mirror of
https://github.com/dani-garcia/vaultwarden.git
synced 2026-02-05 00:29:40 +03:00
Enable support for DUO Universal Login prompt #1907
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @jeroen-ansink on GitHub (Apr 30, 2024).
Subject of the issue
Currently unable to login, because DUO Universal login prompt is not supported.
Deployment environment
Install method: docker image
Clients used: web vault
Reverse proxy and version: caddy 2
Other relevant details:
Steps to reproduce
Try to login with DUO 2FA enabled.
Expected behaviour
Able to login using DUO
Actual behaviour
Unable to login using DUO
Troubleshooting data
@BlackDex commented on GitHub (Apr 30, 2024):
We need to make some big changes in the code for this.
It will probably take some time.
@jeroen-ansink commented on GitHub (Apr 30, 2024):
Ok, is there maybe a way to disable DUO in the backend without being able to login to the frontend and without having a recovery code?
@BlackDex commented on GitHub (Apr 30, 2024):
You can remove all MFA/2FA from your account via the
/admininterface@ajb3932 commented on GitHub (May 3, 2024):
I'm also having this issue too. No pressure to fix asap from me, just wanted to raise awareness.
@BlackDex commented on GitHub (May 4, 2024):
There seems to be a bug in the latest web-vault btw https://github.com/bitwarden/clients/issues/8554
Not sure if that is also the case in the web-vault we currently bundle, but i do not think so.
@GeorgeCastanza commented on GitHub (May 16, 2024):
Me too. As a new user, it wont allow me to use the old (expired, but still working until Sep-24 for some) prompt.
@0x0fbc commented on GitHub (May 17, 2024):
I saw the 'help wanted'. Is there any specific assistance you're looking for? If there isn't anyone actively working on this, I can take a shot at it.
@BlackDex commented on GitHub (May 17, 2024):
@0x0fbc, i only looked at the available code of the universal duo implementation provided by Duo in the python and php language to have a baseline. But not yet started coding it.
So, if you want to take a crack at it, feel free to do so 😄.
Everytime I want to start on it i need to do other stuff instead or I am hindered to use a laptop unfortunately.
If you need some help you can find me on our Vaultwarden Matrix channel.
@yurividal commented on GitHub (May 23, 2024):
This is odd. i have DUO enabled in my account, and I can login just fine with it.
I am running latest vaultwarden, and have had DUO activated for more than 1 year.
@ajb3932 commented on GitHub (May 23, 2024):
Effective March 30, 2024 Duo no longer supports the traditional Duo Prompt for most applications.
I think it only affects users trying to activate Duo since March 30th.
@Simon-CR commented on GitHub (May 24, 2024):
that would most likely explain this: Can't fetch Duo Keys error when trying to log into the web vault. Since I had this enable on the vault itself, I had to "remove all 2FA" from the user...
@BlackDex commented on GitHub (Jul 31, 2024):
Fixed via #4637