Has anyone ever figured out how to use FIDO2 with Discourse behind a reverse proxy? I’m having this issue using the web.socketed.template.yml template with a forum behind a Cloudflare Tunnel. Neither Yubikey 2FA nor the new Passkey logins are working for me.

Is this on a dev environment? You might need to override this bit temporarily: lib/discourse_webauthn.rb main end ## # Clears the challenge from the user's server session. # # @param user [User] the user to cle…

No, this is a production install.

What error messages are you getting?

What is the full URL of the failed request, /auth.json?

Ah, no: /session/passkey/auth.json

Ok, so your server thinks that it is not running on the hostname that the browser is requesting. The security key / passkey generation procedure has to ensure that the the hostname of the browser matches that of the server (keys are generated per hostname). Can you log into your Rails console and c…

Note, this could be a http vs https issue as well. I see the logo is looking for a URL under http:// on your site.

Discourse.current_hostname does match the URL I use to access the site. Is there a way to see what Discourse thinks the hostname my browser is requesting is?

What do you get for Discourse.base_url in the console?

Como usar FIDO2 com Discourse atrás de um proxy reverso?

Suporte Instalação

pmusaraj (Penar Musaraj) Janeiro 9, 2024, 8:56pm 9

Observe, isso também pode ser um problema de http vs https. Vejo que o logotipo está procurando um URL em http:// no seu site.

Tópico		Respostas	Visualizações
Cannot get yubikey working Support	3	878	23 de Fevereiro de 2023
Unable to determine Passkey issues behind Cloudflare Proxy Support passkey	0	177	15 de Julho de 2024
Error when create user passkey in browser Support passkey	12	739	30 de Outubro de 2025
Discourse behind reverse proxy and https Self-hosting	18	7710	13 de Março de 2022
Discourse installed in UNRAID Ubuntu Server VM behind NPM reverse proxy not resolving hostname Self-hosting	10	1093	30 de Janeiro de 2024

Como usar FIDO2 com Discourse atrás de um proxy reverso?

Tópicos relacionados