25.2

1.25.1

1.25.0

1.24.0

1.23.1

1.23.0

1.22.2

1.22.1

1.22.0

1.21.0

1.20.0

1.19.0

1.18.0

1.17.0

1.16.3

1.16.2

1.16.1

1.16.0

1.15.1

1.15.0

1.14.2

1.14.1

1.14

1.13.1

1.13.0

1.12.0

1.11.0

1.10.0

1.9.1

1.9.0

1.8.0

1.7.0

1.6.1

1.6.0

1.5.0

1.4.0

1.3.0

1.2.0

1.1.0

1.0.0

0.13.0

0.12.0

0.11.0

0.10.0

0.9.0

Labels

Clear labels

better for forum

bug

documentation

duplicate

enhancement

future Vault

good first issue

help wanted

low priority

notes

pull-request

Mirrored from GitHub Pull Request

question

SSO

Third party

troubleshooting

wontfix

No labels bug

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

GiteaMirror ninjasurge (Kaehlen Rog)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/vaultwarden#5797