[GH-ISSUE #317] Support running behind proxy with HTTP Basic Auth #170

New issue

Closed

opened 2026-03-03 01:26:17 +03:00 by kerem · 2 comments

kerem commented

2026-03-03 01:26:17 +03:00

Owner

Originally created by @khimaros on GitHub (Dec 30, 2018).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/317

It would be great to allow delegating of credentials from HTTP Basic Auth to Bitwarden. If that is not possible, at least it would be helpful to preserve the credentials. Currently, the Basic Auth credentials are wiped when logging in via the web auth.

Originally created by @khimaros on GitHub (Dec 30, 2018). Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/317 It would be great to allow delegating of credentials from HTTP Basic Auth to Bitwarden. If that is not possible, at least it would be helpful to preserve the credentials. Currently, the Basic Auth credentials are wiped when logging in via the web auth.

kerem closed this issue

2026-03-03 01:26:17 +03:00

kerem commented

2026-03-03 01:26:18 +03:00

Author

Owner

@mprasil commented on GitHub (Dec 30, 2018):

I'm not sure if that's really possible. The API is using hashed version of your master password to log you in.

@mprasil commented on GitHub (Dec 30, 2018): I'm not sure if that's really possible. The API is using hashed version of your master password to log you in.

kerem commented

2026-03-03 01:26:18 +03:00

Author

Owner

@dani-garcia commented on GitHub (Dec 30, 2018):

I'm not sure we can do this without modifying the web vault. And we try not to do that as much as possible.

I don't think I understand the benefit of it either, if you are trying to put bitwarden_rs under some kind of third party authentication layer, that would break all the clients, and at best we could only fix the web vault. At the same time, it wouldn't provide any more security, as there is not much you can do in bitwarden_rs without an account in the first place.

@dani-garcia commented on GitHub (Dec 30, 2018): I'm not sure we can do this without modifying the web vault. And we try not to do that as much as possible. I don't think I understand the benefit of it either, if you are trying to put bitwarden_rs under some kind of third party authentication layer, that would break all the clients, and at best we could only fix the web vault. At the same time, it wouldn't provide any more security, as there is not much you can do in bitwarden_rs without an account in the first place.

kerem referenced this issue

2026-03-03 02:20:12 +03:00

[PR #170] [MERGED] Fix editing users in Organization #2649