Skip to content

Always send initOrganization and orgUserHasExistingUser in invite URL - #7482

Merged
BlackDex merged 1 commit into
dani-garcia:mainfrom
vikfox:fix/invite-init-organization
Jul 29, 2026
Merged

Always send initOrganization and orgUserHasExistingUser in invite URL#7482
BlackDex merged 1 commit into
dani-garcia:mainfrom
vikfox:fix/invite-init-organization

Conversation

@vikfox

@vikfox vikfox commented Jul 25, 2026

Copy link
Copy Markdown
Contributor

Fixes #7481.

The web vault bundled with 1.37.0 (2026.6.4) requires seven query parameters in the accept-organization URL:

fromUrlParams(e){ return null==e ? null :
  isGuid(e.organizationId) && isGuid(e.organizationUserId)
  && null!=e.email && null!=e.token && null!=e.organizationName
  && null!=e.initOrganization && null!=e.orgUserHasExistingUser
    ? new bi({...}) : null }

send_invite() never appended initOrganization, and appended orgUserHasExistingUser only when the invited user already had an account. With either missing, fromUrlParams returns null and the component shows inviteAcceptFailed without sending any request to the server — which is why the log shows no POST /api/organizations/<org_id>/users/<member_id>/accept at all.

This regressed in 1.37.0: web vault 2026.4.1 (shipped with 1.36.0) had the same logic under the name fromParams and required only the two GUIDs, reading the rest null-safely.

This patch always sends both parameters. Verified on 1.37.0 with SMTP enabled: before the change the invite link is rejected client-side; after appending &initOrganization=false manually the invite is accepted, the membership moves to Accepted, and confirmation by the owner works as usual. Reported independently by another user in the issue.

… URL

The bundled web vault (2026.6.4) requires seven query parameters in the
accept-organization URL and rejects the invite client-side when any of them is
null, showing only "Unable to accept invitation" without sending a request to
the server.

send_invite() never appended initOrganization, and appended
orgUserHasExistingUser only for users who already had an account, so every
organization invitation e-mail produced a link that could not be accepted.

Web vault 2026.4.1 (shipped with 1.36.0) read these parameters null-safely,
which is why this only appeared in 1.37.0.

Fixes dani-garcia#7481

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@Jonty16117

Copy link
Copy Markdown

im having the same issue as well, no user is able to sign up using invite link from email 😭

@albertogalisteo

Copy link
Copy Markdown

same issue

@davidSGE

Copy link
Copy Markdown

Need the fix asap. Was running into problems multiple times today in business context...

@RomanIzvozchikov

Copy link
Copy Markdown

The same problem

@Jonty16117

Copy link
Copy Markdown

same here, im unable to add members at this point, @dani-garcia could u please have a look at this pr?

tx in advance :D

@RouL

RouL commented Jul 28, 2026

Copy link
Copy Markdown

Unfortunately we also got hit by this with several invites in the queue yesterday. But I don't wanna complain, you people do a great job here. :)

(A quick bugfix release would still be appreciated, before the other departments loose patience. ^^)

@BlackDex

Copy link
Copy Markdown
Collaborator

@stefan0xC does this indeed fixes that invite issue?

@sandervandegeijn

Copy link
Copy Markdown

We are running into the same problem, we are using SSO. How can we help, do we have a list of scenarios that need to be tested?

@stefan0xC

Copy link
Copy Markdown
Contributor

@stefan0xC does this indeed fixes that invite issue?

It does. (I've tested it with both an existing and also a new user.)

@sandervandegeijn

Copy link
Copy Markdown

Did you use the SSO flow or the normal login flow? Do we need to test other flows?

@Exonip

Exonip commented Jul 29, 2026

Copy link
Copy Markdown

I can also confirm this fixes the invite issue via email when using SSO. This needs to be merged and releases asap

@Wiredista

Wiredista commented Jul 29, 2026

Copy link
Copy Markdown

For those who use Docker, while the PR is pending, you can replace your container with the fixed fork easily.
In the docker-compose.yml change the line with image: vaultwarden/server:latest to build: https://github.com/vikfox/vaultwarden.git#fix/invite-init-organization

Docker compose file will look like this:

services:
  vaultwarden:
-   image: vaultwarden/server:latest 
+   build: https://github.com/vikfox/vaultwarden.git#fix/invite-init-organization
    container_name: vaultwarden
...

Then run docker compose up -d --build. It'll build the container image directly from the forked repository.

dont forget to change back later
update: you can also use the link for this repo, while the repository image doesn't get the update.

@BlackDex

Copy link
Copy Markdown
Collaborator

I Finally had some time to do some extra checking.
I checked the flows using SSO and SSO_ONLY, and also invites via the /admin portal.
This fix seems to keep those invites working too without any issues as far as i could detect.

Thanks @vikfox

@BlackDex
BlackDex merged commit 2629bcb into dani-garcia:main Jul 29, 2026
9 checks passed
ajgon pushed a commit to deedee-ops/home-ops that referenced this pull request Jul 29, 2026
…➔ 1.37.1) (#467)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/dani-garcia/vaultwarden](https://github.com/dani-garcia/vaultwarden) | patch | `1.37.0` → `1.37.1` |

---

### Release Notes

<details>
<summary>dani-garcia/vaultwarden (ghcr.io/dani-garcia/vaultwarden)</summary>

### [`v1.37.1`](https://github.com/dani-garcia/vaultwarden/releases/tag/1.37.1)

[Compare Source](dani-garcia/vaultwarden@1.37.0...1.37.1)

##### Note

This patch release resolves the issues with invites.
If you have applied any workaround to fix this locally, please revert those fixes to prevent possible other issues.

I'm sorry that it took some time to check and validate this fix.

Also, this release fixes an issue ([#&#8203;7475](dani-garcia/vaultwarden#7475)) with all the Alpine based images which are build using <https://github.com/BlackDex/rust-musl/>.
An issue with the build image OpenSSL compilation is resolved and those are used to build the new `alpine` tagged containers.

##### What's Changed

- Always send initOrganization and orgUserHasExistingUser in invite URL by [@&#8203;vikfox](https://github.com/vikfox) in [#&#8203;7482](dani-garcia/vaultwarden#7482)
- Indirectly resolved [#&#8203;7475](dani-garcia/vaultwarden#7475) by using newer rust-musl build images which had a compilation issue with OpenSSL.

##### New Contributors

- [@&#8203;vikfox](https://github.com/vikfox) made their first contribution in [#&#8203;7482](dani-garcia/vaultwarden#7482)

**Full Changelog**: <dani-garcia/vaultwarden@1.37.0...1.37.1>

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/Warsaw)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODUuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI4NS4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->

Reviewed-on: https://git.ajgon.casa/deedee/mark13/pulls/467
dadezzz pushed a commit to dadezzz/infra_docker-compose that referenced this pull request Jul 30, 2026
…(#570)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [quay.io/vaultwarden/server](https://github.com/dani-garcia/vaultwarden) | patch | `1.37.0` → `1.37.1` |

---

### Release Notes

<details>
<summary>dani-garcia/vaultwarden (quay.io/vaultwarden/server)</summary>

### [`v1.37.1`](https://github.com/dani-garcia/vaultwarden/releases/tag/1.37.1)

[Compare Source](dani-garcia/vaultwarden@1.37.0...1.37.1)

#### Note

This patch release resolves the issues with invites.
If you have applied any workaround to fix this locally, please revert those fixes to prevent possible other issues.

I'm sorry that it took some time to check and validate this fix.

Also, this release fixes an issue ([#&#8203;7475](dani-garcia/vaultwarden#7475)) with all the Alpine based images which are build using <https://github.com/BlackDex/rust-musl/>.
An issue with the build image OpenSSL compilation is resolved and those are used to build the new `alpine` tagged containers.

#### What's Changed

- Always send initOrganization and orgUserHasExistingUser in invite URL by [@&#8203;vikfox](https://github.com/vikfox) in [#&#8203;7482](dani-garcia/vaultwarden#7482)
- Indirectly resolved [#&#8203;7475](dani-garcia/vaultwarden#7475) by using newer rust-musl build images which had a compilation issue with OpenSSL.

#### New Contributors

- [@&#8203;vikfox](https://github.com/vikfox) made their first contribution in [#&#8203;7482](dani-garcia/vaultwarden#7482)

**Full Changelog**: <dani-garcia/vaultwarden@1.37.0...1.37.1>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI4MS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Organization invite links cannot be accepted in 1.37.0: web-vault requires initOrganization, send_invite never sends it