bitwarden / clients

Bitwarden client apps (web, browser extension, desktop, and cli).
https://bitwarden.com
Other
8.99k stars 1.18k forks source link

Can register a passkey with bitwarden but login popup always goes to windows security #9114

Open ghstahl opened 4 months ago

ghstahl commented 4 months ago

Steps To Reproduce

I can do a registration ceremony for passkeys and bitwarden pops up. during login its always windows security that pops up.
I have noticed that if I constantly

https://github.com/bitwarden/clients/assets/201257/3417a92c-0186-4668-b47c-7de27d41d6ca

do a form resubmit bitwarden will eventually popup to do the passkey login.

Expected Result

bitwarden should alway popup first when doing the passkey login.

https://github.com/fluffy-bunny/fluffycore-rage-identity

Is there any logging I can turn on for this extension to capture why bitwarden doesn't popup all the time during a login

Actual Result

Windows security seems to always pop up during logins.

Screenshots or Videos

No response

Additional Context

https://github.com/bitwarden/clients/assets/201257/b46bd6a9-e0b7-4581-acb3-33b28b5f037a

Operating System

Windows

Operating System Version

11

Web Browser

Microsoft Edge

Browser Version

Version 124.0.2478.80 (Official build) (64-bit)

Build Version

2024.3.1

Issue Tracking Info

sammbw commented 4 months ago

Hi there,

I am unable to reproduce this issue, it has been escalated for further investigation. If you have more information that can help us, please add it below.

Thanks!

ghstahl commented 4 months ago

you can run the app locally using.

  1. install vscode
  2. install golang
  3. configure the app once you have NGROK running.

I have found bitwarden doesn't come up at all if the RPID isn't https, so NGROK is what I use .

If I unsintall bitwarden or cancel out of it offering to store and login using passkeys, it fails over to windows security.
windows security works every time.

Bitwarden works when it comes up.
Logs on why it bets automatically bypassed about 90% of the time would be helful.

If you have a developer on hand I can get on a call to get the app running. Its all inmemory so no database.

ghstahl commented 3 months ago

Clearing out Excluded Domains solved my problem. here is the community issue.

However, as I stated in the community feedback, I has a single domain in my Excluded Domains. That domain had nothing to do with the ngrok one, or my local traefik one.

I did do a bunch of tests where I did "use your device or hardware key" That is how my one and only exclude domain got there. It was to hanko.io.

After that bitwarden got itself into some state.

Summary Deleting that hanko.io domain and saving it made my ngrok and local traefik stuff work.

tjoll commented 1 month ago

I've got the exact same issue. Created a passkey for Linkedin and only the Windows Security window popped up instead of the Bitwarden browser extension. This happens in Brave and Chrome.

I've found the community post to delete the excluded domains but I don't have any in the list.

Bitwarden version: 2024.7.1 Brave version: [Version 1.68.134 Chromium: 127.0.6533.88 (Official Build) (64-bit)] Chrome version: Version 127.0.6533.89 (Official Build) (64-bit)

Let me know if you need some more info of if I can help with debugging.