Vaultwarden no longer shows entries in the Webvault; Sync with Android app works #5060
Replies: 42 comments 71 replies
-
|
Can you check your web console what the browser says when this doesn't load? E.g. if there are blocked resources or exceptions thrown? If it's a blocked resource you might want to check your reverse proxy settings if you are overriding the content security policy. I mean this could potentially also be caused by browser extensions. |
Beta Was this translation helpful? Give feedback.
-
|
With the developer tool I got 6 errors in Chrome: WebSocketTransport.ts:81 WebSocket connection to ... failed Error: Failed to start the connection: Error: WebSocket failed to connect. The connection could not be found on the server, either the endpoint may not be a SignalR endpoint, the connection ID is not present on the server, or there is a proxy blocking WebSockets. If you have multiple servers check that sticky sessions are enabled. Unhandled Promise rejection: WebSocket failed to connect. The connection could not be found on the server, either the endpoint may not be a SignalR endpoint, the connection ID is not present on the server, or there is a proxy blocking WebSockets. If you have multiple servers check that sticky sessions are enabled. ; Zone: ; Task: null ; Value: Error: WebSocket failed to connect. The connection could not be found on the server, either the endpoint may not be a SignalR endpoint, the connection ID is not present on the server, or there is a proxy blocking WebSockets. If you have multiple servers check that sticky sessions are enabled. zone.umd.js:1097 Unhandled Promise rejection: WebSocket failed to connect. The connection could not be found on the server, either the endpoint may not be a SignalR endpoint, the connection ID is not present on the server, or there is a proxy blocking WebSockets. If you have multiple servers check that sticky sessions are enabled. ; Zone: ; Task: null ; Value: Error: WebSocket failed to connect. The connection could not be found on the server, either the endpoint may not be a SignalR endpoint, the connection ID is not present on the server, or there is a proxy blocking WebSockets. If you have multiple servers check that sticky sessions are enabled. Error: WebSocket failed to connect. The connection could not be found on the server, either the endpoint may not be a SignalR endpoint, the connection ID is not present on the server, or there is a proxy blocking WebSockets. If you have multiple servers check that sticky sessions are enabled. Uncaught (in promise) TypeError: Failed to execute 'digest' on 'SubtleCrypto': The provided value is not of type '(ArrayBuffer or ArrayBufferView)'. Is it necessary to create WebSocket (as shown in Step 7 here: https://mariushosting.com/synology-install-vaultwarden-with-portainer/) ? |
Beta Was this translation helpful? Give feedback.
-
|
Did you resolve the errors in Chrome ? |
Beta Was this translation helpful? Give feedback.
-
|
That the websocket fails is a different issue. I am not familiar enough with Synology to know if the steps in the linked tutorial are correct but they should not be necessary for the entries to be displayed. (But it wouldn't hurt if you manage to make the upgrade of the Websocket work.)
So to me this seems the most likely indication of what could be wrong but I am not sure what exactly that would be. |
Beta Was this translation helpful? Give feedback.
-
yes, I have this and no issues. |
Beta Was this translation helpful? Give feedback.
-
|
Also, try a different browser and private or incognito mode to see what that does. |
Beta Was this translation helpful? Give feedback.
-
|
Tried it again with Firefox v130 (without plugins) on Win11 and got the same problem: TypeError: SubtleCrypto.digest: Argument 2 could not be converted to any of: ArrayBufferView, ArrayBuffer. What I also saw now is that after around 3min of loading circle I got 9 of 107 items on the list. |
Beta Was this translation helpful? Give feedback.
-
|
I see this error too. I can confirm the issue. |
Beta Was this translation helpful? Give feedback.
-
|
Has this ever worked? And what has changed since last working? |
Beta Was this translation helpful? Give feedback.
-
|
It might be your reverse proxy or something else in between which is maybe caching or block or some Javascript. Just be sure there is nothing cached or altered in between. |
Beta Was this translation helpful? Give feedback.
-
|
Yes it worked previously. I have to check what's the root cause: So delete everything except the password-db and start with a clean container does not make sense right? The db is not defect when the sync with Android App works? |
Beta Was this translation helpful? Give feedback.
-
|
Try it without Adguard before testing it with new Container and copied DB... Whats the timestamp of the DB-file after sync from app? Is the server reachable from external? Then you could simple test it from another browser outside... |
Beta Was this translation helpful? Give feedback.
-
|
Beta Was this translation helpful? Give feedback.
-
|
I wouldn’t delete everything just yet, it would be beneficial to find what the root cause is. What you could do is copy your data folder into a new one and call it bwtest or whatever. Create a new container and same call it test. See if the problem is resolved. Also could try using the testing image. Another test would be to setup a clean test BW instance/container. Export data from existing (if you can using a client) and import into the clean test, what’s the result with that? |
Beta Was this translation helpful? Give feedback.
-
So the problem still exists from external access with different browsers? |
Beta Was this translation helpful? Give feedback.
-
|
I exported the items as json, created a clean new instance of the container and imported the json. But now it's fixed with export, clean new docker container and reimport. |
Beta Was this translation helpful? Give feedback.
-
|
But what made the issue break? What if this has a bigger consequence next time where it’s not recoverable at all. Also did you have any attachments in any entries? These are not part of the export if so. |
Beta Was this translation helpful? Give feedback.
-
|
Ow, i have it now :) @dani-garcia forwarded it to me. |
Beta Was this translation helpful? Give feedback.
-
|
@interunivers, I'm not really seeing why it would behave like this actually. Since there are a lot of ciphers i also tried to detect something using some grep commands, but was not able to see anything which shouldn't be there in this form. Might i suggest to try the following steps to see if you can pinpoint the specific issue.
With the above, if all keeps working, without any issue, then it most likely is located in your personal vault, but then we have to figure out where and which item. One way would be to export your personal vault, and import that into the new empty account (maybe first remove the test entries you created there). If then the test account still has no issues, we would need to compare both accounts sync output and see what the difference is there. It's very strange this is causing an issue. |
Beta Was this translation helpful? Give feedback.
-
|
@BlackDex Thank you for your efforts. |
Beta Was this translation helpful? Give feedback.
-
|
I'm not sure where, but you probably have the text And, you could still try the collection steps i mentioned. |
Beta Was this translation helpful? Give feedback.
-
I am running 1.32.0. I am a little nervous to update to the latest version, and it appears as though this is still happening for a few others on 1.32.1, so likely it is not version dependent and more likely an issue with an entry in the database somewhere. No recent upgrades - this has been happening for a while. New browser window, new incognito window,, even different browser (tried Chrome and Edge) makes no difference. The issue persists regardless. |
Beta Was this translation helpful? Give feedback.
-
|
@BlackDex There is a new interesseting behaviour, that my organisation doesnt send out invite emails. I could easily create a new user that work absolutley fine but the invitation email never arrives. I also tried the downgrading, that didnt change anything. Could it be that my sqllite is corrupt in some way? |
Beta Was this translation helpful? Give feedback.
-
|
If the sqlite is corrupt then more stuff would be strange i think. I would also check the logs and maybe even enable debug logs. Because if you can invite someone into the org, the mail should just be sent. That is nothing to do with the web-vault not loading. |
Beta Was this translation helpful? Give feedback.
-
|
@aheath70 and @interunivers My guess is that it has something to do with the entries which have a That is my only explanation which i find which could match. Since i have no way to reproduce this my self, i can not test it. |
Beta Was this translation helpful? Give feedback.
-
|
@BlackDex Could this be an interesseting error forom the dbug log?
|
Beta Was this translation helpful? Give feedback.
-
|
Looks like networking issues on your host somewhere. |
Beta Was this translation helpful? Give feedback.
-
|
So here a little follow-up. I was able to backup my organisation via the Bitwarden comandline CLI and then imported that into a new Organisation. I could then see from the administration panel that there were more entries in the original organisation then in the newly created one, even though I could verify from the app that they both had the exact same visible entries. So I conclude there must be some ghost entries or other errors with the database or something that broke the webvault, maybe that is also caused by some sync issues but I think there are more qualified people than me who can guess what could have happened. The only solution I had then was to just invite all the member of the old organisation into the new one and delete the old one. Since then everything works smoothly again. |
Beta Was this translation helpful? Give feedback.
-
|
@interunivers so, are you still missing some entries now? If so, do you know which one? So, for me, an export of the vault which does not contain that entry and only the uuid's of that would be enough for me. # Most simple way using the `jq` tool
jq '.items[] | .id' /path/to/export.json | sort
# Else without `jq`
grep -oE '"id":\s(.+)' /path/to/export.json | sort |
Beta Was this translation helpful? Give feedback.
-
|
I am sorry but, as i didn't miss any entries and i was a bit frustrated i wanted just things to work again, i already deleted the organization that contained the old entries. So sadly i can't contribute anymore data. |
Beta Was this translation helpful? Give feedback.
-
|
I can confirm this issue. I have two main accounts on my instance. The larger one is affected, while the smaller one works. The problematic one, does not export into json. I get a very small file. Should I check debug logs? I think its obvious that the issue is related to the cipher data. Let me know any SQL commands to check my DB if that would help. |
Beta Was this translation helpful? Give feedback.
-
|
if you want to do that that would be great. Hopefully i can detect something strange (other then a filled in |
Beta Was this translation helpful? Give feedback.
-
|
@BlackDex How can i send it to you privately please? |
Beta Was this translation helpful? Give feedback.
-
|
Best would be via Matrix chat. |
Beta Was this translation helpful? Give feedback.
-
|
You got mail. |
Beta Was this translation helpful? Give feedback.
-
|
@Phlogi thank you for assisting with providing information to help identify the root cause. Very frustrating when people report they’re having the same issue but yet provide nothing useful to try and fix the problem. Additionally, some have been able to resolve their problem by doing a fresh vault and then move on to no longer contribute to the greater good. Just because they were able to get the problem fixed doesn’t mean the root cause of it was resolved, in which it’s best to try and track that down. Thank you again if you’re able to work with the maintainer and provide as much useful info as you can. |
Beta Was this translation helpful? Give feedback.
-
|
@Phlogi, I'm checking the output you provided me. But if that was the only item you had to delete for everything to start working again, I'm very surprised, since nothing i see should be causing an issue like this. The only thing i can think of then is that the encrypted values in there are causing a strange issue for some reason, which causes the web-vault/JS to break. The only way to really really know if that is the issue, is by replacing those encrypted values one by one with the exact same encrypted value from an other item, like from the working item you also send to me. I would suggest to take the If it does, then something is going wrong with the decryption of those values for some reason. |
Beta Was this translation helpful? Give feedback.
-
|
Looking at #5077, can everybody who has issues here with the web-vault, delete there trash/bin/deleted items and see if that resolves all your issues? |
Beta Was this translation helpful? Give feedback.
-
|
I do have exactly 159 items in the bin. Well that just means that those were not exported through cli I guess. How can I empty the bin? They are not loading. |
Beta Was this translation helpful? Give feedback.
-
|
I find it strange that those are not purged automatically, unless you disabled that feature. You could try to purge it via an other client where it does work. |
Beta Was this translation helpful? Give feedback.
-
|
I think auto delete trash is defaulted to not purge that is what mine is set to and I never had selected that option. |
Beta Was this translation helpful? Give feedback.
-
|
When i export without deleted, i get 0 differences between db select and cli json export. :(
|
Beta Was this translation helpful? Give feedback.
-
|
Well, that either means somewhere in the deleted ciphers there is something which breaks the web-vault. |
Beta Was this translation helpful? Give feedback.
-
|
Everything deleted from my bin/trash/deleted items folder. Issue still persists. |
Beta Was this translation helpful? Give feedback.
-
|
Have you updated already to a version later then 1.32.0? If not, then you can delete until your vault is empty before it will work. The latest version is 1.32.2 even. And there is a testing version which solves issues on iOS devices. |
Beta Was this translation helpful? Give feedback.
-
|
I upgraded to 1.32.2 yesterday. Problem still persists. My issue is with the web vault. iOS apps are working fine on both iPhone and iPad. I did a json export from both the web vault and the iOS app. The web vault export was incomplete though, and only exported the names of my folders. There were no entries whatsoever in the web vault export. The iOS export looked to be complete as far as I could tell. |
Beta Was this translation helpful? Give feedback.
-
|
Same issue here since two month. |
Beta Was this translation helpful? Give feedback.
-
|
When I try your web-vault version everything works perfectly for me. |
Beta Was this translation helpful? Give feedback.
-
|
So. That basically means, there is probably a bug in v2024.6.2 which is solved in a later version. I would prefer the latter, but that might be more work if there is a clear PR to be cherry-picked without too much hassle. |
Beta Was this translation helpful? Give feedback.
-
I can confirm that your custom version works for me too. No empty items. |
Beta Was this translation helpful? Give feedback.
-
Wouldn’t best be to tackle the new roles and move forward with it. It’ll have to be done sooner or later. If this is a big task can we also enlist the help of others to work on it. |
Beta Was this translation helpful? Give feedback.
-
|
I was already thinking about some workaround which shouldn't have a big impact. It will just add some more complexity and way of thinking. A bigger overhaul might be more worth for a v2 version maybe. |
Beta Was this translation helpful? Give feedback.
-
Vaultwarden Support String
Your environment (Generated via diagnostics page)
Config (Generated via diagnostics page)
Show Running Config
Environment settings which are overridden: DOMAIN, SIGNUPS_ALLOWED, ADMIN_TOKEN, SMTP_HOST, SMTP_FROM, SMTP_FROM_NAME, SMTP_USERNAME, SMTP_PASSWORD
{ "_duo_akey": null, "_enable_duo": false, "_enable_email_2fa": false, "_enable_smtp": true, "_enable_yubico": true, "_icon_service_csp": "", "_icon_service_url": "", "_ip_header_enabled": true, "_max_note_size": 10000, "_smtp_img_src": "cid:", "admin_ratelimit_max_burst": 3, "admin_ratelimit_seconds": 300, "admin_session_lifetime": 20, "admin_token": "***", "allowed_iframe_ancestors": "", "attachments_folder": "data/attachments", "auth_request_purge_schedule": "30 * * * * *", "authenticator_disable_time_drift": false, "data_folder": "data", "database_conn_init": "", "database_max_conns": 10, "database_timeout": 30, "database_url": "***************", "db_connection_retries": 15, "disable_2fa_remember": false, "disable_admin_token": false, "disable_icon_download": false, "domain": "*****://*****************************", "domain_origin": "*****://*****************************", "domain_path": "", "domain_set": true, "duo_context_purge_schedule": "30 * * * * *", "duo_host": null, "duo_ikey": null, "duo_skey": null, "duo_use_iframe": false, "email_2fa_auto_fallback": false, "email_2fa_enforce_on_verified_invite": false, "email_attempts_limit": 3, "email_change_allowed": true, "email_expiration_time": 600, "email_token_size": 6, "emergency_access_allowed": true, "emergency_notification_reminder_schedule": "0 3 * * * *", "emergency_request_timeout_schedule": "0 7 * * * *", "enable_db_wal": true, "enable_websocket": true, "event_cleanup_schedule": "0 10 0 * * *", "events_days_retain": null, "experimental_client_feature_flags": "fido2-vault-credentials", "extended_logging": true, "helo_name": null, "hibp_api_key": null, "http_request_block_non_global_ips": false, "http_request_block_regex": null, "icon_blacklist_non_global_ips": true, "icon_blacklist_regex": null, "icon_cache_folder": "data/icon_cache", "icon_cache_negttl": 259200, "icon_cache_ttl": 2592000, "icon_download_timeout": 10, "icon_redirect_code": 302, "icon_service": "internal", "incomplete_2fa_schedule": "30 * * * * *", "incomplete_2fa_time_limit": 3, "increase_note_size_limit": false, "invitation_expiration_hours": 120, "invitation_org_name": "Bitwarden_RS", "invitations_allowed": true, "ip_header": "X-Real-IP", "job_poll_interval_ms": 30000, "log_file": null, "log_level": "info", "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f", "login_ratelimit_max_burst": 10, "login_ratelimit_seconds": 60, "org_attachment_limit": null, "org_creation_users": "", "org_events_enabled": false, "org_groups_enabled": false, "password_hints_allowed": true, "password_iterations": 100000, "push_enabled": false, "push_identity_uri": "https://identity.bitwarden.com", "push_installation_id": "***", "push_installation_key": "***", "push_relay_uri": "https://push.bitwarden.com", "reload_templates": false, "require_device_email": false, "rsa_key_filename": "data/rsa_key", "send_purge_schedule": "0 5 * * * *", "sendmail_command": null, "sends_allowed": true, "sends_folder": "data/sends", "show_password_hint": true, "signups_allowed": false, "signups_domains_whitelist": "", "signups_verify": false, "signups_verify_resend_limit": 6, "signups_verify_resend_time": 3600, "smtp_accept_invalid_certs": false, "smtp_accept_invalid_hostnames": false, "smtp_auth_mechanism": null, "smtp_debug": false, "smtp_embed_images": true, "smtp_explicit_tls": null, "smtp_from": "******************", "smtp_from_name": "Bitwarden_RS", "smtp_host": "************", "smtp_password": "***", "smtp_port": 587, "smtp_security": "starttls", "smtp_ssl": null, "smtp_timeout": 15, "smtp_username": "******************", "templates_folder": "data/templates", "tmp_folder": "data/tmp", "trash_auto_delete_days": null, "trash_purge_schedule": "0 5 0 * * *", "use_sendmail": false, "use_syslog": false, "user_attachment_limit": null, "user_send_limit": null, "web_vault_enabled": true, "web_vault_folder": "web-vault/", "yubico_client_id": null, "yubico_secret_key": null, "yubico_server": null }Vaultwarden Build Version
v1.32.0
Deployment method
Official Container Image
Custom deployment method
No response
Reverse Proxy
buildin in DSM
Host/Server Operating System
NAS/SAN
Operating System Version
Synology DSM 7.2
Clients
Web Vault
Client Version
v2024.6.2
Steps To Reproduce
Expected Result
After a few seconds the items are shown
Actual Result
The items are not shown after several minutes
Logs
Screenshots or Videos
No response
Additional Context
I also use AdGuard Home and Unbound on Synology NAS.
Reverse Proxy is used to direct to a domain like: https://vaultwarden.beispiel.dynv6.net
The Sync to Android App or Chrome Extension works successfully.
Docker compose (Passwords are modified)
version: "3.9"
services:
vaultwarden:
image: vaultwarden/server:latest
container_name: Vaultwarden
hostname: vaultwarden
mem_limit: 512m
mem_reservation: 256m
cpu_shares: 1024
security_opt:
- no-new-privileges=true
ports:
- 1058:80
volumes:
- /volume1/docker/vaultwarden:/data:rw
environment:
- ADMIN_TOKEN=PASSWORT
- DOMAIN=https://vaultwarden.beispiel.dynv6.net
- SIGNUPS_ALLOWED=false
- SMTP_HOST=geheim
- SMTP_FROM=geheim
- SMTP_FROM_NAME=Vaultwarden
- SMTP_USERNAME=geheim
- SMTP_PASSWORD=PASSWORT
restart: always
Beta Was this translation helpful? Give feedback.
All reactions