Has anyone ever figured out how to use FIDO2 with Discourse behind a reverse proxy? I’m having this issue using the web.socketed.template.yml template with a forum behind a Cloudflare Tunnel. Neither Yubikey 2FA nor the new Passkey logins are working for me.

Is this on a dev environment? You might need to override this bit temporarily: lib/discourse_webauthn.rb main end ## # Clears the challenge from the user's server session. # # @param user [User] the user to cle…

No, this is a production install.

What error messages are you getting?

What is the full URL of the failed request, /auth.json?

Ah, no: /session/passkey/auth.json

Ok, so your server thinks that it is not running on the hostname that the browser is requesting. The security key / passkey generation procedure has to ensure that the the hostname of the browser matches that of the server (keys are generated per hostname). Can you log into your Rails console and c…

Note, this could be a http vs https issue as well. I see the logo is looking for a URL under http:// on your site.

Discourse.current_hostname does match the URL I use to access the site. Is there a way to see what Discourse thinks the hostname my browser is requesting is?

What do you get for Discourse.base_url in the console?

¿Cómo usar FIDO2 con Discourse detrás de un proxy inverso?

Soporte Instalación

pmusaraj (Penar Musaraj) 9 Enero, 2024 20:56 9

Tenga en cuenta que esto también podría ser un problema de http frente a https. Veo que el logotipo busca una URL en http:// en su sitio.

Tema		Respuestas	Vistas
Cannot get yubikey working Support	3	878	23 Febrero 2023
Unable to determine Passkey issues behind Cloudflare Proxy Support passkey	0	177	15 Julio 2024
Error when create user passkey in browser Support passkey	12	739	30 Octubre 2025
Discourse behind reverse proxy and https Self-hosting	18	7710	13 Marzo 2022
Discourse installed in UNRAID Ubuntu Server VM behind NPM reverse proxy not resolving hostname Self-hosting	10	1093	30 Enero 2024

¿Cómo usar FIDO2 con Discourse detrás de un proxy inverso?

Temas relacionados