How to use FIDO2 with Discourse behind a reverse proxy?

pmusaraj · January 9, 2024, 8:24pm

Is this on a dev environment? You might need to override this bit temporarily:

lib/discourse_webauthn.rb

main


      
          end
          
          ##
          # Clears the challenge from the user's server session.
          #
          # @param user [User] the user to clear the challenge for
          # @param server_session [ServerSession] the session to clear the challenge from
          def self.clear_challenge(user, server_session)
            server_session.delete(session_challenge_key(user))
          end
          
          def self.allowed_credentials(user, server_session, include_passkeys: false)
            has_security_keys = user.security_keys_enabled?
            has_passkeys = include_passkeys && user.passkeys_for_2fa_enabled?
            return {} if !has_security_keys && !has_passkeys
          
            credential_ids = []

And it is also likely helpful to use the --forward-host flag when running the server, i.e. bin/ember-cli -u --forward-host.

Topic		Replies	Views
Cannot get yubikey working Support	3	878	February 23, 2023
Unable to determine Passkey issues behind Cloudflare Proxy Support passkey	0	177	July 15, 2024
Error when create user passkey in browser Support passkey	12	739	October 30, 2025
Discourse behind reverse proxy and https Self-hosting	18	7710	March 13, 2022
Discourse installed in UNRAID Ubuntu Server VM behind NPM reverse proxy not resolving hostname Self-hosting	10	1093	January 30, 2024

How to use FIDO2 with Discourse behind a reverse proxy?

Related topics