Cannot accept invitation to organisation in 1.33.0 #243

New Issue

AtHeartEngineer · 2025-07-08T08:43:56-04:00

AtHeartEngineer commented

2025-07-08 08:43:56 -04:00

Originally created by @pyRammos on 1/26/2025

Vaultwarden Support String

When I invite a new user (new or existing) to join an organisation, the email link opens the login page. Upon successful completion of the login, I am again redirected to log in. The second time it is successful but the user has not joined the organisation. I have tried different email addresses and passwords, as well as starting with a new user (create user via invite) or create a user before the invite. The users personal vault works well.
The same thing worked 24hrs ago so I am thinking it may be a change since updating to 1.33.0, which happened last night for me.

Your environment (Generated via diagnostics page)

Vaultwarden version: v1.33.0
Web-vault version: v2025.1.1
OS/Arch: linux/x86_64
Running within a container: true (Base: Debian)
Database type: SQLite
Database version: 3.46.0
Environment settings overridden!: true
Uses a reverse proxy: true
IP Header check: true (X-Real-IP)
Internet access: true
Internet access via a proxy: false
DNS Check: true
Browser/Server Time Check: true
Server/NTP Time Check: true
Domain Configuration Check: true
HTTPS Check: true
Websocket Check: true
HTTP Response Checks: true

Config & Details (Generated via diagnostics page)

Show Config & Details

Environment settings which are overridden: DOMAIN, ADMIN_TOKEN

Config:

{
  "_duo_akey": null,
  "_enable_duo": true,
  "_enable_email_2fa": false,
  "_enable_smtp": true,
  "_enable_yubico": true,
  "_icon_service_csp": "",
  "_icon_service_url": "",
  "_ip_header_enabled": true,
  "_max_note_size": 10000,
  "_smtp_img_src": "***:",
  "admin_ratelimit_max_burst": 3,
  "admin_ratelimit_seconds": 300,
  "admin_session_lifetime": 20,
  "admin_token": "***",
  "allowed_connect_src": "",
  "allowed_iframe_ancestors": "",
  "attachments_folder": "data/attachments",
  "auth_request_purge_schedule": "30 * * * * *",
  "authenticator_disable_time_drift": false,
  "data_folder": "data",
  "database_conn_init": "",
  "database_max_conns": 10,
  "database_timeout": 30,
  "database_url": "***************",
  "db_connection_retries": 15,
  "disable_2fa_remember": false,
  "disable_admin_token": false,
  "disable_icon_download": false,
  "domain": "*****://************",
  "domain_origin": "*****://************",
  "domain_path": "",
  "domain_set": true,
  "duo_context_purge_schedule": "30 * * * * *",
  "duo_host": null,
  "duo_ikey": null,
  "duo_skey": null,
  "duo_use_iframe": false,
  "email_2fa_auto_fallback": false,
  "email_2fa_enforce_on_verified_invite": false,
  "email_attempts_limit": 3,
  "email_change_allowed": true,
  "email_expiration_time": 600,
  "email_token_size": 6,
  "emergency_access_allowed": true,
  "emergency_notification_reminder_schedule": "0 3 * * * *",
  "emergency_request_timeout_schedule": "0 7 * * * *",
  "enable_db_wal": true,
  "enable_websocket": true,
  "enforce_single_org_with_reset_pw_policy": false,
  "event_cleanup_schedule": "0 10 0 * * *",
  "events_days_retain": null,
  "experimental_client_feature_flags": "fido2-vault-credentials",
  "extended_logging": true,
  "helo_name": null,
  "hibp_api_key": null,
  "http_request_block_non_global_ips": true,
  "http_request_block_regex": null,
  "icon_blacklist_non_global_ips": true,
  "icon_blacklist_regex": null,
  "icon_cache_folder": "data/icon_cache",
  "icon_cache_negttl": 259200,
  "icon_cache_ttl": 2592000,
  "icon_download_timeout": 10,
  "icon_redirect_code": 302,
  "icon_service": "internal",
  "incomplete_2fa_schedule": "30 * * * * *",
  "incomplete_2fa_time_limit": 3,
  "increase_note_size_limit": false,
  "invitation_expiration_hours": 120,
  "invitation_org_name": "Rammos Family Password Vault",
  "invitations_allowed": true,
  "ip_header": "X-Real-IP",
  "job_poll_interval_ms": 30000,
  "log_file": null,
  "log_level": "info",
  "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f",
  "login_ratelimit_max_burst": 10,
  "login_ratelimit_seconds": 60,
  "org_attachment_limit": null,
  "org_creation_users": "",
  "org_events_enabled": false,
  "org_groups_enabled": false,
  "password_hints_allowed": true,
  "password_iterations": 600000,
  "push_enabled": false,
  "push_identity_uri": "https://identity.bitwarden.com",
  "push_installation_id": "***",
  "push_installation_key": "***",
  "push_relay_uri": "https://push.bitwarden.com",
  "reload_templates": false,
  "require_device_email": false,
  "rsa_key_filename": "data/rsa_key",
  "send_purge_schedule": "0 5 * * * *",
  "sendmail_command": null,
  "sends_allowed": true,
  "sends_folder": "data/sends",
  "show_password_hint": false,
  "signups_allowed": true,
  "signups_domains_whitelist": "*********",
  "signups_verify": true,
  "signups_verify_resend_limit": 3,
  "signups_verify_resend_time": 300,
  "smtp_accept_invalid_certs": true,
  "smtp_accept_invalid_hostnames": false,
  "smtp_auth_mechanism": "\"Plain\", \"Login\"",
  "smtp_debug": false,
  "smtp_embed_images": true,
  "smtp_explicit_tls": null,
  "smtp_from": "****************",
  "smtp_from_name": "Rammos Family Password Vault",
  "smtp_host": "**********",
  "smtp_password": "***",
  "smtp_port": 465,
  "smtp_security": "force_tls",
  "smtp_ssl": null,
  "smtp_timeout": 20,
  "smtp_username": "****************",
  "templates_folder": "data/templates",
  "tmp_folder": "data/tmp",
  "trash_auto_delete_days": null,
  "trash_purge_schedule": "0 5 0 * * *",
  "use_sendmail": false,
  "use_syslog": false,
  "user_attachment_limit": null,
  "user_send_limit": null,
  "web_vault_enabled": true,
  "web_vault_folder": "web-vault/",
  "yubico_client_id": null,
  "yubico_secret_key": null,
  "yubico_server": null
}

Vaultwarden Build Version

1.33.0

Deployment method

Official Container Image

Custom deployment method

No response

Reverse Proxy

nginx

Host/Server Operating System

Linux

Operating System Version

Debian (Open Media Vault 7)

Clients

Web Vault

Client Version

No response

Steps To Reproduce

Create new user
Invite them to the organisation
Click in the invite link on the email
Log In

Expected Result

Login is successful and user accepts the invite

Actual Result

Login process is repeated, then no option to accept the invite

Logs

vaultwarden         | [2025-01-26 15:11:11.979][response][INFO] (reinvite_member) POST /api/organizations/<org_id>/users/<member_id>/reinvite => 200 OK
vaultwarden         | [2025-01-26 15:11:16.850][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/policies/token?token=eyJ0eXAiOiJKV1QiLCJhbGci
vaultwarden         | [2025-01-26 15:11:16.850][response][INFO] (list_policies_token) GET /api/organizations/<org_id>/policies/token?<token> => 200 OK
vaultwarden         | [2025-01-26 15:11:18.671][request][INFO] GET /api/devices/knowndevice
vaultwarden         | [2025-01-26 15:11:18.672][response][INFO] (get_known_device) GET /api/devices/knowndevice => 200 OK
vaultwarden         | [2025-01-26 15:11:35.668][request][INFO] POST /identity/accounts/prelogin
vaultwarden         | [2025-01-26 15:11:35.669][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK
vaultwarden         | [2025-01-26 15:11:35.686][request][INFO] POST /identity/connect/token
vaultwarden         | [2025-01-26 15:11:35.847][vaultwarden::api::identity][INFO] User zoe@rammos.me logged in successfully. IP: 10.0.0.224
vaultwarden         | [2025-01-26 15:11:35.847][response][INFO] (login) POST /identity/connect/token => 200 OK
vaultwarden         | [2025-01-26 15:11:35.878][request][INFO] GET /api/config
vaultwarden         | [2025-01-26 15:11:35.878][response][INFO] (config) GET /api/config => 200 OK
vaultwarden         | [2025-01-26 15:11:35.903][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/policies/token?token=eyJ0eXAiOiJKV1QiLCJhbGci
vaultwarden         | [2025-01-26 15:11:35.904][response][INFO] (list_policies_token) GET /api/organizations/<org_id>/policies/token?<token> => 200 OK
vaultwarden         | [2025-01-26 15:11:35.910][request][INFO] GET /notifications/hub?access_token=eyJ0eXAiOiJKV1QiL
vaultwarden         | [2025-01-26 15:11:35.910][vaultwarden::api::notifications][INFO] Accepting Rocket WS connection from 10.0.0.224
vaultwarden         | [2025-01-26 15:11:35.910][response][INFO] (websockets_hub) GET /notifications/hub?<data..> => 200 OK
vaultwarden         | [2025-01-26 15:11:35.910][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/keys
vaultwarden         | [2025-01-26 15:11:35.911][auth][ERROR] Unauthorized Error: The current user isn't confirmed member of the organization
vaultwarden         | [2025-01-26 15:11:35.911][vaultwarden::api::core::organizations::_][WARN] Request guard `OrgMemberHeaders` failed: "The current user isn't confirmed member of the organization".
vaultwarden         | [2025-01-26 15:11:35.911][response][INFO] (get_organization_keys) GET /api/organizations/<org_id>/keys => 401 Unauthorized
vaultwarden         | [2025-01-26 15:11:35.937][vaultwarden::api::notifications][INFO] Closing WS connection from 10.0.0.224
vaultwarden         | [2025-01-26 15:11:36.092][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/policies/token?token=eyJ0eXAiOiJKV1QiLCJhbGci
vaultwarden         | [2025-01-26 15:11:36.092][response][INFO] (list_policies_token) GET /api/organizations/<org_id>/policies/token?<token> => 200 OK
vaultwarden         | [2025-01-26 15:11:42.684][request][INFO] GET /api/devices/knowndevice
vaultwarden         | [2025-01-26 15:11:42.685][response][INFO] (get_known_device) GET /api/devices/knowndevice => 200 OK
vaultwarden         | [2025-01-26 15:11:44.501][request][INFO] POST /identity/accounts/prelogin
vaultwarden         | [2025-01-26 15:11:44.502][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK
vaultwarden         | [2025-01-26 15:11:44.514][request][INFO] POST /identity/connect/token
vaultwarden         | [2025-01-26 15:11:44.655][vaultwarden::api::identity][INFO] User zoe@rammos.me logged in successfully. IP: 10.0.0.224
vaultwarden         | [2025-01-26 15:11:44.655][response][INFO] (login) POST /identity/connect/token => 200 OK
vaultwarden         | [2025-01-26 15:11:44.685][request][INFO] GET /api/config
vaultwarden         | [2025-01-26 15:11:44.685][response][INFO] (config) GET /api/config => 200 OK
vaultwarden         | [2025-01-26 15:11:44.738][request][INFO] POST /identity/connect/token
vaultwarden         | [2025-01-26 15:11:44.740][response][INFO] (login) POST /identity/connect/token => 200 OK
vaultwarden         | [2025-01-26 15:11:44.764][request][INFO] GET /api/sync?excludeDomains=true
vaultwarden         | [2025-01-26 15:11:44.764][request][INFO] GET /notifications/hub?access_token=eyJ0eXAiOiJKV1QiL
vaultwarden         | [2025-01-26 15:11:44.764][vaultwarden::api::notifications][INFO] Accepting Rocket WS connection from 10.0.0.224
vaultwarden         | [2025-01-26 15:11:44.764][response][INFO] (websockets_hub) GET /notifications/hub?<data..> => 200 OK
vaultwarden         | [2025-01-26 15:11:44.766][response][INFO] (sync) GET /api/sync?<data..> => 200 OK

Screenshots or Videos

No response

Additional Context

No response

*Originally created by @pyRammos on 1/26/2025* ### Vaultwarden Support String When I invite a new user (new or existing) to join an organisation, the email link opens the login page. Upon successful completion of the login, I am again redirected to log in. The second time it is successful but the user has not joined the organisation. I have tried different email addresses and passwords, as well as starting with a new user (create user via invite) or create a user before the invite. The users personal vault works well. The same thing worked 24hrs ago so I am thinking it may be a change since updating to 1.33.0, which happened last night for me. ### Your environment (Generated via diagnostics page) * Vaultwarden version: v1.33.0 * Web-vault version: v2025.1.1 * OS/Arch: linux/x86_64 * Running within a container: true (Base: Debian) * Database type: SQLite * Database version: 3.46.0 * Environment settings overridden!: true * Uses a reverse proxy: true * IP Header check: true (X-Real-IP) * Internet access: true * Internet access via a proxy: false * DNS Check: true * Browser/Server Time Check: true * Server/NTP Time Check: true * Domain Configuration Check: true * HTTPS Check: true * Websocket Check: true * HTTP Response Checks: true ### Config & Details (Generated via diagnostics page) <details><summary>Show Config & Details</summary> **Environment settings which are overridden:** DOMAIN, ADMIN_TOKEN **Config:** ```json { "_duo_akey": null, "_enable_duo": true, "_enable_email_2fa": false, "_enable_smtp": true, "_enable_yubico": true, "_icon_service_csp": "", "_icon_service_url": "", "_ip_header_enabled": true, "_max_note_size": 10000, "_smtp_img_src": "***:", "admin_ratelimit_max_burst": 3, "admin_ratelimit_seconds": 300, "admin_session_lifetime": 20, "admin_token": "***", "allowed_connect_src": "", "allowed_iframe_ancestors": "", "attachments_folder": "data/attachments", "auth_request_purge_schedule": "30 * * * * *", "authenticator_disable_time_drift": false, "data_folder": "data", "database_conn_init": "", "database_max_conns": 10, "database_timeout": 30, "database_url": "***************", "db_connection_retries": 15, "disable_2fa_remember": false, "disable_admin_token": false, "disable_icon_download": false, "domain": "*****://************", "domain_origin": "*****://************", "domain_path": "", "domain_set": true, "duo_context_purge_schedule": "30 * * * * *", "duo_host": null, "duo_ikey": null, "duo_skey": null, "duo_use_iframe": false, "email_2fa_auto_fallback": false, "email_2fa_enforce_on_verified_invite": false, "email_attempts_limit": 3, "email_change_allowed": true, "email_expiration_time": 600, "email_token_size": 6, "emergency_access_allowed": true, "emergency_notification_reminder_schedule": "0 3 * * * *", "emergency_request_timeout_schedule": "0 7 * * * *", "enable_db_wal": true, "enable_websocket": true, "enforce_single_org_with_reset_pw_policy": false, "event_cleanup_schedule": "0 10 0 * * *", "events_days_retain": null, "experimental_client_feature_flags": "fido2-vault-credentials", "extended_logging": true, "helo_name": null, "hibp_api_key": null, "http_request_block_non_global_ips": true, "http_request_block_regex": null, "icon_blacklist_non_global_ips": true, "icon_blacklist_regex": null, "icon_cache_folder": "data/icon_cache", "icon_cache_negttl": 259200, "icon_cache_ttl": 2592000, "icon_download_timeout": 10, "icon_redirect_code": 302, "icon_service": "internal", "incomplete_2fa_schedule": "30 * * * * *", "incomplete_2fa_time_limit": 3, "increase_note_size_limit": false, "invitation_expiration_hours": 120, "invitation_org_name": "Rammos Family Password Vault", "invitations_allowed": true, "ip_header": "X-Real-IP", "job_poll_interval_ms": 30000, "log_file": null, "log_level": "info", "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f", "login_ratelimit_max_burst": 10, "login_ratelimit_seconds": 60, "org_attachment_limit": null, "org_creation_users": "", "org_events_enabled": false, "org_groups_enabled": false, "password_hints_allowed": true, "password_iterations": 600000, "push_enabled": false, "push_identity_uri": "https://identity.bitwarden.com", "push_installation_id": "***", "push_installation_key": "***", "push_relay_uri": "https://push.bitwarden.com", "reload_templates": false, "require_device_email": false, "rsa_key_filename": "data/rsa_key", "send_purge_schedule": "0 5 * * * *", "sendmail_command": null, "sends_allowed": true, "sends_folder": "data/sends", "show_password_hint": false, "signups_allowed": true, "signups_domains_whitelist": "*********", "signups_verify": true, "signups_verify_resend_limit": 3, "signups_verify_resend_time": 300, "smtp_accept_invalid_certs": true, "smtp_accept_invalid_hostnames": false, "smtp_auth_mechanism": "\"Plain\", \"Login\"", "smtp_debug": false, "smtp_embed_images": true, "smtp_explicit_tls": null, "smtp_from": "****************", "smtp_from_name": "Rammos Family Password Vault", "smtp_host": "**********", "smtp_password": "***", "smtp_port": 465, "smtp_security": "force_tls", "smtp_ssl": null, "smtp_timeout": 20, "smtp_username": "****************", "templates_folder": "data/templates", "tmp_folder": "data/tmp", "trash_auto_delete_days": null, "trash_purge_schedule": "0 5 0 * * *", "use_sendmail": false, "use_syslog": false, "user_attachment_limit": null, "user_send_limit": null, "web_vault_enabled": true, "web_vault_folder": "web-vault/", "yubico_client_id": null, "yubico_secret_key": null, "yubico_server": null } ``` </details> ### Vaultwarden Build Version 1.33.0 ### Deployment method Official Container Image ### Custom deployment method _No response_ ### Reverse Proxy nginx ### Host/Server Operating System Linux ### Operating System Version Debian (Open Media Vault 7) ### Clients Web Vault ### Client Version _No response_ ### Steps To Reproduce 1. Create new user 2. Invite them to the organisation 3. Click in the invite link on the email 4. Log In ### Expected Result Login is successful and user accepts the invite ### Actual Result Login process is repeated, then no option to accept the invite ### Logs ```text vaultwarden | [2025-01-26 15:11:11.979][response][INFO] (reinvite_member) POST /api/organizations/<org_id>/users/<member_id>/reinvite => 200 OK vaultwarden | [2025-01-26 15:11:16.850][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/policies/token?token=eyJ0eXAiOiJKV1QiLCJhbGci vaultwarden | [2025-01-26 15:11:16.850][response][INFO] (list_policies_token) GET /api/organizations/<org_id>/policies/token?<token> => 200 OK vaultwarden | [2025-01-26 15:11:18.671][request][INFO] GET /api/devices/knowndevice vaultwarden | [2025-01-26 15:11:18.672][response][INFO] (get_known_device) GET /api/devices/knowndevice => 200 OK vaultwarden | [2025-01-26 15:11:35.668][request][INFO] POST /identity/accounts/prelogin vaultwarden | [2025-01-26 15:11:35.669][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK vaultwarden | [2025-01-26 15:11:35.686][request][INFO] POST /identity/connect/token vaultwarden | [2025-01-26 15:11:35.847][vaultwarden::api::identity][INFO] User zoe@rammos.me logged in successfully. IP: 10.0.0.224 vaultwarden | [2025-01-26 15:11:35.847][response][INFO] (login) POST /identity/connect/token => 200 OK vaultwarden | [2025-01-26 15:11:35.878][request][INFO] GET /api/config vaultwarden | [2025-01-26 15:11:35.878][response][INFO] (config) GET /api/config => 200 OK vaultwarden | [2025-01-26 15:11:35.903][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/policies/token?token=eyJ0eXAiOiJKV1QiLCJhbGci vaultwarden | [2025-01-26 15:11:35.904][response][INFO] (list_policies_token) GET /api/organizations/<org_id>/policies/token?<token> => 200 OK vaultwarden | [2025-01-26 15:11:35.910][request][INFO] GET /notifications/hub?access_token=eyJ0eXAiOiJKV1QiL vaultwarden | [2025-01-26 15:11:35.910][vaultwarden::api::notifications][INFO] Accepting Rocket WS connection from 10.0.0.224 vaultwarden | [2025-01-26 15:11:35.910][response][INFO] (websockets_hub) GET /notifications/hub?<data..> => 200 OK vaultwarden | [2025-01-26 15:11:35.910][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/keys vaultwarden | [2025-01-26 15:11:35.911][auth][ERROR] Unauthorized Error: The current user isn't confirmed member of the organization vaultwarden | [2025-01-26 15:11:35.911][vaultwarden::api::core::organizations::_][WARN] Request guard `OrgMemberHeaders` failed: "The current user isn't confirmed member of the organization". vaultwarden | [2025-01-26 15:11:35.911][response][INFO] (get_organization_keys) GET /api/organizations/<org_id>/keys => 401 Unauthorized vaultwarden | [2025-01-26 15:11:35.937][vaultwarden::api::notifications][INFO] Closing WS connection from 10.0.0.224 vaultwarden | [2025-01-26 15:11:36.092][request][INFO] GET /api/organizations/8028aae8-cd1b-4c91-aad2-c67e48bf60d0/policies/token?token=eyJ0eXAiOiJKV1QiLCJhbGci vaultwarden | [2025-01-26 15:11:36.092][response][INFO] (list_policies_token) GET /api/organizations/<org_id>/policies/token?<token> => 200 OK vaultwarden | [2025-01-26 15:11:42.684][request][INFO] GET /api/devices/knowndevice vaultwarden | [2025-01-26 15:11:42.685][response][INFO] (get_known_device) GET /api/devices/knowndevice => 200 OK vaultwarden | [2025-01-26 15:11:44.501][request][INFO] POST /identity/accounts/prelogin vaultwarden | [2025-01-26 15:11:44.502][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK vaultwarden | [2025-01-26 15:11:44.514][request][INFO] POST /identity/connect/token vaultwarden | [2025-01-26 15:11:44.655][vaultwarden::api::identity][INFO] User zoe@rammos.me logged in successfully. IP: 10.0.0.224 vaultwarden | [2025-01-26 15:11:44.655][response][INFO] (login) POST /identity/connect/token => 200 OK vaultwarden | [2025-01-26 15:11:44.685][request][INFO] GET /api/config vaultwarden | [2025-01-26 15:11:44.685][response][INFO] (config) GET /api/config => 200 OK vaultwarden | [2025-01-26 15:11:44.738][request][INFO] POST /identity/connect/token vaultwarden | [2025-01-26 15:11:44.740][response][INFO] (login) POST /identity/connect/token => 200 OK vaultwarden | [2025-01-26 15:11:44.764][request][INFO] GET /api/sync?excludeDomains=true vaultwarden | [2025-01-26 15:11:44.764][request][INFO] GET /notifications/hub?access_token=eyJ0eXAiOiJKV1QiL vaultwarden | [2025-01-26 15:11:44.764][vaultwarden::api::notifications][INFO] Accepting Rocket WS connection from 10.0.0.224 vaultwarden | [2025-01-26 15:11:44.764][response][INFO] (websockets_hub) GET /notifications/hub?<data..> => 200 OK vaultwarden | [2025-01-26 15:11:44.766][response][INFO] (sync) GET /api/sync?<data..> => 200 OK ``` ### Screenshots or Videos _No response_ ### Additional Context _No response_

AtHeartEngineer closed this issue

2025-07-08 08:43:57 -04:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/vaultwarden#243