App logs me out if vault is unreachable

yurividal commented 12 hours ago

Steps To Reproduce

I self-host Bitwarden. Never had a problem with the old version of the android app. With the beta, I have realized that if my vault is unreachable, for example if my server went down for a few minutes, the Android app logs me out. Next time I open the app, I have to log back in with my master password. Strangely, it doesn't request any 2FA for this re-login. I also have to go to the settings and re-enable biometric login every time this happens.

Expected Result

Same behavior as old app. App keeps logged in even if vault is temporarily unavailable.

Actual Result

I have to login all over again.

Screenshots or Videos

No response

Additional Context

No response

Build Version

Latest

What server are you connecting to?

Self-host

Self-host Server Version

Latest

Environment Details

No response

Issue Tracking Info

[X] I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.

bitwarden-bot commented 12 hours ago

Thank you for your report! We've added this to our internal board for review. ID: PM-15164

yurividal commented 12 hours ago

Steps to reproduce:

Open the beta android app
sync the vault. sync works fine.
go to reverse proxy and disable the bitwarden proxy (to simulate server being down)
open beta android app. wait for it to try to sync, or force a sync
exit out of the app
re-enable bitwarden on the reverse proxy
open the android app again. it will be logged out. User needs to enter master password again to log back in. All settings are also lost, so user needs to re-enable biometrics, and any other settings they had before.

daniellbw commented 9 hours ago

Hi there,

I am unable to reproduce this issue, it has been escalated for further investigation. If you have more information that can help us, please add it below.

Thanks!

ctrlbrk42 commented 8 hours ago

Steps to reproduce:

Open the beta android app

sync the vault. sync works fine.

go to reverse proxy and disable the bitwarden proxy (to simulate server being down)

open beta android app. wait for it to try to sync, or force a sync

exit out of the app

re-enable bitwarden on the reverse proxy

open the android app again. it will be logged out. User needs to enter master password again to log back in. All settings are also lost, so user needs to re-enable biometrics, and any other settings they had before.

I sent this in via email but putting here as well:

Hi Android devs,

Big bug in version 2024.11.6 com.x8bit.bitwarden.

When internet is available but the self-hosted server is offline/unreachable/returning a 5xx, the app disregards prior biometric settings and logs me out.

That forces me to login, using my master password. That password is not accepted (an error occurred). It doesn't seem to use the local cached copy. I am logged out and unable to authenticate, locking me out entirely from my vault.

If I disable internet entirely, the app works as expected (AFTER returning the server to responding 2xx and logging in once, then setting biometrics again, and then disabling internet).

The issue is focused on when the server is unreachable OR returning a 5xx error. I've been locked out several times because of this due to an energy crisis in my country lasting beyond my UPS batteries >4hrs

bitwarden / android