[GH-ISSUE #953] Signup Domain Whitelist doesn't work #677

New issue

Closed

opened 2026-03-03 02:02:05 +03:00 by kerem · 2 comments

kerem commented

2026-03-03 02:02:05 +03:00

Owner

Originally created by @AKDingfeld on GitHub (Apr 7, 2020).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/953

Subject of the issue

I can register accounts from domains that are not set on my whitelist in docker-compose file or admin-center.

Your environment

Bitwarden_rs version: Version: 1.14.1-ccf6ee79
Install method: Docker-Compose
Clients used: Win 10, Firefox, Edge
Reverse proxy and version:
Version of mysql/postgresql:
Other relevant information:

Steps to reproduce

I added - SIGNUPS_DOMAINS_WHITELIST=mydomain.org as environment variable to my docker-compose file. After restart i tried to register new accounts using the normal register form. I Tried some E-Mails like test@notmydomain.org
I added some domains in the whitelist in the admin-center with the same result.

Expected behaviour

The registration should be blocked due to the whitelist.

Actual behaviour

The registration worked.

Relevant logs

Originally created by @AKDingfeld on GitHub (Apr 7, 2020). Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/953 ### Subject of the issue I can register accounts from domains that are not set on my whitelist in docker-compose file or admin-center. ### Your environment * Bitwarden_rs version: Version: 1.14.1-ccf6ee79 * Install method: Docker-Compose * Clients used: Win 10, Firefox, Edge * Reverse proxy and version: * Version of mysql/postgresql: * Other relevant information: ### Steps to reproduce  I added ` - SIGNUPS_DOMAINS_WHITELIST=mydomain.org` as environment variable to my docker-compose file. After restart i tried to register new accounts using the normal register form. I Tried some E-Mails like test@notmydomain.org I added some domains in the whitelist in the admin-center with the same result. ### Expected behaviour The registration should be blocked due to the whitelist. ### Actual behaviour The registration worked. ### Relevant logs

kerem closed this issue

2026-03-03 02:02:06 +03:00

kerem commented

2026-03-03 02:02:07 +03:00

Author

Owner

@jjlin commented on GitHub (Apr 10, 2020):

Most likely you also need to set SIGNUPS_ALLOWED=false, as mentioned in https://github.com/dani-garcia/bitwarden_rs/wiki/Disable-registration-of-new-users.

#957 should avoid this confusion, though.

@jjlin commented on GitHub (Apr 10, 2020): Most likely you also need to set `SIGNUPS_ALLOWED=false`, as mentioned in https://github.com/dani-garcia/bitwarden_rs/wiki/Disable-registration-of-new-users. #957 should avoid this confusion, though.

kerem commented

2026-03-03 02:02:07 +03:00

Author

Owner

@dani-garcia commented on GitHub (May 13, 2020):

Closed due to inactivity.

@dani-garcia commented on GitHub (May 13, 2020): Closed due to inactivity.

kerem referenced this issue

2026-03-03 08:53:02 +03:00

[PR #677] [CLOSED] Initial ldap support (Status : In Dev) #2779