Unable to register passkey: missing field `rk`

[sachaw]

Clean install of kanidm, via podman kanidmd 1.8.3
Created a new user, opened credential enrolment page via generated url, registered my yubikey, clicked next, asked me for a name, after entering one and clicking add, the following error got returned:

Error
An unrecoverable error occurred. Please contact your administrator with the details below.

Operation ID: 257e00f8-3d99-4771-ba9d-e6608b14a735

Error Code: Backend

when checking the logs:

257e00f8-3d99-4771-ba9d-e6608b14a735 INFO     request [ 177µs | 100.00% ] method: POST | uri: /ui/api/finish_passkey | version: HTTP/1.1 | connection_address: "127.0.0.1:37912" | client_address: "127.0.0.1" | latency: 0 | kopid: "257e00f8-3d99-4771-ba9d-e6608b14a735" | status_code: 422
257e00f8-3d99-4771-ba9d-e6608b14a735 ERROR    ┕━ 🚨 [error]: Bad request for passkey creation: missing field `rk` at line 1 column 822

The installation is sitting behind a Caddy reverse proxy.

[yaleman]

related to: kanidm/kanidm#3969

[Firstyear]

We already resolved this, how did you build/install kanidm?

[sachaw]

docker.io/kanidm/server:latest under podman & Chromium: 142.0.7444.176
image details
docker.io/kanidm/server latest f0d52c5add6e 4 days ago 645 MB

[
     {
          "Id": "f0d52c5add6ec21f96776d889ca9b83a881e1ea6ac77803674af6ad3239ae541",
          "Digest": "sha256:92507fd0a819fc0f3feaac6c105d73aed02f4d04a6fa9cf8f3a96d20caf6ca39",
          "RepoTags": [
               "docker.io/kanidm/server:latest"
          ],
          "RepoDigests": [
               "docker.io/kanidm/server@sha256:0da16a0eda9b587129e587684bd89cca54cb1da449e755f94af3ff62e51f2399",
               "docker.io/kanidm/server@sha256:92507fd0a819fc0f3feaac6c105d73aed02f4d04a6fa9cf8f3a96d20caf6ca39"
          ],
          "Parent": "",
          "Comment": "buildkit.dockerfile.v0",
          "Created": "2025-11-28T06:10:47.190372086Z",
          "Config": {
               "ExposedPorts": {
                    "3636/tcp": {},
                    "8443/tcp": {}
               },
               "Env": [
                    "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
                    "LD_LIBRARY_PATH=/lib",
                    "RUST_BACKTRACE=1"
               ],
               "Cmd": [
                    "/sbin/kanidmd",
                    "server"
               ],
               "WorkingDir": "/data",
               "Labels": {
                    "com.kanidm.git-commit": "471c021f2c2f9a13bbcc4c1b709b5d46d823e7cc",
                    "com.kanidm.version": "1.8.3"
               },
               "ArgsEscaped": true
          },
          "Version": "",
          "Author": "",
          "Architecture": "amd64",
          "Os": "linux",
          "Size": 645259413,
          "VirtualSize": 645259413,
          "GraphDriver": {
               "Name": "overlay",
               "Data": {
                    "LowerDir": "/var/lib/containers/storage/overlay/3ddc676eade93665411afebda45dcd589d27d243fbf763d5d9d85bb6090f4dc0/diff:/var/lib/containers/storage/overlay/fae1832bfe1dbb725c035feb0fc13d737c9bc434eb8df0dc368ef4e1f8000a9c/diff:/var/lib/containers/storage/overlay/03cdf2f750bc7ba769ebc5d91a258e70237ec622a55dc19811707b40beee9689/diff:/var/lib/containers/storage/overlay/2bcb2924bf20a61a1c462a3c16839cce7eca1a0d5c37df99586ff62cb9a212c5/diff:/var/lib/containers/storage/overlay/46ca17ba1e02b1f042712b31a2aaa2f462086a2147440f1917d3f102d2737fb9/diff",
                    "UpperDir": "/var/lib/containers/storage/overlay/eec8e6571464ce916d0daf5b12041e55f4eda0f97dee379e8c5781d4b16545de/diff",
                    "WorkDir": "/var/lib/containers/storage/overlay/eec8e6571464ce916d0daf5b12041e55f4eda0f97dee379e8c5781d4b16545de/work"
               }
          },
          "RootFS": {
               "Type": "layers",
               "Layers": [
                    "sha256:46ca17ba1e02b1f042712b31a2aaa2f462086a2147440f1917d3f102d2737fb9",
                    "sha256:139c685e20b8b495af732f6882fa2592605b6f4997162703bd526309ff28420b",
                    "sha256:b90eeaf6306c4a354f754934700da4478017e861cdbf3c10c6e6427b2cfec656",
                    "sha256:b008027931b426d9aed1ff558b2325fe0ee1808ccff54d901bd085a0bca3bb0b",
                    "sha256:23b3c83245174d6349f3fff4a6334e2cbbbd56206bb2b706e4fcffbbcffb5746",
                    "sha256:9f78b7976a046e9711619e58bad9b57978543465175a20d163c8f16e1e696872"
               ]
          },
          "Labels": {
               "com.kanidm.git-commit": "471c021f2c2f9a13bbcc4c1b709b5d46d823e7cc",
               "com.kanidm.version": "1.8.3"
          },
          "Annotations": {},
          "ManifestType": "application/vnd.oci.image.manifest.v1+json",
          "User": "",
          "History": [
               {
                    "created": "2025-11-19T04:18:59.478654985Z",
                    "created_by": "WORKDIR /",
                    "comment": "buildkit.dockerfile.v0",
                    "empty_layer": true
               },
               {
                    "created": "2025-11-19T04:18:59.478654985Z",
                    "created_by": "COPY /etc/ssl/certs /etc/ssl/certs # buildkit",
                    "comment": "buildkit.dockerfile.v0"
               },
               {
                    "created": "2025-11-28T06:10:46.930620241Z",
                    "created_by": "COPY --chmod=0755 /usr/src/kanidm/target/release/kanidmd /sbin/ # buildkit",
                    "comment": "buildkit.dockerfile.v0"
               },
               {
                    "created": "2025-11-28T06:10:47.021223747Z",
                    "created_by": "COPY /usr/src/kanidm/server/core/static /hpkg/ # buildkit",
                    "comment": "buildkit.dockerfile.v0"
               },
               {
                    "created": "2025-11-28T06:10:47.079019554Z",
                    "created_by": "COPY /out/libs-root/ / # buildkit",
                    "comment": "buildkit.dockerfile.v0"
               },
               {
                    "created": "2025-11-28T06:10:47.138315788Z",
                    "created_by": "COPY /out/libs/ /lib/ # buildkit",
                    "comment": "buildkit.dockerfile.v0"
               },
               {
                    "created": "2025-11-28T06:10:47.138315788Z",
                    "created_by": "ENV LD_LIBRARY_PATH=/lib",
                    "comment": "buildkit.dockerfile.v0",
                    "empty_layer": true
               },
               {
                    "created": "2025-11-28T06:10:47.190372086Z",
                    "created_by": "WORKDIR /data",
                    "comment": "buildkit.dockerfile.v0"
               },
               {
                    "created": "2025-11-28T06:10:47.190372086Z",
                    "created_by": "EXPOSE [3636/tcp 8443/tcp]",
                    "comment": "buildkit.dockerfile.v0",
                    "empty_layer": true
               },
               {
                    "created": "2025-11-28T06:10:47.190372086Z",
                    "created_by": "ENV RUST_BACKTRACE=1",
                    "comment": "buildkit.dockerfile.v0",
                    "empty_layer": true
               },
               {
                    "created": "2025-11-28T06:10:47.190372086Z",
                    "created_by": "HEALTHCHECK &{[\"CMD\" \"/sbin/kanidmd\" \"healthcheck\"] \"1m0s\" \"10s\" \"1m0s\" \"5s\" '\\x03'}",
                    "comment": "buildkit.dockerfile.v0",
                    "empty_layer": true
               },
               {
                    "created": "2025-11-28T06:10:47.190372086Z",
                    "created_by": "CMD [\"/sbin/kanidmd\" \"server\"]",
                    "comment": "buildkit.dockerfile.v0",
                    "empty_layer": true
               }
          ],
          "NamesHistory": [
               "docker.io/kanidm/server:latest"
          ]
     }
]