mirror of
https://github.com/pocket-id/pocket-id.git
synced 2025-12-09 22:52:58 +03:00
🐛 Bug Report: Unable to Add Passkey #513
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @dhop90 on GitHub.
Reproduction steps
4a) In ether case I get 1Password encountered a problem - Try Again and "An unknown error occurred" error message is briefly displace at bottom of page
Expected behavior
It should allow me to add a passkey
Actual Behavior
Nothing happens, an error is displayed.
following log message is outputted "[GIN] 2024/08/12 - 22:43:30 | 200 | 57.093234ms | 10.244.7.254 | GET "/api/webauthn/register/start"
@stonith404 commented on GitHub:
That's a strange error because it seems like the value of
BackupEligibleis not the same while logging in as when adding the passkey. Do you sometimes have issues with passkeys of 1Password on other services?@dhop90 commented on GitHub:
I was able to add a passkey after setting PUBLIC_APP_URL to https://pocketid.domain.org. I made a bone-head mistake when I initially setup the app. My template for new apps included a traefik middleware to Authentik, and with that the PUBLIC_APP_URL had to be set to the internel kubernetes service. I add a passkey for the admin account and created a new admin account and also added a passkey for it. But when I try to login I get "something went wrong" for a second on the bottom of the window and these log messages:
[GIN] 2024/08/13 - 16:36:01 | 401 | 182.944µs | 10.244.11.80 | GET "/api/users/me"
[GIN] 2024/08/13 - 16:36:01 | 200 | 5.584298ms | 10.244.11.80 | GET "/api/application-configuration?showAll=false"
[GIN] 2024/08/13 - 16:36:01 | 200 | 5.671076ms | 10.244.11.80 | GET "/api/application-configuration?showAll=false"
SvelteKitError: Not found: /images/sign-in.jpg
at resolve2 (file:///app/frontend/build/server/index.js:5262:18)
at resolve (file:///app/frontend/build/server/index.js:5095:34)
at Object.handle (file:///app/frontend/build/server/chunks/hooks.server-DjAkxlOd.js:35:26)
at respond (file:///app/frontend/build/server/index.js:5093:43) {
status: 404,
text: 'Not Found'
}
[GIN] 2024/08/13 - 16:36:03 | 200 | 95.294404ms | 10.244.19.25 | GET "/api/webauthn/login/start"
[GIN] 2024/08/13 - 16:36:03 | 200 | 95.487773ms | 10.244.19.25 | GET "/api/webauthn/login/start"
[GIN] 2024/08/13 - 16:40:48 | 200 | 35.032227ms | 10.244.19.25 | GET "/api/webauthn/login/start"
[GIN] 2024/08/13 - 16:40:48 | 200 | 35.119671ms | 10.244.19.25 | GET "/api/webauthn/login/start"
2024/08/13 16:40:53 BackupEligible flag inconsistency detected during login validation
[GIN] 2024/08/13 - 16:40:53 | 500 | 14.1947ms | 10.244.19.25 | POST "/api/webauthn/login/finish"
[GIN] 2024/08/13 - 16:40:53 | 500 | 14.281607ms | 10.244.19.25 | POST "/api/webauthn/login/finish"
@stonith404 commented on GitHub:
Can you try to set the
PUBLIC_APP_URLto https://pocketid.domain.org? Webauthn requires anRPIdwhich is derived from thePUBLIC_APP_URLand when theRpIdisn't the same as the domain where you try to add a passkey, it won't work.@dhop90 commented on GitHub:
Not a big user of passkeys yet. What limited use I do have is through my job and I do not have any issues. When I added the passkeys for both accounts, I did not use 1Password. I've tried delete all passkeys as well as blowing away the config and pocket-id.db and starting fresh. If it makes a difference, I'm using chrome on a macbook pro, M1 model running Sonoma 14.6.1
@dhop90 commented on GitHub:
Adding additional configuration information:
Running in kubernetes environment, PUBLIC_APP_URL = http://pocket-id.pocketid.svc.cluster.local which is a kubernetes internal service, I connect to the app at url https://pocketid.domain.org, SSL is provided via duckdns and kubernetes ingress. I'm running the latest docker image stonith404/pocket-id:v0.1.1
@dhop90 commented on GitHub:
getting same error message when I add a different passkey via camera phone and save to 1Password
@dhop90 commented on GitHub:
I'm using icloud keychain
@stonith404 commented on GitHub:
Thanks, I think I have found the issue. Can you try
v0.1.3? The Docker image should be available in around 20 minutes.@stonith404 commented on GitHub:
Okay thanks. Which passkey do you use?
@dhop90 commented on GitHub:
I was able to login, now to configure a client. Thanks for the quick turn-around