mirror of
https://github.com/pocket-id/pocket-id.git
synced 2026-02-05 00:39:38 +03:00
🐛 Bug Report: Unable to Add Passkey #6
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @dhop90 on GitHub (Aug 13, 2024).
Reproduction steps
4a) In ether case I get 1Password encountered a problem - Try Again and "An unknown error occurred" error message is briefly displace at bottom of page
Expected behavior
It should allow me to add a passkey
Actual Behavior
Nothing happens, an error is displayed.
following log message is outputted "[GIN] 2024/08/12 - 22:43:30 | 200 | 57.093234ms | 10.244.7.254 | GET "/api/webauthn/register/start"
@dhop90 commented on GitHub (Aug 13, 2024):
Adding additional configuration information:
Running in kubernetes environment, PUBLIC_APP_URL = http://pocket-id.pocketid.svc.cluster.local which is a kubernetes internal service, I connect to the app at url https://pocketid.domain.org, SSL is provided via duckdns and kubernetes ingress. I'm running the latest docker image stonith404/pocket-id:v0.1.1
@stonith404 commented on GitHub (Aug 13, 2024):
Can you try to set the
PUBLIC_APP_URLto https://pocketid.domain.org? Webauthn requires anRPIdwhich is derived from thePUBLIC_APP_URLand when theRpIdisn't the same as the domain where you try to add a passkey, it won't work.@dhop90 commented on GitHub (Aug 13, 2024):
I was able to add a passkey after setting PUBLIC_APP_URL to https://pocketid.domain.org. I made a bone-head mistake when I initially setup the app. My template for new apps included a traefik middleware to Authentik, and with that the PUBLIC_APP_URL had to be set to the internel kubernetes service. I add a passkey for the admin account and created a new admin account and also added a passkey for it. But when I try to login I get "something went wrong" for a second on the bottom of the window and these log messages:
[GIN] 2024/08/13 - 16:36:01 | 401 | 182.944µs | 10.244.11.80 | GET "/api/users/me"
[GIN] 2024/08/13 - 16:36:01 | 200 | 5.584298ms | 10.244.11.80 | GET "/api/application-configuration?showAll=false"
[GIN] 2024/08/13 - 16:36:01 | 200 | 5.671076ms | 10.244.11.80 | GET "/api/application-configuration?showAll=false"
SvelteKitError: Not found: /images/sign-in.jpg
at resolve2 (file:///app/frontend/build/server/index.js:5262:18)
at resolve (file:///app/frontend/build/server/index.js:5095:34)
at Object.handle (file:///app/frontend/build/server/chunks/hooks.server-DjAkxlOd.js:35:26)
at respond (file:///app/frontend/build/server/index.js:5093:43) {
status: 404,
text: 'Not Found'
}
[GIN] 2024/08/13 - 16:36:03 | 200 | 95.294404ms | 10.244.19.25 | GET "/api/webauthn/login/start"
[GIN] 2024/08/13 - 16:36:03 | 200 | 95.487773ms | 10.244.19.25 | GET "/api/webauthn/login/start"
[GIN] 2024/08/13 - 16:40:48 | 200 | 35.032227ms | 10.244.19.25 | GET "/api/webauthn/login/start"
[GIN] 2024/08/13 - 16:40:48 | 200 | 35.119671ms | 10.244.19.25 | GET "/api/webauthn/login/start"
2024/08/13 16:40:53 BackupEligible flag inconsistency detected during login validation
[GIN] 2024/08/13 - 16:40:53 | 500 | 14.1947ms | 10.244.19.25 | POST "/api/webauthn/login/finish"
[GIN] 2024/08/13 - 16:40:53 | 500 | 14.281607ms | 10.244.19.25 | POST "/api/webauthn/login/finish"
@stonith404 commented on GitHub (Aug 13, 2024):
That's a strange error because it seems like the value of
BackupEligibleis not the same while logging in as when adding the passkey. Do you sometimes have issues with passkeys of 1Password on other services?@dhop90 commented on GitHub (Aug 13, 2024):
Not a big user of passkeys yet. What limited use I do have is through my job and I do not have any issues. When I added the passkeys for both accounts, I did not use 1Password. I've tried delete all passkeys as well as blowing away the config and pocket-id.db and starting fresh. If it makes a difference, I'm using chrome on a macbook pro, M1 model running Sonoma 14.6.1
@stonith404 commented on GitHub (Aug 13, 2024):
Okay thanks. Which passkey do you use?
@dhop90 commented on GitHub (Aug 13, 2024):
I'm using icloud keychain
@dhop90 commented on GitHub (Aug 13, 2024):
getting same error message when I add a different passkey via camera phone and save to 1Password
@stonith404 commented on GitHub (Aug 14, 2024):
Thanks, I think I have found the issue. Can you try
v0.1.3? The Docker image should be available in around 20 minutes.@dhop90 commented on GitHub (Aug 14, 2024):
I was able to login, now to configure a client. Thanks for the quick turn-around