[GH-ISSUE #4184] Can't log in on android with FIDO2 WebAuthn enabled #1811

New issue

Closed

opened 2026-03-03 02:12:24 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 02:12:24 +03:00

Owner

Originally created by @jonas-w on GitHub (Dec 20, 2023).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/4184

Subject of the issue

Logging in on Android fails with a stuck screen on "Validating" and the server logs say:
"2FA token not provided"

Deployment environment

vaultwarden version: 1.30.1

Install method: Docker image
Clients used: Android 2023.12.0 (both F-Droid and Google Play Store)
Reverse proxy and version: nginx 1.22.1
MySQL/MariaDB or PostgreSQL version: PostgreSQL 16
Other relevant details:

Steps to reproduce

Expected behaviour

Select self-hosted
Enter Vaultwarden URL
Enter E-Mail Address
Enter password
Follow FIDO2 WebAuthn instructions
login

Actual behaviour

[...]
5. See: "Validating" and spinner circle, and in the background the FIDO2 WebAuthn instructions are visible but it's loading infinitely.
6. no login

Troubleshooting data

This is the complete log data from starting the Android app until the "Validating" spinner logo.

vaultwarden  | [2023-12-20 00:57:57.826][request][INFO] GET /api/config/
vaultwarden  | [2023-12-20 00:57:57.826][response][INFO] (config) GET /api/config => 200 OK
vaultwarden  | [2023-12-20 00:57:59.055][request][INFO] GET /api/devices/knowndevice
vaultwarden  | [2023-12-20 00:57:59.058][response][INFO] (get_known_device) GET /api/devices/knowndevice => 200 OK
vaultwarden  | [2023-12-20 00:58:10.488][request][INFO] POST /identity/accounts/prelogin
vaultwarden  | [2023-12-20 00:58:10.489][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK
vaultwarden  | [2023-12-20 00:58:13.108][request][INFO] POST /identity/connect/token
vaultwarden  | [2023-12-20 00:58:13.162][error][ERROR] 2FA token not provided
vaultwarden  | [2023-12-20 00:58:13.163][response][INFO] (login) POST /identity/connect/token => 400 Bad Request

Maybe relevant: I've tried logging in via the Bitwarden Firefox extension and that worked.

Originally created by @jonas-w on GitHub (Dec 20, 2023). Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/4184  ### Subject of the issue Logging in on Android fails with a stuck screen on "Validating" and the server logs say: "2FA token not provided" ### Deployment environment     * vaultwarden version: 1.30.1  * Install method: Docker image * Clients used: Android 2023.12.0 (both F-Droid and Google Play Store)  * Reverse proxy and version: nginx 1.22.1  * MySQL/MariaDB or PostgreSQL version: PostgreSQL 16  * Other relevant details: ### Steps to reproduce  ### Expected behaviour  1. Select self-hosted 2. Enter Vaultwarden URL 3. Enter E-Mail Address 4. Enter password 5. Follow FIDO2 WebAuthn instructions 6. login ### Actual behaviour  [...] 5. See: "Validating" and spinner circle, and in the background the FIDO2 WebAuthn instructions are visible but it's loading infinitely. 6. no login ### Troubleshooting data  This is the complete log data from starting the Android app until the "Validating" spinner logo. ```log vaultwarden | [2023-12-20 00:57:57.826][request][INFO] GET /api/config/ vaultwarden | [2023-12-20 00:57:57.826][response][INFO] (config) GET /api/config => 200 OK vaultwarden | [2023-12-20 00:57:59.055][request][INFO] GET /api/devices/knowndevice vaultwarden | [2023-12-20 00:57:59.058][response][INFO] (get_known_device) GET /api/devices/knowndevice => 200 OK vaultwarden | [2023-12-20 00:58:10.488][request][INFO] POST /identity/accounts/prelogin vaultwarden | [2023-12-20 00:58:10.489][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK vaultwarden | [2023-12-20 00:58:13.108][request][INFO] POST /identity/connect/token vaultwarden | [2023-12-20 00:58:13.162][error][ERROR] 2FA token not provided vaultwarden | [2023-12-20 00:58:13.163][response][INFO] (login) POST /identity/connect/token => 400 Bad Request ``` Maybe relevant: I've tried logging in via the Bitwarden Firefox extension and that worked.