# Issues using passkeys with vaultwarden

**URL:** <https://meta.discourse.org/t/issues-using-passkeys-with-vaultwarden/294865>\
**Category:** Product Support\
**Tags:** passkey\
**Created:** [February 9, 2024, 4:54pm UTC](https://meta.discourse.org/t/issues-using-passkeys-with-vaultwarden/294865 "2024-02-09T16:54:58Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![JappeHallunken](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jappehallunken/32/362117_2.png) [@JappeHallunken](https://meta.discourse.org/u/JappeHallunken)\
**Post date:** [February 9, 2024, 6:07pm UTC](https://meta.discourse.org/t/issues-using-passkeys-with-vaultwarden/294865/3 "2024-02-09T18:07:46Z")

</div>

I think vaultvarden and the bitwarden firefox plugin is not the problem since passkey integration works with other services like GitHub.  
I can also find this specific message in some [yml file of discourse](https://github.com/discourse/discourse/blob/6311a80724cb781b1a252c07e8123f590d932350/config/locales/client.en.yml#L1536), which is indicating a `not_allowed_error`.

> [@pmusaraj](#):
>
> Do you know if this problem only happens with the Vaultwarden extension on Firefox?

I don’t know, acutally it is the official bitwarden extension for firefox, but I use a self-hosted Vaultwarden instance.  
I tried also firefox on Fedora, the initial problem occured on Firefox for Windows.  
I will test now with Google Chrome on Windows.  
Ok it also fails there, but I had a look into dev tools and found this:

> **Firefox console output**
>
> ```plaintext
> Content-Security-Policy: Die Einstellungen der Seite haben das Laden einer Ressource auf blob:https://dietpi.com/b23d5e0c-dc61-4df8-b71b-88c5cd7f271a blockiert ("img-src").
> 
> Object { jqXHR: {…}, textStatus: "error", errorThrown: "" }
> errorThrown: ""
> jqXHR: Object { readyState: 4, getResponseHeader: getResponseHeader(e), getAllResponseHeaders: getAllResponseHeaders(), … }
> abort: function abort(e)
> always: function always()
> catch: function catch(e)
> done: function add()
> fail: function add()
> getAllResponseHeaders: function getAllResponseHeaders()
> getResponseHeader: function getResponseHeader(e)
> jqTextStatus: "error"
> overrideMimeType: function overrideMimeType(e)
> pipe: function pipe()
> progress: function add()
> promise: function promise(e)
> readyState: 4
> requestedUrl: "/forum/u/register_passkey.json"
> responseJSON: Object { errors: (1) […] }
> responseText: '{"errors":["The origin of the authentication request does not match the server origin."]}'
> setRequestHeader: function setRequestHeader(e, t)
> state: function state()
> status: 401
> statusCode: function statusCode(e)
> statusText: "error"
> then: function then(e, n, i)
> <prototype>: Object { … }
> textStatus: "error"
> <prototype>: Object { … }
> __defineGetter__ : function __defineGetter__ ()
> __defineSetter__ : function __defineSetter__ ()
> __lookupGetter__ : function __lookupGetter__ ()
> __lookupSetter__ : function __lookupSetter__ ()
> __proto__ : 
> constructor: function Object()
> hasOwnProperty: function hasOwnProperty()
> isPrototypeOf: function isPrototypeOf()
> propertyIsEnumerable: function propertyIsEnumerable()
> toLocaleString: function toLocaleString()
> toString: function toString()
> valueOf: function valueOf()
> <get __proto__ ()>: function __proto__ ()
> <set __proto__ ()>: function __proto__ ()
> chunk.6d10396b901f5b95b67e.d41d8cd9.js:1:2114375
> createPasskey https://dietpi.com/forum/assets/chunk.6d10396b901f5b95b67e.d41d8cd9.js:1
> 
> ```

Quite the same on Chrome:

```plaintext
Failed to load resource: the server responded with a status of 401 ()
chunk.6d10396b901f5b95b67e.d41d8cd9.js:1 Object

```

So probably a server misconfig?

> [@pmusaraj](#):
>
> If I were to test this, I’d need to set up a Vaultwarden server?

Yes, or use a provider. Bitwarden itself has a free tier for personal use.  
I can also provide more info and testing if needed.

---

_[View the full topic](https://meta.discourse.org/t/issues-using-passkeys-with-vaultwarden/294865)._