Always send initOrganization and orgUserHasExistingUser in invite URL - #7482
Conversation
… URL The bundled web vault (2026.6.4) requires seven query parameters in the accept-organization URL and rejects the invite client-side when any of them is null, showing only "Unable to accept invitation" without sending a request to the server. send_invite() never appended initOrganization, and appended orgUserHasExistingUser only for users who already had an account, so every organization invitation e-mail produced a link that could not be accepted. Web vault 2026.4.1 (shipped with 1.36.0) read these parameters null-safely, which is why this only appeared in 1.37.0. Fixes dani-garcia#7481 Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
|
im having the same issue as well, no user is able to sign up using invite link from email 😭 |
|
same issue |
|
Need the fix asap. Was running into problems multiple times today in business context... |
|
The same problem |
|
same here, im unable to add members at this point, @dani-garcia could u please have a look at this pr? tx in advance :D |
|
Unfortunately we also got hit by this with several invites in the queue yesterday. But I don't wanna complain, you people do a great job here. :) (A quick bugfix release would still be appreciated, before the other departments loose patience. ^^) |
|
@stefan0xC does this indeed fixes that invite issue? |
|
We are running into the same problem, we are using SSO. How can we help, do we have a list of scenarios that need to be tested? |
It does. (I've tested it with both an existing and also a new user.) |
|
Did you use the SSO flow or the normal login flow? Do we need to test other flows? |
|
I can also confirm this fixes the invite issue via email when using SSO. This needs to be merged and releases asap |
|
For those who use Docker, while the PR is pending, you can replace your container with the fixed fork easily. Docker compose file will look like this: services:
vaultwarden:
- image: vaultwarden/server:latest
+ build: https://github.com/vikfox/vaultwarden.git#fix/invite-init-organization
container_name: vaultwarden
...Then run
|
|
I Finally had some time to do some extra checking. Thanks @vikfox |
…➔ 1.37.1) (#467) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [ghcr.io/dani-garcia/vaultwarden](https://github.com/dani-garcia/vaultwarden) | patch | `1.37.0` → `1.37.1` | --- ### Release Notes <details> <summary>dani-garcia/vaultwarden (ghcr.io/dani-garcia/vaultwarden)</summary> ### [`v1.37.1`](https://github.com/dani-garcia/vaultwarden/releases/tag/1.37.1) [Compare Source](dani-garcia/vaultwarden@1.37.0...1.37.1) ##### Note This patch release resolves the issues with invites. If you have applied any workaround to fix this locally, please revert those fixes to prevent possible other issues. I'm sorry that it took some time to check and validate this fix. Also, this release fixes an issue ([#​7475](dani-garcia/vaultwarden#7475)) with all the Alpine based images which are build using <https://github.com/BlackDex/rust-musl/>. An issue with the build image OpenSSL compilation is resolved and those are used to build the new `alpine` tagged containers. ##### What's Changed - Always send initOrganization and orgUserHasExistingUser in invite URL by [@​vikfox](https://github.com/vikfox) in [#​7482](dani-garcia/vaultwarden#7482) - Indirectly resolved [#​7475](dani-garcia/vaultwarden#7475) by using newer rust-musl build images which had a compilation issue with OpenSSL. ##### New Contributors - [@​vikfox](https://github.com/vikfox) made their first contribution in [#​7482](dani-garcia/vaultwarden#7482) **Full Changelog**: <dani-garcia/vaultwarden@1.37.0...1.37.1> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Warsaw) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODUuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI4NS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=--> Reviewed-on: https://git.ajgon.casa/deedee/mark13/pulls/467
…(#570) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [quay.io/vaultwarden/server](https://github.com/dani-garcia/vaultwarden) | patch | `1.37.0` → `1.37.1` | --- ### Release Notes <details> <summary>dani-garcia/vaultwarden (quay.io/vaultwarden/server)</summary> ### [`v1.37.1`](https://github.com/dani-garcia/vaultwarden/releases/tag/1.37.1) [Compare Source](dani-garcia/vaultwarden@1.37.0...1.37.1) #### Note This patch release resolves the issues with invites. If you have applied any workaround to fix this locally, please revert those fixes to prevent possible other issues. I'm sorry that it took some time to check and validate this fix. Also, this release fixes an issue ([#​7475](dani-garcia/vaultwarden#7475)) with all the Alpine based images which are build using <https://github.com/BlackDex/rust-musl/>. An issue with the build image OpenSSL compilation is resolved and those are used to build the new `alpine` tagged containers. #### What's Changed - Always send initOrganization and orgUserHasExistingUser in invite URL by [@​vikfox](https://github.com/vikfox) in [#​7482](dani-garcia/vaultwarden#7482) - Indirectly resolved [#​7475](dani-garcia/vaultwarden#7475) by using newer rust-musl build images which had a compilation issue with OpenSSL. #### New Contributors - [@​vikfox](https://github.com/vikfox) made their first contribution in [#​7482](dani-garcia/vaultwarden#7482) **Full Changelog**: <dani-garcia/vaultwarden@1.37.0...1.37.1> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI4MS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Fixes #7481.
The web vault bundled with 1.37.0 (2026.6.4) requires seven query parameters in the accept-organization URL:
send_invite() never appended initOrganization, and appended orgUserHasExistingUser only when the invited user already had an account. With either missing, fromUrlParams returns null and the component shows inviteAcceptFailed without sending any request to the server — which is why the log shows no POST /api/organizations/<org_id>/users/<member_id>/accept at all.
This regressed in 1.37.0: web vault 2026.4.1 (shipped with 1.36.0) had the same logic under the name fromParams and required only the two GUIDs, reading the rest null-safely.
This patch always sends both parameters. Verified on 1.37.0 with SMTP enabled: before the change the invite link is rejected client-side; after appending &initOrganization=false manually the invite is accepted, the membership moves to Accepted, and confirmation by the owner works as usual. Reported independently by another user in the issue.