goauthentik / goauthentik/authentik

2fa stage couse "No identification data provided" after udated to 2025.12.1 from 2025.10

Open
#19,552 46 comments 0 reactions 2 assignees Claimed by @kensternberg-authentik View on GitHub
area:frontend bug bug/confirmed
Dominant language
Python
Stars
25.6k
Forks
2k
Avg merge
1d 1h
Merged PRs (30d)
644

Description

### Describe the bug

As continue to https://github.com/goauthentik/authentik/discussions/19519

### How to reproduce

1. Using default auth flow + NPM + Cloudflare Proxy
2. Log to : auth.mydomain.com
3. After password stage ,instead of MFA stage got : `No identification data provided.`
4. On mobile sometime 2FA page available but after entered code ,reload to 1st stage.

### Expected behavior

Should work as before: MFA stage -> Login

### Screenshots

Image

Image

### Additional context

From: `https://auth.mysite.com/api/v3/flows/executor/default-authentication-flow/?query=next%3D%252F`

Image

- Nginx proxy Manager:
```
# ------------------------------------------------------------
# auth.mysite.com
# ------------------------------------------------------------

map $scheme $hsts_header {
https "max-age=63072000;includeSubDomains; preload";
}

server {
set $forward_scheme http;
set $server "10.0.0.13";
set $port 9001;

listen 80;
#listen [::]:80;

listen 443 ssl;
#listen [::]:443;

server_name auth.mysite.com;

http2 on;

# Custom SSL
ssl_certificate /data/custom_ssl/npm-5/fullchain.pem;
ssl_certificate_key /data/custom_ssl/npm-5/privkey.pem;

# Asset Caching
include conf.d/include/assets.conf;

# Block Exploits
include conf.d/include/block-exploits.conf;

# HSTS (ngx_http_headers_module is required) (63072000 seconds = 2 years)
add_header Strict-Transport-Security $hsts_header always;

# Force SSL
include conf.d/include/force-ssl.conf;

proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
proxy_http_version 1.1;

access_log /data/logs/proxy-host-6_access.log proxy;
error_log /data/logs/proxy-host-6_error.log warn;

location / {
#set_real_ip_from 192.168.0.0/16;
set_real_ip_from 100.64.0.0/10;
set_real_ip_from 172.18.0.0/16;
set_real_ip_from 172.19.0.0/16;
# NPM generated CDN ip ranges:
include /etc/nginx/conf.d/include/ip_ranges.conf;
real_ip_header CF-Connecting-IP;
real_ip_recursive on;

proxy_set_header Host $host;
proxy_set_header X-Forwarded-Scheme $scheme;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-For $remote_addr;
proxy_set_header X-Real-IP $remote_addr;

proxy_pass http://10.0.0.13:9001;

# Asset Caching
include conf.d/include/assets.conf;

# Block Exploits
include conf.d/include/block-exploits.conf;

# Force SSL
include conf.d/include/force-ssl.conf;

# HSTS (ngx_http_headers_module is required) (63072000 seconds = 2 years)
add_header Strict-Transport-Security $hsts_header always;

proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
proxy_http_version 1.1;

}

# Custom
include /data/nginx/custom/server_proxy[.]conf;
}
```

### Deployment Method

Docker

### Version

2025.12.1

### Relevant log output

```shell

```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.