Has anyone ever figured out how to use FIDO2 with Discourse behind a reverse proxy? I’m having this issue using the web.socketed.template.yml template with a forum behind a Cloudflare Tunnel. Neither Yubikey 2FA nor the new Passkey logins are working for me.

Is this on a dev environment? You might need to override this bit temporarily: lib/discourse_webauthn.rb main end ## # Clears the challenge from the user's server session. # # @param user [User] the user to cle…

No, this is a production install.

What error messages are you getting?

What is the full URL of the failed request, /auth.json?

Ah, no: /session/passkey/auth.json

Ok, so your server thinks that it is not running on the hostname that the browser is requesting. The security key / passkey generation procedure has to ensure that the the hostname of the browser matches that of the server (keys are generated per hostname). Can you log into your Rails console and c…

Note, this could be a http vs https issue as well. I see the logo is looking for a URL under http:// on your site.

Discourse.current_hostname does match the URL I use to access the site. Is there a way to see what Discourse thinks the hostname my browser is requesting is?

What do you get for Discourse.base_url in the console?

Comment utiliser FIDO2 avec Discourse derrière un proxy inverse ?

Soutien Installation

pmusaraj (Penar Musaraj) Janvier 9, 2024, 8:56 9

Notez que cela pourrait également être un problème de http par rapport à https. Je vois que le logo recherche une URL sous http:// sur votre site.

Sujet		Réponses	Vues
Cannot get yubikey working Support	3	878	Février 23, 2023
Unable to determine Passkey issues behind Cloudflare Proxy Support passkey	0	177	Juillet 15, 2024
Error when create user passkey in browser Support passkey	12	739	Octobre 30, 2025
Discourse behind reverse proxy and https Self-hosting	18	7710	Mars 13, 2022
Discourse installed in UNRAID Ubuntu Server VM behind NPM reverse proxy not resolving hostname Self-hosting	10	1093	Janvier 30, 2024

Comment utiliser FIDO2 avec Discourse derrière un proxy inverse ?

Sujets connexes