Log with device isn't working all the way

[ShlomiD83]

Hi All,
I'm using the latest testing-alpine image and turned on "approve logins" in Bitwarden's Android app.
I get the notification to my phone and approve it but the nothing happens after that.

Am I missing something in the config? I'm using WS the "new" way and confirmed it's working through the browser.

Please advise.

[BlackDex]

It should unlock after you approved on the phone
What do the logs say?

[ShlomiD83]

the logs show nothing, I've tried 3 times just now and the logs remain the same.
which log level I need? currently using:
- LOG_LEVEL=warn
- EXTENDED_LOGGING=true

[BlackDex]

Better would be to set it to debug

[ShlomiD83]

[2023-08-14 21:16:46.602][trust_dns_proto::udp::udp_stream][DEBUG] created socket successfully
[2023-08-14 21:16:46.604][trust_dns_proto::udp::udp_client_stream][DEBUG] received message id: 63408
[2023-08-14 21:16:46.604][trust_dns_resolver::error][DEBUG] Response:; header 63408:RESPONSE:RD,RA:NoError:QUERY:2/0/0
; query
;; push.bitwarden.com. IN A
; answers 2
push.bitwarden.com. 150 IN A 104.18.12.33
push.bitwarden.com. 150 IN A 104.18.13.33
; nameservers 0
; additionals 0

[2023-08-14 21:16:46.604][trust_dns_resolver::error][DEBUG] Response:; header 63408:RESPONSE:RD,RA:NoError:QUERY:2/0/0
; query
;; push.bitwarden.com. IN A
; answers 2
push.bitwarden.com. 150 IN A 104.18.12.33
push.bitwarden.com. 150 IN A 104.18.13.33
; nameservers 0
; additionals 0

[2023-08-14 21:16:46.634][h2::client][DEBUG] binding client connection
[2023-08-14 21:16:46.634][h2::client][DEBUG] client connection bound
[2023-08-14 21:16:46.634][h2::codec::framed_write][DEBUG] send frame=Settings { flags: (0x0), enable_push: 0, initial_window_size: 2097152, max_frame_size: 16384 }
[2023-08-14 21:16:46.634][h2::proto::connection][DEBUG] Connection; peer=Client
[2023-08-14 21:16:46.636][h2::codec::framed_write][DEBUG] send frame=WindowUpdate { stream_id: StreamId(0), size_increment: 5177345 }
[2023-08-14 21:16:46.636][h2::codec::framed_write][DEBUG] send frame=Headers { stream_id: StreamId(1), flags: (0x4: END_HEADERS) }
[2023-08-14 21:16:46.636][h2::codec::framed_write][DEBUG] send frame=Data { stream_id: StreamId(1), flags: (0x1: END_STREAM) }
[2023-08-14 21:16:46.640][h2::codec::framed_read][DEBUG] received frame=Settings { flags: (0x0), max_concurrent_streams: 256, initial_window_size: 65536, max_frame_size: 16777215 }
[2023-08-14 21:16:46.640][h2::codec::framed_write][DEBUG] send frame=Settings { flags: (0x1: ACK) }
[2023-08-14 21:16:46.640][h2::codec::framed_read][DEBUG] received frame=WindowUpdate { stream_id: StreamId(0), size_increment: 2147418112 }
[2023-08-14 21:16:46.645][h2::codec::framed_read][DEBUG] received frame=Settings { flags: (0x1: ACK) }
[2023-08-14 21:16:46.645][h2::proto::settings][DEBUG] received settings ACK; applying Settings { flags: (0x0), enable_push: 0, initial_window_size: 2097152, max_frame_size: 16384 }
[2023-08-14 21:16:46.651][request][INFO] GET /notifications/anonymous-hub?Token=6cb0efa6-79bd-4b98-9aa6-
[2023-08-14 21:16:46.651][vaultwarden::api::notifications::][WARN] Request guard rocket_ws :: WebSocket is forwarding.
[2023-08-14 21:16:46.652][rocket::response::responder::][WARN] Response was None.
[2023-08-14 21:16:46.652][rocket::server::_][WARN] Responding with registered (not_found) 404 catcher.
[2023-08-14 21:16:46.652][handlebars::render][DEBUG] Rendering value: Path(Relative(([Named("urlpath")], "urlpath")))
[2023-08-14 21:16:46.652][handlebars::render][DEBUG] Rendering value: Path(Relative(([Named("urlpath")], "urlpath")))
[2023-08-14 21:16:46.652][handlebars::render][DEBUG] Rendering value: Path(Relative(([Named("urlpath")], "urlpath")))
[2023-08-14 21:16:46.652][handlebars::render][DEBUG] Rendering value: Path(Relative(([Named("urlpath")], "urlpath")))
[2023-08-14 21:16:46.652][handlebars::render][DEBUG] Rendering value: Path(Relative(([Named("urlpath")], "urlpath")))
[2023-08-14 21:16:46.652][handlebars::render][DEBUG] Rendering value: Path(Relative(([Named("urlpath")], "urlpath")))
[2023-08-14 21:16:46.652][handlebars::render][DEBUG] Rendering value: Path(Relative(([Named("urlpath")], "urlpath")))
[2023-08-14 21:16:46.652][handlebars::render][DEBUG] Rendering value: Path(Relative(([Named("urlpath")], "urlpath")))
[2023-08-14 21:16:46.652][response][INFO] (web_files) GET /<p..> [10] => 404 Not Found
[2023-08-14 21:16:46.833][h2::codec::framed_read][DEBUG] received frame=Headers { stream_id: StreamId(1), flags: (0x5: END_HEADERS | END_STREAM) }
[2023-08-14 21:16:46.834][trust_dns_proto::xfer::dns_exchange][DEBUG] io_stream is done, shutting down
[2023-08-14 21:16:46.834][h2::codec::framed_write][DEBUG] send frame=GoAway { error_code: NO_ERROR, last_stream_id: StreamId(0) }
[2023-08-14 21:16:46.834][h2::proto::connection][DEBUG] Connection::poll; connection error error=GoAway(b"", NO_ERROR, Library)
[2023-08-14 21:16:49.267][vaultwarden::api::core::two_factor][DEBUG] Sending notifications for incomplete 2FA logins
[2023-08-14 21:16:49.267][vaultwarden::api::core::accounts][DEBUG] Purging auth requests
[2023-08-14 21:16:49.999][request][INFO] GET /api/auth-requests/6cb0efa6-79bd-4b98-9aa6-7e595cef98d9
[2023-08-14 21:16:50.000][response][INFO] (get_auth_request) GET /api/auth-requests/ => 200 OK
[2023-08-14 21:16:51.923][request][INFO] GET /api/auth-requests/6cb0efa6-79bd-4b98-9aa6-7e595cef98d9
[2023-08-14 21:16:51.924][response][INFO] (get_auth_request) GET /api/auth-requests/ => 200 OK
[2023-08-14 21:16:52.425][request][INFO] PUT /api/auth-requests/6cb0efa6-79bd-4b98-9aa6-7e595cef98d9
[2023-08-14 21:16:52.432][vaultwarden::api::push][DEBUG] Auth Push token still valid, no need for a new one
[2023-08-14 21:16:52.432][response][INFO] (put_auth_request) PUT /api/auth-requests/ => 200 OK
[2023-08-14 21:16:52.528][reqwest::connect][DEBUG] starting new connection: https://push.bitwarden.com/
[2023-08-14 21:16:52.528][trust_dns_proto::xfer::dns_handle][DEBUG] querying: push.bitwarden.com A
[2023-08-14 21:16:52.528][trust_dns_resolver::name_server::name_server_pool][DEBUG] sending request: [Query { name: Name("push.bitwarden.com"), query_type: A, query_class: IN }]
[2023-08-14 21:16:52.529][trust_dns_resolver::name_server::name_server][DEBUG] reconnecting: NameServerConfig { socket_addr: 127.0.0.11:53, protocol: Udp, tls_dns_name: None, trust_nx_responses: false, bind_addr: None }
[2023-08-14 21:16:52.529][trust_dns_proto::xfer][DEBUG] enqueueing message:QUERY:[Query { name: Name("push.bitwarden.com"), query_type: A, query_class: IN }]
[2023-08-14 21:16:52.529][trust_dns_proto::udp::udp_client_stream][DEBUG] final message: ; header 24307:QUERY:RD:NoError:QUERY:0/0/0
; query
;; push.bitwarden.com. IN A

[2023-08-14 21:16:52.529][trust_dns_proto::udp::udp_stream][DEBUG] created socket successfully
[2023-08-14 21:16:52.531][trust_dns_proto::udp::udp_client_stream][DEBUG] received message id: 24307
[2023-08-14 21:16:52.531][trust_dns_resolver::error][DEBUG] Response:; header 24307:RESPONSE:RD,RA:NoError:QUERY:2/0/0
; query
;; push.bitwarden.com. IN A
; answers 2
push.bitwarden.com. 144 IN A 104.18.12.33
push.bitwarden.com. 144 IN A 104.18.13.33
; nameservers 0
; additionals 0

[2023-08-14 21:16:52.532][trust_dns_resolver::error][DEBUG] Response:; header 24307:RESPONSE:RD,RA:NoError:QUERY:2/0/0
; query
;; push.bitwarden.com. IN A
; answers 2
push.bitwarden.com. 144 IN A 104.18.12.33
push.bitwarden.com. 144 IN A 104.18.13.33
; nameservers 0
; additionals 0

[2023-08-14 21:16:52.561][h2::client][DEBUG] binding client connection
[2023-08-14 21:16:52.561][h2::client][DEBUG] client connection bound
[2023-08-14 21:16:52.562][h2::codec::framed_write][DEBUG] send frame=Settings { flags: (0x0), enable_push: 0, initial_window_size: 2097152, max_frame_size: 16384 }
[2023-08-14 21:16:52.562][h2::proto::connection][DEBUG] Connection; peer=Client
[2023-08-14 21:16:52.562][h2::codec::framed_write][DEBUG] send frame=WindowUpdate { stream_id: StreamId(0), size_increment: 5177345 }
[2023-08-14 21:16:52.563][h2::codec::framed_write][DEBUG] send frame=Headers { stream_id: StreamId(1), flags: (0x4: END_HEADERS) }
[2023-08-14 21:16:52.564][h2::codec::framed_write][DEBUG] send frame=Data { stream_id: StreamId(1), flags: (0x1: END_STREAM) }
[2023-08-14 21:16:52.566][h2::codec::framed_read][DEBUG] received frame=Settings { flags: (0x0), max_concurrent_streams: 256, initial_window_size: 65536, max_frame_size: 16777215 }
[2023-08-14 21:16:52.567][h2::codec::framed_write][DEBUG] send frame=Settings { flags: (0x1: ACK) }
[2023-08-14 21:16:52.567][h2::codec::framed_read][DEBUG] received frame=WindowUpdate { stream_id: StreamId(0), size_increment: 2147418112 }
[2023-08-14 21:16:52.570][h2::codec::framed_read][DEBUG] received frame=Settings { flags: (0x1: ACK) }
[2023-08-14 21:16:52.571][h2::proto::settings][DEBUG] received settings ACK; applying Settings { flags: (0x0), enable_push: 0, initial_window_size: 2097152, max_frame_size: 16384 }
[2023-08-14 21:16:52.756][h2::codec::framed_read][DEBUG] received frame=Headers { stream_id: StreamId(1), flags: (0x5: END_HEADERS | END_STREAM) }
[2023-08-14 21:16:52.756][trust_dns_proto::xfer::dns_exchange][DEBUG] io_stream is done, shutting down
[2023-08-14 21:16:52.756][h2::codec::framed_write][DEBUG] send frame=GoAway { error_code: NO_ERROR, last_stream_id: StreamId(0) }
[2023-08-14 21:16:52.757][h2::proto::connection][DEBUG] Connection::poll; connection error error=GoAway(b"", NO_ERROR, Library)
[2023-08-14 21:16:55.832][tungstenite::protocol][DEBUG] Received close frame: None
[2023-08-14 21:16:55.833][tungstenite::protocol][DEBUG] Replying to close with Frame { header: FrameHeader { is_final: true, rsv1: false, rsv2: false, rsv3: false, opcode: Control(Close), mask: None }, payload: [] }
[2023-08-14 21:16:55.833][vaultwarden::api::notifications][INFO] Closing WS connection from 89.138.X.X

I think this is what you're looking for..

[BlackDex]

It seems to close your connection. That either means it took to long, or something else closes the connection. That could still be the reverse proxy if that for some reason closes the connection.

Are updates to the vault items correctly pushed to the mobile client? You say you receive a push notification, so i think it should.
Are there maybe any errors in the Developer Console (F12) of the browser?

[ShlomiD83]

You're correct, it's my reverse proxy advanced setting, I'm using Authentik in front of my Vaultwarden web vault.
Now I just need to understand how to fix it.

It seems the request is coming from my Authentik internal IP address instead of the real IP.

[ShlomiD83]

@Doublefire-Chen not really, I've stopped trying to get it to work.
It doesn't seem to work for me because I'm using Authentik/Authelia in front of my VW instance.
I haven't managed to find the right config.

[Doublefire-Chen]

I am sorry to hear that. Though it is not a critical featuer, it is a very convenient function. If I got the sollution, I will tell you instantly. On the positive side, it does not matter much. Good luck for us.

[ShlomiD83]

@Doublefire-Chen thank you :)

[obadaahmar]

Hi @ShlomiD83 I am having the same exact issue as you trying to make Authentik + NGINX Proxy Manager work with Vaultwarden and having issues logging via apps and extensions, have you had any progress on this from your end?

[ShlomiD83]

Hi @obadaahmar sorry, I never tried again.
I just don't use this feature, never got it to fully work properly.

[ShlomiD83]

I've switched from forward auth to a proxy provider in Authentik, so no advanced config is required.
login with device works only when accessing the web vault.
The Windows client & Chrome extension doesn't work.