cannot log into self-hosted instance in the Android app with a passkey

(#4616) Bug Open: Needs triage mobile security self-hosting

Reproduction steps

  1. have an account on a self-hosted instance with a passkey. i use fluxfur.com.
  2. try to log in to it in the Android app

Expected behaviour

i should be prompted for my passkey, which i can then select and be logged into my account.

Actual behaviour

i am prompted for my passkey, which i select successfully. i then presented with an error message "Passkey authentication failed". i am not logged into my account.

Build information

Version 2026.11.100, Beta 2, Channel Beta, Build 890, Android 17 (arm64), Device Google Pixel 9a, Locale en-US, Push unifiedpush, Flutter 3.47.9, Dart 3.13.7

Platform

Android

Evidence

in the video i show myself logging into fluxfur.com in a web browser successfully, to prove that my passkey works. then, i do the same through the Android app, and the described bug occurs. not sure if i remember correctly this bug might have been around for at least two months; ever since i first joined fluxfur. i only realized nothing has been reported yet when i was reporting a very similar bug. but maybe the bug was different? i think when i first encountered it, i might have gotten an error message like the one described in this issue? i think, perhaps, Bitwarden rejected my login? like is shown in the second video happening in a different app? and i probably didn't report it because i assumed that was FluxFur's fault, but they've fixed it, and now the ball is in upstream's court?

Comments

Sign in with Fluxer to comment and vote.

No comments yet.