Signup Domain Whitelist doesn't work #1737

New Issue

OVERLORD · 2025-10-09T17:27:49+03:00

OVERLORD commented

2025-10-09 17:27:49 +03:00

Originally created by @AKDingfeld on GitHub.

Subject of the issue

I can register accounts from domains that are not set on my whitelist in docker-compose file or admin-center.

Your environment

Bitwarden_rs version: Version: 1.14.1-ccf6ee79
Install method: Docker-Compose
Clients used: Win 10, Firefox, Edge
Reverse proxy and version:
Version of mysql/postgresql:
Other relevant information:

Steps to reproduce

I added - SIGNUPS_DOMAINS_WHITELIST=mydomain.org as environment variable to my docker-compose file. After restart i tried to register new accounts using the normal register form. I Tried some E-Mails like test@notmydomain.org
I added some domains in the whitelist in the admin-center with the same result.

Expected behaviour

The registration should be blocked due to the whitelist.

Actual behaviour

The registration worked.

Relevant logs

Originally created by @AKDingfeld on GitHub. ### Subject of the issue I can register accounts from domains that are not set on my whitelist in docker-compose file or admin-center. ### Your environment * Bitwarden_rs version: Version: 1.14.1-ccf6ee79 * Install method: Docker-Compose * Clients used: Win 10, Firefox, Edge * Reverse proxy and version: * Version of mysql/postgresql: * Other relevant information: ### Steps to reproduce  I added ` - SIGNUPS_DOMAINS_WHITELIST=mydomain.org` as environment variable to my docker-compose file. After restart i tried to register new accounts using the normal register form. I Tried some E-Mails like test@notmydomain.org I added some domains in the whitelist in the admin-center with the same result. ### Expected behaviour The registration should be blocked due to the whitelist. ### Actual behaviour The registration worked. ### Relevant logs

OVERLORD closed this issue

2025-10-09 17:27:50 +03:00

OVERLORD commented

2025-10-09 17:27:52 +03:00

@jjlin commented on GitHub:

Most likely you also need to set SIGNUPS_ALLOWED=false, as mentioned in https://github.com/dani-garcia/bitwarden_rs/wiki/Disable-registration-of-new-users.

#957 should avoid this confusion, though.

@jjlin commented on GitHub: Most likely you also need to set `SIGNUPS_ALLOWED=false`, as mentioned in https://github.com/dani-garcia/bitwarden_rs/wiki/Disable-registration-of-new-users. #957 should avoid this confusion, though.

OVERLORD commented

2025-10-09 17:27:53 +03:00

@dani-garcia commented on GitHub:

Closed due to inactivity.

@dani-garcia commented on GitHub: Closed due to inactivity.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/vaultwarden#1737