[GH-ISSUE #1295] Signup Error: user not allowed or does already exist #899

Closed
opened 2026-03-03 02:04:30 +03:00 by kerem · 5 comments
Owner

Originally created by @Biepa on GitHub (Jan 6, 2021).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/1295

Subject of the issue

I can't register a new user. I first invited him over the admin panel, but a "user not allowed or does already exist" message pops up. I then removed him from the admin panel and allowed signups in my compose file. The same error appears

Your environment

  • Bitwarden_rs version: 1.18.0
  • Install method: docker bitwardenrs/server

Steps to reproduce

Invite User via admin panel. Try to register with the registered email adress.

Expected behaviour

Bitwardenrs accepting the registration

Relevant logs

[respnse][INFO] POST /api/accounts/register (register) => 400 Bad Request [bitwarden_rs::api::core::accounts][ERROR] Registration not allowed or user already exists

I even tried it with a mail address I made up, so it was definitely not taken in my install.

Originally created by @Biepa on GitHub (Jan 6, 2021). Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/1295 ### Subject of the issue I can't register a new user. I first invited him over the admin panel, but a "user not allowed or does already exist" message pops up. I then removed him from the admin panel and allowed signups in my compose file. The same error appears ### Your environment * Bitwarden_rs version: 1.18.0 * Install method: docker bitwardenrs/server ### Steps to reproduce Invite User via admin panel. Try to register with the registered email adress. ### Expected behaviour Bitwardenrs accepting the registration ### Relevant logs [respnse][INFO] POST /api/accounts/register (register) => 400 Bad Request [bitwarden_rs::api::core::accounts][ERROR] Registration not allowed or user already exists I even tried it with a mail address I made up, so it was definitely not taken in my install.
kerem closed this issue 2026-03-03 02:04:31 +03:00
Author
Owner

@Biepa commented on GitHub (Jan 14, 2021):

Is nobody else having this issue?
Could someone test this on his/her instance?

<!-- gh-comment-id:760382234 --> @Biepa commented on GitHub (Jan 14, 2021): Is nobody else having this issue? Could someone test this on his/her instance?
Author
Owner

@WalBeh commented on GitHub (Jan 20, 2021):

just asking ... did you set SIGNUPS_ALLOWED: "true"? Which can also be changed dynamically in the admin.

<!-- gh-comment-id:763484973 --> @WalBeh commented on GitHub (Jan 20, 2021): just asking ... did you set `SIGNUPS_ALLOWED: "true"`? Which can also be changed _dynamically_ in the admin.
Author
Owner

@Biepa commented on GitHub (Jan 20, 2021):

@WalBeh It wasn't. But I invited a user via the admin panel and then he tried to sign up, via the login page.
And I think, that was the error. It just works with the link in the invitation mail, not generally over the login. 🤦

So thanks for pushing me in the right direction.

EDIT: SOLUTION: (if someone is making the same mistake)
Sign up via the Link in the mail. Not over the login page. Because than of course, the user already exists....

<!-- gh-comment-id:763495292 --> @Biepa commented on GitHub (Jan 20, 2021): @WalBeh It wasn't. But I invited a user via the admin panel and then he tried to sign up, via the login page. And I think, that was the error. It just works with the link in the invitation mail, not generally over the login. :facepalm: So thanks for pushing me in the right direction. EDIT: SOLUTION: (if someone is making the same mistake) Sign up via the Link in the mail. Not over the login page. Because than of course, the user already exists....
Author
Owner

@BlackDex commented on GitHub (Jan 20, 2021):

Indeed. This is also to prevent hijacking someones account if they do not have the correct link which contains validation if the user is really the intended user. Same goes for adding users to organizations.

<!-- gh-comment-id:763609824 --> @BlackDex commented on GitHub (Jan 20, 2021): Indeed. This is also to prevent hijacking someones account if they do not have the correct link which contains validation if the user is really the intended user. Same goes for adding users to organizations.
Author
Owner

@Biepa commented on GitHub (Jan 20, 2021):

Thanks for the clarification.

<!-- gh-comment-id:763626191 --> @Biepa commented on GitHub (Jan 20, 2021): Thanks for the clarification.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/vaultwarden#899
No description provided.