Browser plugin giving error for selfhosted #6839
Replies: 4 comments 6 replies
|
Not really sure what you are doing here or what your issue is. |
|
It works fine, but sometimes when the session expire the plugin/extension ask for master password, but it is rejected instead click disconnect and reconnect, there are kind of server log that we can check? |
|
Just check the logs for errors or warning. But if the session expires that should normally just refresh. |
|
Hi @BlackDex , thanks for your information, we use deploy of bitwarden extension by enforcement in google workspace, I will try remove and reinstall to check solution. |
|
Hello @BlackDex -- I think I'm experiencing the same issue as @fgendorf , and am happy to help troubleshoot. I'm using the browser extension in Chrome on Fedora. The issue is that when my vault locks, my master password no longer works -- trying over and over again with absolute certainty that I have the correct password results in "An error has occurred, Invalid master password". If I click "Log out" and log back in again from scratch, the password is accepted. This is a 100% repro rate for me, and it persists across uninstalling and reinstalling the plugin. For troubleshooting purposes, I created a Bitwarden Cloud account and tested the same behavior, and cannot reproduce the behavior with Bitwarden Cloud. Server-side, I've also pulled the latest Vaultwarden image with podman, and I continue to see this behavior. There are no issues with the web client. This feels like it is likely completely unrelated, but I might as well mention it anyway just in case -- if I "pop out" the Bitwarden browser client to a new window and then log out, the pop-up window briefly displays the log in screen, then redirects to the Google New Tab page. If there are any logs or troubleshooting steps I can take to try and help, please let me know. Thanks. Edit to add: this issue seemed to appear completely randomly not too long ago, with no change in configuration or unusual usage on my part; unfortunately I do not have an exact date. |
|
I'm also discovering that for me this impacts the official Bitwarden Android client, as well, but only with password authentication, not biometrics. I also get an explicit error with a stack trace, pasted below: Stacktrace: Version: 2026.1.1 (21176) |
|
Also below are the "Flight Recorder" logs -- I've redacted my domain name to "my.domain" but left the rest intact. |
|
Apologies for the repeated messages. One more update: I changed the environment variable in my compose file to allow signups again, created a new account on my Vaultwarden instance and imported all of my passwords, logged out in the browser plugin, logged in in the new account, and the issue no longer exists. Further, after logging out from the new account and logging in to the old account again, the issue remains resolved on the old account. This also works with the Android client. As such I am no longer able to reproduce the issue, but if there's any other way I can help if y'all want to investigate this, I'm happy to do what I can. |
|
I'm having the same issue here. If I lock the BW Firefox plugin, I can't unlock it with the master password If I log out, I can log back in with the same username and master password. |
|
I tested it with Firefox, Chrome, and the desktop app. All of them allow me to log in once, but as soon as I restart the browser, I have to log out completely. I have the same problem on Windows, Debian with KDE, and KDE Neon.
I found the cause. I still had the Websocket Router active on port 3012 in Traefik. After removing the label from my Docker Compose and restarting, everything is working again. |
Uh oh!
There was an error while loading. Please reload this page.
Prerequisites
Vaultwarden Support String
Your environment (Generated via diagnostics page)
Config & Details (Generated via diagnostics page)
Show Config & Details
Environment settings which are overridden: ADMIN_TOKEN
Config:
{ "_duo_akey": null, "_enable_duo": true, "_enable_email_2fa": false, "_enable_smtp": true, "_enable_yubico": true, "_icon_service_csp": "", "_icon_service_url": "", "_ip_header_enabled": true, "_max_note_size": 10000, "_smtp_img_src": "***:", "admin_ratelimit_max_burst": 3, "admin_ratelimit_seconds": 300, "admin_session_lifetime": 20, "admin_token": "***", "allowed_connect_src": "", "allowed_iframe_ancestors": "", "attachments_folder": "data/attachments", "auth_request_purge_schedule": "30 * * * * *", "authenticator_disable_time_drift": false, "data_folder": "data", "database_conn_init": "", "database_idle_timeout": 600, "database_max_conns": 10, "database_min_conns": 2, "database_timeout": 30, "database_url": "***************", "db_connection_retries": 15, "disable_2fa_remember": false, "disable_admin_token": false, "disable_icon_download": false, "dns_prefer_ipv6": false, "domain": "*****://******************", "domain_origin": "*****://******************", "domain_path": "", "domain_set": true, "duo_context_purge_schedule": "30 * * * * *", "duo_host": null, "duo_ikey": null, "duo_skey": null, "duo_use_iframe": false, "email_2fa_auto_fallback": false, "email_2fa_enforce_on_verified_invite": false, "email_attempts_limit": 3, "email_change_allowed": true, "email_expiration_time": 600, "email_token_size": 6, "emergency_access_allowed": true, "emergency_notification_reminder_schedule": "0 3 * * * *", "emergency_request_timeout_schedule": "0 7 * * * *", "enable_db_wal": true, "enable_websocket": true, "enforce_single_org_with_reset_pw_policy": false, "event_cleanup_schedule": "0 10 0 * * *", "events_days_retain": null, "experimental_client_feature_flags": "", "extended_logging": true, "helo_name": null, "hibp_api_key": "***", "http_request_block_non_global_ips": true, "http_request_block_regex": null, "icon_blacklist_non_global_ips": true, "icon_blacklist_regex": null, "icon_cache_folder": "data/icon_cache", "icon_cache_negttl": 259200, "icon_cache_ttl": 2592000, "icon_download_timeout": 10, "icon_redirect_code": 302, "icon_service": "internal", "incomplete_2fa_schedule": "30 * * * * *", "incomplete_2fa_time_limit": 3, "increase_note_size_limit": false, "invitation_expiration_hours": 120, "invitation_org_name": "Vaultwarden", "invitations_allowed": true, "ip_header": "X-Real-IP", "job_poll_interval_ms": 30000, "log_file": null, "log_level": "info", "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f", "login_ratelimit_max_burst": 10, "login_ratelimit_seconds": 60, "org_attachment_limit": null, "org_creation_users": "", "org_events_enabled": true, "org_groups_enabled": true, "password_hints_allowed": true, "password_iterations": 600000, "purge_incomplete_sso_auth": "0 20 0 * * *", "push_enabled": false, "push_identity_uri": "https://identity.bitwarden.com", "push_installation_id": "***", "push_installation_key": "***", "push_relay_uri": "https://push.bitwarden.com", "reload_templates": false, "require_device_email": false, "rsa_key_filename": "data/rsa_key", "send_purge_schedule": "0 5 * * * *", "sendmail_command": null, "sends_allowed": true, "sends_folder": "data/sends", "show_password_hint": false, "signups_allowed": true, "signups_domains_whitelist": "********", "signups_verify": false, "signups_verify_resend_limit": 6, "signups_verify_resend_time": 3600, "smtp_accept_invalid_certs": false, "smtp_accept_invalid_hostnames": false, "smtp_auth_mechanism": "Non-SSL", "smtp_debug": false, "smtp_embed_images": true, "smtp_explicit_tls": null, "smtp_from": "********************", "smtp_from_name": "****************", "smtp_host": "********************", "smtp_password": null, "smtp_port": 25, "smtp_security": "off", "smtp_ssl": null, "smtp_timeout": 15, "smtp_username": null, "sso_allow_unknown_email_verification": false, "sso_audience_trusted": null, "sso_auth_only_not_session": false, "sso_authority": "", "sso_authorize_extra_params": "", "sso_callback_path": "*****://***********************************************", "sso_client_cache_expiration": 0, "sso_client_id": "", "sso_client_secret": "***", "sso_debug_tokens": false, "sso_enabled": false, "sso_master_password_policy": null, "sso_only": false, "sso_pkce": true, "sso_scopes": "email profile", "sso_signups_match_email": true, "templates_folder": "data/templates", "tmp_folder": "data/tmp", "trash_auto_delete_days": null, "trash_purge_schedule": "0 5 0 * * *", "use_sendmail": false, "use_syslog": false, "user_attachment_limit": null, "user_send_limit": null, "web_vault_enabled": true, "web_vault_folder": "web-vault/", "yubico_client_id": null, "yubico_secret_key": null, "yubico_server": null }Vaultwarden Build Version
1.35.3
Deployment method
Official Container Image
Custom deployment method
Browser plugin is giving the wrong sign for Selfhosted itself with the right sign.
It is necessary to disconnect from the self-hosted server, you must connect again and use the same login.
Reverse Proxy
nginx
Host/Server Operating System
Linux
Operating System Version
Ubuntu 24.04
Clients
Browser Extension
Client Version
Chrome
Steps To Reproduce
Login using browser extension.
Expected Result
You do not need to disconnect from the server and connect again.
Actual Result
Browser extension is updated.
Logs
Screenshots or Videos
No response
Additional Context
No response
All reactions