[GH-ISSUE #1958] User is shown as "invited" even after creating an account and cannot be added to organization #1114

New issue

Closed

opened 2026-03-03 02:06:23 +03:00 by kerem · 1 comment

kerem commented

2026-03-03 02:06:23 +03:00

Owner

Originally created by @tstoik on GitHub (Sep 4, 2021).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/1958

Subject of the issue

This has happened twice with users who previously had accounts but were removed when access needs changed. When they were removed, I removed them from the organization as well as deleted their accounts from the Vaultwarden Admin portal.

Eventually, they needed access again (this was not anticipated or I would not have deleted their accounts in the past). I reinvited them and they were able to create a new account, but now they permanently appear as "Invited" and I can't add them to the organization. The only solution we've found is to invite them with a different email address, which is not ideal. Is there a way to manually add them to the organization through another process?

Deployment environment

Your environment (Generated via diagnostics page)

Vaultwarden version: v1.22.2
Web-vault version: v2.21.1
Running within Docker: true
Environment settings overridden: false
Uses a reverse proxy: true
IP Header check: true (X-Real-IP)
Internet access: true
Internet access via a proxy: false
DNS Check: true
Time Check: true
Domain Configuration Check: true
HTTPS Check: true
Database type: SQLite
Database version: 3.35.4
Clients used:
Reverse proxy and version:
Other relevant information:

Config (Generated via diagnostics page)

Show Running Config

Environment settings which are overridden:

{
  "_duo_akey": null,
  "_enable_duo": false,
  "_enable_email_2fa": false,
  "_enable_smtp": true,
  "_enable_yubico": true,
  "_ip_header_enabled": true,
  "admin_token": "***",
  "allowed_iframe_ancestors": "",
  "attachments_folder": "data/attachments",
  "authenticator_disable_time_drift": false,
  "data_folder": "data",
  "database_max_conns": 10,
  "database_url": "****/**.*******",
  "db_connection_retries": 15,
  "disable_2fa_remember": false,
  "disable_admin_token": false,
  "disable_icon_download": false,
  "domain": "*****://******.*****.***",
  "domain_origin": "*****://******.*****.***",
  "domain_path": "",
  "domain_set": true,
  "duo_host": null,
  "duo_ikey": null,
  "duo_skey": null,
  "email_attempts_limit": 3,
  "email_expiration_time": 600,
  "email_token_size": 6,
  "enable_db_wal": true,
  "extended_logging": true,
  "helo_name": null,
  "hibp_api_key": null,
  "icon_blacklist_non_global_ips": true,
  "icon_blacklist_regex": null,
  "icon_cache_folder": "data/icon_cache",
  "icon_cache_negttl": 259200,
  "icon_cache_ttl": 2592000,
  "icon_download_timeout": 10,
  "invitation_org_name": "Bitwarden_RS",
  "invitations_allowed": true,
  "ip_header": "X-Real-IP",
  "job_poll_interval_ms": 30000,
  "log_file": null,
  "log_level": "Info",
  "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f",
  "org_attachment_limit": null,
  "org_creation_users": "",
  "password_iterations": 100000,
  "reload_templates": false,
  "require_device_email": false,
  "rsa_key_filename": "data/rsa_key",
  "send_purge_schedule": "0 5 * * * *",
  "sends_allowed": true,
  "sends_folder": "data/sends",
  "show_password_hint": true,
  "signups_allowed": false,
  "signups_domains_whitelist": "",
  "signups_verify": false,
  "signups_verify_resend_limit": 6,
  "signups_verify_resend_time": 3600,
  "smtp_accept_invalid_certs": false,
  "smtp_accept_invalid_hostnames": false,
  "smtp_auth_mechanism": null,
  "smtp_debug": true,
  "smtp_explicit_tls": false,
  "smtp_from": "******@*****.***",
  "smtp_from_name": "Las Vegas DSA",
  "smtp_host": "****.****.***",
  "smtp_password": "***",
  "smtp_port": 587,
  "smtp_ssl": true,
  "smtp_timeout": 15,
  "smtp_username": "******@*****.***",
  "templates_folder": "data/templates",
  "trash_auto_delete_days": null,
  "trash_purge_schedule": "0 5 0 * * *",
  "use_syslog": false,
  "user_attachment_limit": null,
  "web_vault_enabled": true,
  "web_vault_folder": "web-vault/",
  "websocket_address": "0.0.0.0",
  "websocket_enabled": false,
  "websocket_port": 3012,
  "yubico_client_id": null,
  "yubico_secret_key": null,
  "yubico_server": null
}

Steps to reproduce

Invite a new user to an organization
User creates account
Remove user from organization
Delete user from Vaultwarden admin portal
Reinvite the same user to the same organiztion
User creates new account

Expected behaviour

I expected that deleted users would be erased from the instance entirely and could then be re-added as a brand new user as normal.

Actual behaviour

The user is stuck in a limbo state where they have an account on the server but the account cannot be connected to the organization and appears to still be invited even though they accepted the invitation

Troubleshooting data

Originally created by @tstoik on GitHub (Sep 4, 2021). Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/1958   ### Subject of the issue This has happened twice with users who previously had accounts but were removed when access needs changed. When they were removed, I removed them from the organization as well as deleted their accounts from the Vaultwarden Admin portal. Eventually, they needed access again (this was not anticipated or I would not have deleted their accounts in the past). I reinvited them and they were able to create a new account, but now they permanently appear as "Invited" and I can't add them to the organization. The only solution we've found is to invite them with a different email address, which is not ideal. Is there a way to manually add them to the organization through another process? ### Deployment environment ### Your environment (Generated via diagnostics page) * Vaultwarden version: v1.22.2 * Web-vault version: v2.21.1 * Running within Docker: true * Environment settings overridden: false * Uses a reverse proxy: true * IP Header check: true (X-Real-IP) * Internet access: true * Internet access via a proxy: false * DNS Check: true * Time Check: true * Domain Configuration Check: true * HTTPS Check: true * Database type: SQLite * Database version: 3.35.4 * Clients used: * Reverse proxy and version: * Other relevant information: ### Config (Generated via diagnostics page) <details><summary>Show Running Config</summary> **Environment settings which are overridden:** ```json { "_duo_akey": null, "_enable_duo": false, "_enable_email_2fa": false, "_enable_smtp": true, "_enable_yubico": true, "_ip_header_enabled": true, "admin_token": "***", "allowed_iframe_ancestors": "", "attachments_folder": "data/attachments", "authenticator_disable_time_drift": false, "data_folder": "data", "database_max_conns": 10, "database_url": "****/**.*******", "db_connection_retries": 15, "disable_2fa_remember": false, "disable_admin_token": false, "disable_icon_download": false, "domain": "*****://******.*****.***", "domain_origin": "*****://******.*****.***", "domain_path": "", "domain_set": true, "duo_host": null, "duo_ikey": null, "duo_skey": null, "email_attempts_limit": 3, "email_expiration_time": 600, "email_token_size": 6, "enable_db_wal": true, "extended_logging": true, "helo_name": null, "hibp_api_key": null, "icon_blacklist_non_global_ips": true, "icon_blacklist_regex": null, "icon_cache_folder": "data/icon_cache", "icon_cache_negttl": 259200, "icon_cache_ttl": 2592000, "icon_download_timeout": 10, "invitation_org_name": "Bitwarden_RS", "invitations_allowed": true, "ip_header": "X-Real-IP", "job_poll_interval_ms": 30000, "log_file": null, "log_level": "Info", "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f", "org_attachment_limit": null, "org_creation_users": "", "password_iterations": 100000, "reload_templates": false, "require_device_email": false, "rsa_key_filename": "data/rsa_key", "send_purge_schedule": "0 5 * * * *", "sends_allowed": true, "sends_folder": "data/sends", "show_password_hint": true, "signups_allowed": false, "signups_domains_whitelist": "", "signups_verify": false, "signups_verify_resend_limit": 6, "signups_verify_resend_time": 3600, "smtp_accept_invalid_certs": false, "smtp_accept_invalid_hostnames": false, "smtp_auth_mechanism": null, "smtp_debug": true, "smtp_explicit_tls": false, "smtp_from": "******@*****.***", "smtp_from_name": "Las Vegas DSA", "smtp_host": "****.****.***", "smtp_password": "***", "smtp_port": 587, "smtp_ssl": true, "smtp_timeout": 15, "smtp_username": "******@*****.***", "templates_folder": "data/templates", "trash_auto_delete_days": null, "trash_purge_schedule": "0 5 0 * * *", "use_syslog": false, "user_attachment_limit": null, "web_vault_enabled": true, "web_vault_folder": "web-vault/", "websocket_address": "0.0.0.0", "websocket_enabled": false, "websocket_port": 3012, "yubico_client_id": null, "yubico_secret_key": null, "yubico_server": null } ``` </details> ### Steps to reproduce 1. Invite a new user to an organization 2. User creates account 3. Remove user from organization 4. Delete user from Vaultwarden admin portal 5. Reinvite the same user to the same organiztion 6. User creates new account ### Expected behaviour I expected that deleted users would be erased from the instance entirely and could then be re-added as a brand new user as normal. ### Actual behaviour The user is stuck in a limbo state where they have an account on the server but the account cannot be connected to the organization and appears to still be invited even though they accepted the invitation ### Troubleshooting data

kerem closed this issue

2026-03-03 02:06:23 +03:00

kerem commented

2026-03-03 02:06:24 +03:00

Author

Owner

@BlackDex commented on GitHub (Sep 4, 2021):

I can not reproduce this issue. It works fine for me.
This also isn't possible since when deleting the user via the admin interface everything regarding that user is removed.
It could be that that user used the wrong invite maybe.

I have tried it twice, with two different e-mails, and two different organizations, no way to reproduce it.

Please try again, and if it really doesn't work re-open this issue.

@BlackDex commented on GitHub (Sep 4, 2021): I can not reproduce this issue. It works fine for me. This also isn't possible since when deleting the user via the admin interface everything regarding that user is removed. It could be that that user used the wrong invite maybe. I have tried it twice, with two different e-mails, and two different organizations, no way to reproduce it. Please try again, and if it really doesn't work re-open this issue.