Confusing error message logging in with the wrong security key #2668

hwh commented 2026年05月21日 10:24:19 +02:00

Comment

I have 2fa with a hardware security key enabled, and was attempting to login with a key that was not registered (I have two keys, one as a backup, and forgot to register my backup key). I get the following two errors:

Could not read your security key.
The request is not allowed by the user agent or the platform in the current context, possibly because the user denied permission.

Could not read your security key.
CredentialsContainer request is not allowed.

which I find quite misleading, because they seem to point to a browser issue (especially the second error message, which triggers fairly inconsistently). A message like "this key is not registered with your account, try another one?" would be much more informative.

### Comment I have 2fa with a hardware security key enabled, and was attempting to login with a key that was not registered (I have two keys, one as a backup, and forgot to register my backup key). I get the following two errors: ``` Could not read your security key. The request is not allowed by the user agent or the platform in the current context, possibly because the user denied permission. ``` ``` Could not read your security key. CredentialsContainer request is not allowed. ``` which I find quite misleading, because they seem to point to a browser issue (especially the second error message, which triggers fairly inconsistently). A message like "this key is not registered with your account, try another one?" would be much more informative.

mahlzahn commented 2026年05月21日 10:40:16 +02:00

Can you explain please, where you get this error messages? Maybe a screenshot? I fail to understand at which place you run into this issue.

Can you explain please, where you get this error messages? Maybe a screenshot? I fail to understand at which place you run into this issue.

hwh commented 2026年05月21日 10:46:51 +02:00

Just directly from https://codeberg.org/user/login to https://codeberg.org/user/webauthn:

image

Just directly from <https://codeberg.org/user/login> to <https://codeberg.org/user/webauthn>: 

hwh commented 2026年05月21日 10:50:43 +02:00

I got

403 Forbidden
Request forbidden by administrative rules.

when logging in and had to change ip with my vpn, I think probably just because I was logging in and out a lot?

Also, the "Sign out" button does nothing if I press it immediately after logging in. I seem to have to wait ~1-2 minutes before actually being able to sign out.

I got ``` 403 Forbidden Request forbidden by administrative rules. ``` when logging in and had to change ip with my vpn, I think probably just because I was logging in and out a lot? Also, the "Sign out" button does nothing if I press it immediately after logging in. I seem to have to wait ~1-2 minutes before actually being able to sign out.