Cannot accept invitation to organisation in 1.33.0 #2152

Closed
opened 2026-02-05 03:28:12 +03:00 by OVERLORD · 4 comments
Owner

Originally created by @pyRammos on GitHub (Jan 26, 2025).

Vaultwarden Support String

When I invite a new user (new or existing) to join an organisation, the email link opens the login page. Upon successful completion of the login, I am again redirected to log in. The second time it is successful but the user has not joined the organisation. I have tried different email addresses and passwords, as well as starting with a new user (create user via invite) or create a user before the invite. The users personal vault works well.
The same thing worked 24hrs ago so I am thinking it may be a change since updating to 1.33.0, which happened last night for me.

Your environment (Generated via diagnostics page)

  • Vaultwarden version: v1.33.0
  • Web-vault version: v2025.1.1
  • OS/Arch: linux/x86_64
  • Running within a container: true (Base: Debian)
  • Database type: SQLite
  • Database version: 3.46.0
  • Environment settings overridden!: true
  • Uses a reverse proxy: true
  • IP Header check: true (X-Real-IP)
  • Internet access: true
  • Internet access via a proxy: false
  • DNS Check: true
  • Browser/Server Time Check: true
  • Server/NTP Time Check: true
  • Domain Configuration Check: true
  • HTTPS Check: true
  • Websocket Check: true
  • HTTP Response Checks: true

Config & Details (Generated via diagnostics page)

Show Config & Details

Environment settings which are overridden: DOMAIN, ADMIN_TOKEN

Config:

{
  "_duo_akey": null,
  "_enable_duo": true,
  "_enable_email_2fa": false,
  "_enable_smtp": true,
  "_enable_yubico": true,
  "_icon_service_csp": "",
  "_icon_service_url": "",
  "_ip_header_enabled": true,
  "_max_note_size": 10000,
  "_smtp_img_src": "***:",
  "admin_ratelimit_max_burst": 3,
  "admin_ratelimit_seconds": 300,
  "admin_session_lifetime": 20,
  "admin_token": "***",
  "allowed_connect_src": "",
  "allowed_iframe_ancestors": "",
  "attachments_folder": "data/attachments",
  "auth_request_purge_schedule": "30 * * * * *",
  "authenticator_disable_time_drift": false,
  "data_folder": "data",
  "database_conn_init": "",
  "database_max_conns": 10,
  "database_timeout": 30,
  "database_url": "***************",
  "db_connection_retries": 15,
  "disable_2fa_remember": false,
  "disable_admin_token": false,
  "disable_icon_download": false,
  "domain": "*****://************",
  "domain_origin": "*****://************",
  "domain_path": "",
  "domain_set": true,
  "duo_context_purge_schedule": "30 * * * * *",
  "duo_host": null,
  "duo_ikey": null,
  "duo_skey": null,
  "duo_use_iframe": false,
  "email_2fa_auto_fallback": false,
  "email_2fa_enforce_on_verified_invite": false,
  "email_attempts_limit": 3,
  "email_change_allowed": true,
  "email_expiration_time": 600,
  "email_token_size": 6,
  "emergency_access_allowed": true,
  "emergency_notification_reminder_schedule": "0 3 * * * *",
  "emergency_request_timeout_schedule": "0 7 * * * *",
  "enable_db_wal": true,
  "enable_websocket": true,
  "enforce_single_org_with_reset_pw_policy": false,
  "event_cleanup_schedule": "0 10 0 * * *",
  "events_days_retain": null,
  "experimental_client_feature_flags": "fido2-vault-credentials",
  "extended_logging": true,
  "helo_name": null,
  "hibp_api_key": null,
  "http_request_block_non_global_ips": true,
  "http_request_block_regex": null,
  "icon_blacklist_non_global_ips": true,
  "icon_blacklist_regex": null,
  "icon_cache_folder": "data/icon_cache",
  "icon_cache_negttl": 259200,
  "icon_cache_ttl": 2592000,
  "icon_download_timeout": 10,
  "icon_redirect_code": 302,
  "icon_service": "internal",
  "incomplete_2fa_schedule": "30 * * * * *",
  "incomplete_2fa_time_limit": 3,
  "increase_note_size_limit": false,
  "invitation_expiration_hours": 120,
  "invitation_org_name": "Rammos Family Password Vault",
  "invitations_allowed": true,
  "ip_header": "X-Real-IP",
  "job_poll_interval_ms": 30000,
  "log_file": null,
  "log_level": "info",
  "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f",
  "login_ratelimit_max_burst": 10,
  "login_ratelimit_seconds": 60,
  "org_attachment_limit": null,
  "org_creation_users": "",
  "org_events_enabled": false,
  "org_groups_enabled": false,
  "password_hints_allowed": true,
  "password_iterations": 600000,
  "push_enabled": false,
  "push_identity_uri": "https://identity.bitwarden.com",
  "push_installation_id": "***",
  "push_installation_key": "***",
  "push_relay_uri": "https://push.bitwarden.com",
  "reload_templates": false,
  "require_device_email": false,
  "rsa_key_filename": "data/rsa_key",
  "send_purge_schedule": "0 5 * * * *",
  "sendmail_command": null,
  "sends_allowed": true,
  "sends_folder": "data/sends",
  "show_password_hint": false,
  "signups_allowed": true,
  "signups_domains_whitelist": "*********",
  "signups_verify": true,
  "signups_verify_resend_limit": 3,
  "signups_verify_resend_time": 300,
  "smtp_accept_invalid_certs": true,
  "smtp_accept_invalid_hostnames": false,
  "smtp_auth_mechanism": "\"Plain\", \"Login\"",
  "smtp_debug": false,
  "smtp_embed_images": true,
  "smtp_explicit_tls": null,
  "smtp_from": "****************",
  "smtp_from_name": "Rammos Family Password Vault",
  "smtp_host": "**********",
  "smtp_password": "***",
  "smtp_port": 465,
  "smtp_security": "force_tls",
  "smtp_ssl": null,
  "smtp_timeout": 20,
  "smtp_username": "****************",
  "templates_folder": "data/templates",
  "tmp_folder": "data/tmp",
  "trash_auto_delete_days": null,
  "trash_purge_schedule": "0 5 0 * * *",
  "use_sendmail": false,
  "use_syslog": false,
  "user_attachment_limit": null,
  "user_send_limit": null,
  "web_vault_enabled": true,
  "web_vault_folder": "web-vault/",
  "yubico_client_id": null,
  "yubico_secret_key": null,
  "yubico_server": null
}

Vaultwarden Build Version

1.33.0

Deployment method

Official Container Image

Custom deployment method

No response

Reverse Proxy

nginx

Host/Server Operating System

Linux

Operating System Version

Debian (Open Media Vault 7)

Clients

Web Vault

Client Version

No response

Steps To Reproduce

  1. Create new user
  2. Invite them to the organisation
  3. Click in the invite link on the email
  4. Log In

Expected Result

Login is successful and user accepts the invite

Actual Result

Login process is repeated, then no option to accept the invite

Logs

vaultwarden         | [2025-01-26 15:11:11.979][response][INFO] (reinvite_member) POST /api/organizations/<org_id>/users/<member_id>/reinvite => 200 OK
vaultwarden         | [2025-01-26 15:11:16.850][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/policies/token?token=eyJ0eXAiOiJKV1QiLCJhbGci
vaultwarden         | [2025-01-26 15:11:16.850][response][INFO] (list_policies_token) GET /api/organizations/<org_id>/policies/token?<token> => 200 OK
vaultwarden         | [2025-01-26 15:11:18.671][request][INFO] GET /api/devices/knowndevice
vaultwarden         | [2025-01-26 15:11:18.672][response][INFO] (get_known_device) GET /api/devices/knowndevice => 200 OK
vaultwarden         | [2025-01-26 15:11:35.668][request][INFO] POST /identity/accounts/prelogin
vaultwarden         | [2025-01-26 15:11:35.669][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK
vaultwarden         | [2025-01-26 15:11:35.686][request][INFO] POST /identity/connect/token
vaultwarden         | [2025-01-26 15:11:35.847][vaultwarden::api::identity][INFO] User zoe@rammos.me logged in successfully. IP: 10.0.0.224
vaultwarden         | [2025-01-26 15:11:35.847][response][INFO] (login) POST /identity/connect/token => 200 OK
vaultwarden         | [2025-01-26 15:11:35.878][request][INFO] GET /api/config
vaultwarden         | [2025-01-26 15:11:35.878][response][INFO] (config) GET /api/config => 200 OK
vaultwarden         | [2025-01-26 15:11:35.903][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/policies/token?token=eyJ0eXAiOiJKV1QiLCJhbGci
vaultwarden         | [2025-01-26 15:11:35.904][response][INFO] (list_policies_token) GET /api/organizations/<org_id>/policies/token?<token> => 200 OK
vaultwarden         | [2025-01-26 15:11:35.910][request][INFO] GET /notifications/hub?access_token=eyJ0eXAiOiJKV1QiL
vaultwarden         | [2025-01-26 15:11:35.910][vaultwarden::api::notifications][INFO] Accepting Rocket WS connection from 10.0.0.224
vaultwarden         | [2025-01-26 15:11:35.910][response][INFO] (websockets_hub) GET /notifications/hub?<data..> => 200 OK
vaultwarden         | [2025-01-26 15:11:35.910][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/keys
vaultwarden         | [2025-01-26 15:11:35.911][auth][ERROR] Unauthorized Error: The current user isn't confirmed member of the organization
vaultwarden         | [2025-01-26 15:11:35.911][vaultwarden::api::core::organizations::_][WARN] Request guard `OrgMemberHeaders` failed: "The current user isn't confirmed member of the organization".
vaultwarden         | [2025-01-26 15:11:35.911][response][INFO] (get_organization_keys) GET /api/organizations/<org_id>/keys => 401 Unauthorized
vaultwarden         | [2025-01-26 15:11:35.937][vaultwarden::api::notifications][INFO] Closing WS connection from 10.0.0.224
vaultwarden         | [2025-01-26 15:11:36.092][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/policies/token?token=eyJ0eXAiOiJKV1QiLCJhbGci
vaultwarden         | [2025-01-26 15:11:36.092][response][INFO] (list_policies_token) GET /api/organizations/<org_id>/policies/token?<token> => 200 OK
vaultwarden         | [2025-01-26 15:11:42.684][request][INFO] GET /api/devices/knowndevice
vaultwarden         | [2025-01-26 15:11:42.685][response][INFO] (get_known_device) GET /api/devices/knowndevice => 200 OK
vaultwarden         | [2025-01-26 15:11:44.501][request][INFO] POST /identity/accounts/prelogin
vaultwarden         | [2025-01-26 15:11:44.502][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK
vaultwarden         | [2025-01-26 15:11:44.514][request][INFO] POST /identity/connect/token
vaultwarden         | [2025-01-26 15:11:44.655][vaultwarden::api::identity][INFO] User zoe@rammos.me logged in successfully. IP: 10.0.0.224
vaultwarden         | [2025-01-26 15:11:44.655][response][INFO] (login) POST /identity/connect/token => 200 OK
vaultwarden         | [2025-01-26 15:11:44.685][request][INFO] GET /api/config
vaultwarden         | [2025-01-26 15:11:44.685][response][INFO] (config) GET /api/config => 200 OK
vaultwarden         | [2025-01-26 15:11:44.738][request][INFO] POST /identity/connect/token
vaultwarden         | [2025-01-26 15:11:44.740][response][INFO] (login) POST /identity/connect/token => 200 OK
vaultwarden         | [2025-01-26 15:11:44.764][request][INFO] GET /api/sync?excludeDomains=true
vaultwarden         | [2025-01-26 15:11:44.764][request][INFO] GET /notifications/hub?access_token=eyJ0eXAiOiJKV1QiL
vaultwarden         | [2025-01-26 15:11:44.764][vaultwarden::api::notifications][INFO] Accepting Rocket WS connection from 10.0.0.224
vaultwarden         | [2025-01-26 15:11:44.764][response][INFO] (websockets_hub) GET /notifications/hub?<data..> => 200 OK
vaultwarden         | [2025-01-26 15:11:44.766][response][INFO] (sync) GET /api/sync?<data..> => 200 OK

Screenshots or Videos

No response

Additional Context

No response

Originally created by @pyRammos on GitHub (Jan 26, 2025). ### Vaultwarden Support String When I invite a new user (new or existing) to join an organisation, the email link opens the login page. Upon successful completion of the login, I am again redirected to log in. The second time it is successful but the user has not joined the organisation. I have tried different email addresses and passwords, as well as starting with a new user (create user via invite) or create a user before the invite. The users personal vault works well. The same thing worked 24hrs ago so I am thinking it may be a change since updating to 1.33.0, which happened last night for me. ### Your environment (Generated via diagnostics page) * Vaultwarden version: v1.33.0 * Web-vault version: v2025.1.1 * OS/Arch: linux/x86_64 * Running within a container: true (Base: Debian) * Database type: SQLite * Database version: 3.46.0 * Environment settings overridden!: true * Uses a reverse proxy: true * IP Header check: true (X-Real-IP) * Internet access: true * Internet access via a proxy: false * DNS Check: true * Browser/Server Time Check: true * Server/NTP Time Check: true * Domain Configuration Check: true * HTTPS Check: true * Websocket Check: true * HTTP Response Checks: true ### Config & Details (Generated via diagnostics page) <details><summary>Show Config & Details</summary> **Environment settings which are overridden:** DOMAIN, ADMIN_TOKEN **Config:** ```json { "_duo_akey": null, "_enable_duo": true, "_enable_email_2fa": false, "_enable_smtp": true, "_enable_yubico": true, "_icon_service_csp": "", "_icon_service_url": "", "_ip_header_enabled": true, "_max_note_size": 10000, "_smtp_img_src": "***:", "admin_ratelimit_max_burst": 3, "admin_ratelimit_seconds": 300, "admin_session_lifetime": 20, "admin_token": "***", "allowed_connect_src": "", "allowed_iframe_ancestors": "", "attachments_folder": "data/attachments", "auth_request_purge_schedule": "30 * * * * *", "authenticator_disable_time_drift": false, "data_folder": "data", "database_conn_init": "", "database_max_conns": 10, "database_timeout": 30, "database_url": "***************", "db_connection_retries": 15, "disable_2fa_remember": false, "disable_admin_token": false, "disable_icon_download": false, "domain": "*****://************", "domain_origin": "*****://************", "domain_path": "", "domain_set": true, "duo_context_purge_schedule": "30 * * * * *", "duo_host": null, "duo_ikey": null, "duo_skey": null, "duo_use_iframe": false, "email_2fa_auto_fallback": false, "email_2fa_enforce_on_verified_invite": false, "email_attempts_limit": 3, "email_change_allowed": true, "email_expiration_time": 600, "email_token_size": 6, "emergency_access_allowed": true, "emergency_notification_reminder_schedule": "0 3 * * * *", "emergency_request_timeout_schedule": "0 7 * * * *", "enable_db_wal": true, "enable_websocket": true, "enforce_single_org_with_reset_pw_policy": false, "event_cleanup_schedule": "0 10 0 * * *", "events_days_retain": null, "experimental_client_feature_flags": "fido2-vault-credentials", "extended_logging": true, "helo_name": null, "hibp_api_key": null, "http_request_block_non_global_ips": true, "http_request_block_regex": null, "icon_blacklist_non_global_ips": true, "icon_blacklist_regex": null, "icon_cache_folder": "data/icon_cache", "icon_cache_negttl": 259200, "icon_cache_ttl": 2592000, "icon_download_timeout": 10, "icon_redirect_code": 302, "icon_service": "internal", "incomplete_2fa_schedule": "30 * * * * *", "incomplete_2fa_time_limit": 3, "increase_note_size_limit": false, "invitation_expiration_hours": 120, "invitation_org_name": "Rammos Family Password Vault", "invitations_allowed": true, "ip_header": "X-Real-IP", "job_poll_interval_ms": 30000, "log_file": null, "log_level": "info", "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f", "login_ratelimit_max_burst": 10, "login_ratelimit_seconds": 60, "org_attachment_limit": null, "org_creation_users": "", "org_events_enabled": false, "org_groups_enabled": false, "password_hints_allowed": true, "password_iterations": 600000, "push_enabled": false, "push_identity_uri": "https://identity.bitwarden.com", "push_installation_id": "***", "push_installation_key": "***", "push_relay_uri": "https://push.bitwarden.com", "reload_templates": false, "require_device_email": false, "rsa_key_filename": "data/rsa_key", "send_purge_schedule": "0 5 * * * *", "sendmail_command": null, "sends_allowed": true, "sends_folder": "data/sends", "show_password_hint": false, "signups_allowed": true, "signups_domains_whitelist": "*********", "signups_verify": true, "signups_verify_resend_limit": 3, "signups_verify_resend_time": 300, "smtp_accept_invalid_certs": true, "smtp_accept_invalid_hostnames": false, "smtp_auth_mechanism": "\"Plain\", \"Login\"", "smtp_debug": false, "smtp_embed_images": true, "smtp_explicit_tls": null, "smtp_from": "****************", "smtp_from_name": "Rammos Family Password Vault", "smtp_host": "**********", "smtp_password": "***", "smtp_port": 465, "smtp_security": "force_tls", "smtp_ssl": null, "smtp_timeout": 20, "smtp_username": "****************", "templates_folder": "data/templates", "tmp_folder": "data/tmp", "trash_auto_delete_days": null, "trash_purge_schedule": "0 5 0 * * *", "use_sendmail": false, "use_syslog": false, "user_attachment_limit": null, "user_send_limit": null, "web_vault_enabled": true, "web_vault_folder": "web-vault/", "yubico_client_id": null, "yubico_secret_key": null, "yubico_server": null } ``` </details> ### Vaultwarden Build Version 1.33.0 ### Deployment method Official Container Image ### Custom deployment method _No response_ ### Reverse Proxy nginx ### Host/Server Operating System Linux ### Operating System Version Debian (Open Media Vault 7) ### Clients Web Vault ### Client Version _No response_ ### Steps To Reproduce 1. Create new user 2. Invite them to the organisation 3. Click in the invite link on the email 4. Log In ### Expected Result Login is successful and user accepts the invite ### Actual Result Login process is repeated, then no option to accept the invite ### Logs ```text vaultwarden | [2025-01-26 15:11:11.979][response][INFO] (reinvite_member) POST /api/organizations/<org_id>/users/<member_id>/reinvite => 200 OK vaultwarden | [2025-01-26 15:11:16.850][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/policies/token?token=eyJ0eXAiOiJKV1QiLCJhbGci vaultwarden | [2025-01-26 15:11:16.850][response][INFO] (list_policies_token) GET /api/organizations/<org_id>/policies/token?<token> => 200 OK vaultwarden | [2025-01-26 15:11:18.671][request][INFO] GET /api/devices/knowndevice vaultwarden | [2025-01-26 15:11:18.672][response][INFO] (get_known_device) GET /api/devices/knowndevice => 200 OK vaultwarden | [2025-01-26 15:11:35.668][request][INFO] POST /identity/accounts/prelogin vaultwarden | [2025-01-26 15:11:35.669][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK vaultwarden | [2025-01-26 15:11:35.686][request][INFO] POST /identity/connect/token vaultwarden | [2025-01-26 15:11:35.847][vaultwarden::api::identity][INFO] User zoe@rammos.me logged in successfully. IP: 10.0.0.224 vaultwarden | [2025-01-26 15:11:35.847][response][INFO] (login) POST /identity/connect/token => 200 OK vaultwarden | [2025-01-26 15:11:35.878][request][INFO] GET /api/config vaultwarden | [2025-01-26 15:11:35.878][response][INFO] (config) GET /api/config => 200 OK vaultwarden | [2025-01-26 15:11:35.903][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/policies/token?token=eyJ0eXAiOiJKV1QiLCJhbGci vaultwarden | [2025-01-26 15:11:35.904][response][INFO] (list_policies_token) GET /api/organizations/<org_id>/policies/token?<token> => 200 OK vaultwarden | [2025-01-26 15:11:35.910][request][INFO] GET /notifications/hub?access_token=eyJ0eXAiOiJKV1QiL vaultwarden | [2025-01-26 15:11:35.910][vaultwarden::api::notifications][INFO] Accepting Rocket WS connection from 10.0.0.224 vaultwarden | [2025-01-26 15:11:35.910][response][INFO] (websockets_hub) GET /notifications/hub?<data..> => 200 OK vaultwarden | [2025-01-26 15:11:35.910][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/keys vaultwarden | [2025-01-26 15:11:35.911][auth][ERROR] Unauthorized Error: The current user isn't confirmed member of the organization vaultwarden | [2025-01-26 15:11:35.911][vaultwarden::api::core::organizations::_][WARN] Request guard `OrgMemberHeaders` failed: "The current user isn't confirmed member of the organization". vaultwarden | [2025-01-26 15:11:35.911][response][INFO] (get_organization_keys) GET /api/organizations/<org_id>/keys => 401 Unauthorized vaultwarden | [2025-01-26 15:11:35.937][vaultwarden::api::notifications][INFO] Closing WS connection from 10.0.0.224 vaultwarden | [2025-01-26 15:11:36.092][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/policies/token?token=eyJ0eXAiOiJKV1QiLCJhbGci vaultwarden | [2025-01-26 15:11:36.092][response][INFO] (list_policies_token) GET /api/organizations/<org_id>/policies/token?<token> => 200 OK vaultwarden | [2025-01-26 15:11:42.684][request][INFO] GET /api/devices/knowndevice vaultwarden | [2025-01-26 15:11:42.685][response][INFO] (get_known_device) GET /api/devices/knowndevice => 200 OK vaultwarden | [2025-01-26 15:11:44.501][request][INFO] POST /identity/accounts/prelogin vaultwarden | [2025-01-26 15:11:44.502][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK vaultwarden | [2025-01-26 15:11:44.514][request][INFO] POST /identity/connect/token vaultwarden | [2025-01-26 15:11:44.655][vaultwarden::api::identity][INFO] User zoe@rammos.me logged in successfully. IP: 10.0.0.224 vaultwarden | [2025-01-26 15:11:44.655][response][INFO] (login) POST /identity/connect/token => 200 OK vaultwarden | [2025-01-26 15:11:44.685][request][INFO] GET /api/config vaultwarden | [2025-01-26 15:11:44.685][response][INFO] (config) GET /api/config => 200 OK vaultwarden | [2025-01-26 15:11:44.738][request][INFO] POST /identity/connect/token vaultwarden | [2025-01-26 15:11:44.740][response][INFO] (login) POST /identity/connect/token => 200 OK vaultwarden | [2025-01-26 15:11:44.764][request][INFO] GET /api/sync?excludeDomains=true vaultwarden | [2025-01-26 15:11:44.764][request][INFO] GET /notifications/hub?access_token=eyJ0eXAiOiJKV1QiL vaultwarden | [2025-01-26 15:11:44.764][vaultwarden::api::notifications][INFO] Accepting Rocket WS connection from 10.0.0.224 vaultwarden | [2025-01-26 15:11:44.764][response][INFO] (websockets_hub) GET /notifications/hub?<data..> => 200 OK vaultwarden | [2025-01-26 15:11:44.766][response][INFO] (sync) GET /api/sync?<data..> => 200 OK ``` ### Screenshots or Videos _No response_ ### Additional Context _No response_
OVERLORD added the bug label 2026-02-05 03:28:12 +03:00
Author
Owner

@stefan0xC commented on GitHub (Jan 26, 2025):

Thanks for the report.

vaultwarden         | [2025-01-26 15:11:35.910][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/keys
vaultwarden         | [2025-01-26 15:11:35.911][auth][ERROR] Unauthorized Error: The current user isn't confirmed member of the organization
vaultwarden         | [2025-01-26 15:11:35.911][vaultwarden::api::core::organizations::_][WARN] Request guard `OrgMemberHeaders` failed: "The current user isn't confirmed member of the organization".
vaultwarden         | [2025-01-26 15:11:35.911][response][INFO] (get_organization_keys) GET /api/organizations/<org_id>/keys => 401 Unauthorized

I assume you have automatic account recovery policy active?
I think it's failing because of the confirmed membership requirement.

@BlackDex should we make an InvitedOrgMemberHeader for get_organization_public_key?

@stefan0xC commented on GitHub (Jan 26, 2025): Thanks for the report. ``` vaultwarden | [2025-01-26 15:11:35.910][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/keys vaultwarden | [2025-01-26 15:11:35.911][auth][ERROR] Unauthorized Error: The current user isn't confirmed member of the organization vaultwarden | [2025-01-26 15:11:35.911][vaultwarden::api::core::organizations::_][WARN] Request guard `OrgMemberHeaders` failed: "The current user isn't confirmed member of the organization". vaultwarden | [2025-01-26 15:11:35.911][response][INFO] (get_organization_keys) GET /api/organizations/<org_id>/keys => 401 Unauthorized ``` I assume you have automatic account recovery policy active? I think it's failing because of the confirmed membership requirement. @BlackDex should we make an InvitedOrgMemberHeader for `get_organization_public_key`?
Author
Owner

@BlackDex commented on GitHub (Jan 26, 2025):

Or that check should also also allow invited users, but not revoked ones

@BlackDex commented on GitHub (Jan 26, 2025): Or that check should also also allow invited users, but not revoked ones
Author
Owner

@pyRammos commented on GitHub (Jan 27, 2025):

I disabled to policy and it worked. Thank you !

@pyRammos commented on GitHub (Jan 27, 2025): I disabled to policy and it worked. Thank you !
Author
Owner

@Inno-ooshot commented on GitHub (Jan 27, 2025):

Same issue here since the update, cannot accept invite.
Disabling the policy have resolved the issue as well.

@Inno-ooshot commented on GitHub (Jan 27, 2025): Same issue here since the update, cannot accept invite. Disabling the policy have resolved the issue as well.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/vaultwarden#2152