Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can register a passkey with bitwarden but login popup always goes to windows security #9114

Open
1 task
ghstahl opened this issue May 10, 2024 · 3 comments
Open
1 task
Labels
browser Browser Extension bug

Comments

@ghstahl
Copy link

ghstahl commented May 10, 2024

Steps To Reproduce

I can do a registration ceremony for passkeys and bitwarden pops up.
during login its always windows security that pops up.
I have noticed that if I constantly

Recording.2024-05-09.172408.mp4

do a form resubmit bitwarden will eventually popup to do the passkey login.

Expected Result

bitwarden should alway popup first when doing the passkey login.

https://github.com/fluffy-bunny/fluffycore-rage-identity

Is there any logging I can turn on for this extension to capture why bitwarden doesn't popup all the time during a login

Actual Result

Windows security seems to always pop up during logins.

Screenshots or Videos

No response

Additional Context

Recording.2024-05-09.172408.mp4

Operating System

Windows

Operating System Version

11

Web Browser

Microsoft Edge

Browser Version

Version 124.0.2478.80 (Official build) (64-bit)

Build Version

2024.3.1

Issue Tracking Info

  • I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.
@ghstahl ghstahl added browser Browser Extension bug labels May 10, 2024
@sammbw
Copy link

sammbw commented May 10, 2024

Hi there,

I am unable to reproduce this issue, it has been escalated for further investigation. If you have more information that can help us, please add it below.

Thanks!

@ghstahl
Copy link
Author

ghstahl commented May 10, 2024

you can run the app locally using.

  1. install vscode
  2. install golang
  3. configure the app once you have NGROK running.

I have found bitwarden doesn't come up at all if the RPID isn't https, so NGROK is what I use .

If I unsintall bitwarden or cancel out of it offering to store and login using passkeys, it fails over to windows security.
windows security works every time.

Bitwarden works when it comes up.
Logs on why it bets automatically bypassed about 90% of the time would be helful.

If you have a developer on hand I can get on a call to get the app running. Its all inmemory so no database.

@ghstahl
Copy link
Author

ghstahl commented May 18, 2024

Clearing out Excluded Domains solved my problem.
here is the community issue.

However, as I stated in the community feedback, I has a single domain in my Excluded Domains. That domain had nothing to do with the ngrok one, or my local traefik one.

I did do a bunch of tests where I did "use your device or hardware key"
That is how my one and only exclude domain got there. It was to hanko.io.

After that bitwarden got itself into some state.

Summary
Deleting that hanko.io domain and saving it made my ngrok and local traefik stuff work.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
browser Browser Extension bug
Projects
None yet
Development

No branches or pull requests

2 participants