nextcloud / nextcloud/server

[Bug]: WebAuthn passwordless login not working although set-up

Open
#38,859 9 comments 2 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

0. Needs triage 25-feedback bug feature: authentication needs review
Dominant language
PHP
Stars
36.9k
Forks
5.2k
Avg merge
2d 3h
Merged PRs (30d)
713

Description

⚠️ This issue respects the following points: ⚠️
Bug description

I have set up a Nitrokey 3C security key for my user in a managed Nextcloud instance for passwordless login in my users settings in the "security" section. The setup worked and the key is shown with the name I have given it.
Bildschirmfoto vom 2023-06-16 16-41-17

However, when I try to login without a password by selecting "login with a device" on the login screen after entering my account mail address Nextcloud is telling me "Your account is not set up for passwordless login". (please note: the nextcloud instance is in German and I cannot change it so the wording might be slightly different).

Also, I didn't find any information about this particular error message or passwordless login in general in the official documentation so I don't know if I might have to set up anything else to make it work.

Steps to reproduce
  1. Set up a Nitrokey 3C as security key for passwordless login
  2. Logout and go to the login page
  3. Select "login with a device"
  4. Enter account mail address
  5. Confirm
Expected behavior

Nextcloud should start passwordless authentication and make Firefox ask me to touch my key to login.

Installation method

None

Nextcloud Server version

25

Operating system

None

PHP engine version

None

Web server

None

Database engine version

None

Is this bug present after an update or on a fresh install?

None

Are you using the Nextcloud Server Encryption module?

Encryption is Disabled

What user-backends are you using?
  • Default user-backend (database)
  • LDAP/ Active Directory
  • SSO - SAML
  • Other
Configuration report

No response

List of activated Apps

No response

Nextcloud Signing status

No response

Nextcloud Logs

No response

Additional info

Since this is a Managed instance where I only have a regular user account I cannot get additional information besides Nextcloud version which is 25.0.7.1

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No files or tests are named. Start with the reported login flow: register a Nitrokey 3C in the Security settings, then use “login with a device” in Firefox on Nextcloud 25.0.7.1 and trace why the registered key is rejected. Done means the passwordless flow recognizes the key and prompts for a touch.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
authentication, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.