Has anyone ever figured out how to use FIDO2 with Discourse behind a reverse proxy? I’m having this issue using the web.socketed.template.yml template with a forum behind a Cloudflare Tunnel. Neither Yubikey 2FA nor the new Passkey logins are working for me.

Is this on a dev environment? You might need to override this bit temporarily: lib/discourse_webauthn.rb main end ## # Clears the challenge from the user's server session. # # @param user [User] the user to cle…

No, this is a production install.

What error messages are you getting?

What is the full URL of the failed request, /auth.json?

Ah, no: /session/passkey/auth.json

Ok, so your server thinks that it is not running on the hostname that the browser is requesting. The security key / passkey generation procedure has to ensure that the the hostname of the browser matches that of the server (keys are generated per hostname). Can you log into your Rails console and c…

Note, this could be a http vs https issue as well. I see the logo is looking for a URL under http:// on your site.

Discourse.current_hostname does match the URL I use to access the site. Is there a way to see what Discourse thinks the hostname my browser is requesting is?

What do you get for Discourse.base_url in the console?

Come usare FIDO2 con Discourse dietro un reverse proxy?

Supporto Installazione

pmusaraj (Penar Musaraj) 9 Gennaio 2024, 8:56pm 9

Nota, questo potrebbe anche essere un problema di http vs https. Vedo che il logo cerca un URL sotto http:// sul tuo sito.

Argomento		Risposte	Visualizzazioni
Cannot get yubikey working Support	3	878	Febbraio 23, 2023
Unable to determine Passkey issues behind Cloudflare Proxy Support passkey	0	177	Luglio 15, 2024
Error when create user passkey in browser Support passkey	12	739	Ottobre 30, 2025
Discourse behind reverse proxy and https Self-hosting	18	7710	Marzo 13, 2022
Discourse installed in UNRAID Ubuntu Server VM behind NPM reverse proxy not resolving hostname Self-hosting	10	1093	Gennaio 30, 2024

Come usare FIDO2 con Discourse dietro un reverse proxy?

Argomenti correlati