<!--
# ###
NOTE: Please update to the latest version of vaultwarden be…fore reporting an issue!
This saves you and us a lot of time and troubleshooting.
See:
* https://github.com/dani-garcia/vaultwarden/issues/1180
* https://github.com/dani-garcia/vaultwarden/wiki/Updating-the-vaultwarden-image
# ###
-->
<!--
Please fill out the following template to make solving your problem easier and faster for us.
This is only a guideline. If you think that parts are unnecessary for your issue, feel free to remove them.
Remember to hide/redact personal or confidential information,
such as passwords, IP addresses, and DNS names as appropriate.
-->
### Subject of the issue
Bitwarden CLI (version 1.22.0 - the latest on Arch Linux) login to the Vaultwarden server fails even with correct credentials
### Deployment environment
### Your environment (Generated via diagnostics page)
* Vaultwarden version: v1.24.0
* Web-vault version: v2.25.1
* Running within Docker: true (Base: Debian)
* Environment settings overridden: false
* Uses a reverse proxy: true
* IP Header check: true (X-Real-IP)
* Internet access: true
* Internet access via a proxy: false
* DNS Check: true
* Time Check: true
* Domain Configuration Check: false
* HTTPS Check: false
* Database type: MySQL
* Database version: 10.5.15-MariaDB-log
* Clients used: Bitwarden CLI version 1.22.0
* Reverse proxy and version: Nginx (latest from lscr.io/linuxserver/swag)
* Other relevant information:
### Config (Generated via diagnostics page)
<details><summary>Show Running Config</summary>
**Environment settings which are overridden:**
```json
{
"_duo_akey": null,
"_enable_duo": false,
"_enable_email_2fa": true,
"_enable_smtp": true,
"_enable_yubico": true,
"_ip_header_enabled": true,
"admin_ratelimit_max_burst": 3,
"admin_ratelimit_seconds": 300,
"admin_token": "***",
"allowed_iframe_ancestors": "",
"attachments_folder": "data/attachments",
"authenticator_disable_time_drift": false,
"data_folder": "data",
"database_max_conns": 10,
"database_url": "*****://***********:*************@*******/***********",
"db_connection_retries": 15,
"disable_2fa_remember": false,
"disable_admin_token": false,
"disable_icon_download": false,
"domain": "****://*********",
"domain_origin": "****://*********",
"domain_path": "",
"domain_set": false,
"duo_host": null,
"duo_ikey": null,
"duo_skey": null,
"email_attempts_limit": 3,
"email_expiration_time": 600,
"email_token_size": 6,
"emergency_access_allowed": true,
"emergency_notification_reminder_schedule": "0 5 * * * *",
"emergency_request_timeout_schedule": "0 5 * * * *",
"enable_db_wal": true,
"extended_logging": true,
"helo_name": null,
"hibp_api_key": null,
"icon_blacklist_non_global_ips": true,
"icon_blacklist_regex": null,
"icon_cache_folder": "data/icon_cache",
"icon_cache_negttl": 259200,
"icon_cache_ttl": 2592000,
"icon_download_timeout": 10,
"icon_redirect_code": 302,
"icon_service": "internal",
"incomplete_2fa_schedule": "30 * * * * *",
"incomplete_2fa_time_limit": 3,
"invitation_org_name": "Vaultwarden",
"invitations_allowed": false,
"ip_header": "X-Real-IP",
"job_poll_interval_ms": 30000,
"log_file": null,
"log_level": "Info",
"log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f",
"login_ratelimit_max_burst": 10,
"login_ratelimit_seconds": 60,
"org_attachment_limit": null,
"org_creation_users": "",
"password_iterations": 100000,
"reload_templates": false,
"require_device_email": false,
"rsa_key_filename": "data/rsa_key",
"send_purge_schedule": "0 5 * * * *",
"sends_allowed": true,
"sends_folder": "data/sends",
"show_password_hint": false,
"signups_allowed": false,
"signups_domains_whitelist": "",
"signups_verify": false,
"signups_verify_resend_limit": 6,
"signups_verify_resend_time": 3600,
"smtp_accept_invalid_certs": false,
"smtp_accept_invalid_hostnames": false,
"smtp_auth_mechanism": null,
"smtp_debug": false,
"smtp_explicit_tls": false,
"smtp_from": "*********@***.**",
"smtp_from_name": "Vaultwarden",
"smtp_host": "**********",
"smtp_password": null,
"smtp_port": 8025,
"smtp_ssl": false,
"smtp_timeout": 15,
"smtp_username": null,
"templates_folder": "data/templates",
"trash_auto_delete_days": null,
"trash_purge_schedule": "0 5 0 * * *",
"use_syslog": false,
"user_attachment_limit": null,
"web_vault_enabled": true,
"web_vault_folder": "web-vault/",
"websocket_address": "0.0.0.0",
"websocket_enabled": true,
"websocket_port": 3012,
"yubico_client_id": null,
"yubico_secret_key": null,
"yubico_server": null
}
```
</details>
* vaultwarden version: 1.24.0
* Install method: Official docker image using `docker-compose`
* Clients used:
Bitwarden CLI 1.22.0
* Reverse proxy and version:
Nginx (the latest version from lscr.io/linuxserver.io/swag)
* MySQL/MariaDB or PostgreSQL version: MariaDB 10.5.15 (lscr.io/linuxserver/mariadb docker container)
* Other relevant details:
### Steps to reproduce
<!-- Tell us how to reproduce this issue. What parameters did you set (differently from the defaults)
and how did you start vaultwarden? -->
* Start the latest version of `vaultwarden` using `docker-compose`.
* Log in to an existing account in the web UI. Verify that it works.
* Install the Bitwarden CLI version `1.22.0` (the latest version on Arch Linux). Try logging in using the same credentials after running `bw login`.
* The login attempt fails and an error that says `Username or password is incorrect. Try again` is printed.
### Expected behaviour
The login should succeed with the same credentials that work for the web vault login.
### Actual behaviour
The login errors out.
### Troubleshooting data
Relevant log lines related to this issue from the Docker container logs.
The logs for the CLI login failure
```
vaultwarden | [2022-03-20 08:35:22.365][request][INFO] POST /identity/accounts/prelogin
vaultwarden | [2022-03-20 08:35:22.365][response][INFO] 404 Not Found
vaultwarden | [2022-03-20 08:35:22.862][request][INFO] POST /identity/connect/token
vaultwarden | [2022-03-20 08:35:22.902][vaultwarden::api::identity][ERROR] Username or password is incorrect. Try again. IP: <A.B.C.D>. Username: <email address placeholder>
vaultwarden | [2022-03-20 08:35:22.902][response][INFO] POST /identity/connect/token (login) => 400 Bad Request
```
The logs for the web vault successful login with the same credentials.
```
vaultwarden | [2022-03-20 08:36:57.604][request][INFO] POST /api/accounts/prelogin
vaultwarden | [2022-03-20 08:36:57.606][response][INFO] POST /api/accounts/prelogin (prelogin) => 200 OK
vaultwarden | [2022-03-20 08:36:57.795][request][INFO] POST /identity/connect/token
vaultwarden | [2022-03-20 08:36:57.911][vaultwarden::api::identity][INFO] User<email placeholder> logged in successfully. IP: <A.B.C.D>
vaultwarden | [2022-03-20 08:36:57.912][response][INFO] POST /identity/connect/token (login) => 200 OK
vaultwarden | [2022-03-20 08:36:58.136][request][INFO] POST /identity/connect/token
vaultwarden | [2022-03-20 08:36:58.136][request][INFO] POST /identity/connect/token
vaultwarden | [2022-03-20 08:36:58.150][response][INFO] POST /identity/connect/token (login) => 200 OK
vaultwarden | [2022-03-20 08:36:58.150][response][INFO] POST /identity/connect/token (login) => 200 OK
```