Mobile app not allowing login

Checklist
[x ] I have read intro post: About the Installation Issues category
[ x] I have read the tutorials, help and searched for similar issues
[ x] I provide relevant information about my server (component names and versions, etc.)
[ x] I provide a copy of my logs and healthcheck
[ x] I describe the steps I have taken to trouble shoot the problem
[ x] I describe the steps on how to reproduce the issue

Hello, I am currently running Passbolt CE 4.3.0, and 1.15.0 of the iOS mobile app. I can log into the web UI just fine, however when trying to authenticate into the mobile app, immediately after entering a password and hitting “Sign In” it returns to the password prompt and I get the following error:

Passbolt:
Device: iPhone
OS: 17.0
App: 1.15.0

[2023-10-05 7:23:18 pm] Initializing the app…
[2023-10-05 7:23:18 pm] …app initialization completed!
[2023-10-05 7:23:18 pm] Verifying data integrity…
[2023-10-05 7:23:18 pm] …data integrity verification finished
[2023-10-05 7:23:18 pm] Fetching server configuration…
[2023-10-05 7:23:18 pm] …server configuration fetching skipped!
[2023-10-05 7:23:19 pm] [4462723A-D9CD-467B-BC9B-15937DCFCCAD] HTTP GET /lookup
[2023-10-05 7:23:19 pm] [4462723A-D9CD-467B-BC9B-15937DCFCCAD] HTTP 200 /lookup
[2023-10-05 7:23:19 pm] [5E6F6BAB-8A15-4F68-AD62-67201D1B144B] HTTP GET /avatars/view/b5ef5f01-0781-413e-b773-2431ddff7b93/medium.jpg
[2023-10-05 7:23:20 pm] [5E6F6BAB-8A15-4F68-AD62-67201D1B144B] HTTP 200 /avatars/view/b5ef5f01-0781-413e-b773-2431ddff7b93/medium.jpg
[2023-10-05 7:23:30 pm] Beginning authorization…
[2023-10-05 7:23:31 pm] …creating new access token…
[2023-10-05 7:23:31 pm] …fetching server public PGP key…
[2023-10-05 7:23:31 pm] …fetching server public RSA key…
[2023-10-05 7:23:31 pm] [9F84091F-BB55-41D6-BC81-A6A61A603F84] HTTP GET /auth/verify.json
[2023-10-05 7:23:31 pm] [F3835508-42B6-4540-B7D8-EB7DE1F0C9D7] HTTP GET /auth/jwt/rsa.json
[2023-10-05 7:23:31 pm] [F3835508-42B6-4540-B7D8-EB7DE1F0C9D7] HTTP 200 /auth/jwt/rsa.json
[2023-10-05 7:23:31 pm] [9F84091F-BB55-41D6-BC81-A6A61A603F84] HTTP 200 /auth/verify.json
[2023-10-05 7:23:31 pm] Local timestamp: 1696533811
[2023-10-05 7:23:31 pm] Server timestamp: 1696533811
[2023-10-05 7:23:31 pm] Using time diff for session: 0
[2023-10-05 7:23:31 pm] …verifying server public PGP key…
[2023-10-05 7:23:31 pm] …preparing authorization challenge…
[2023-10-05 7:23:31 pm] [8707C175-46AC-4871-9218-5763330C2C83] HTTP POST /auth/jwt/login.json
[2023-10-05 7:23:31 pm] [8707C175-46AC-4871-9218-5763330C2C83] HTTP 200 /auth/jwt/login.json
[2023-10-05 7:23:32 pm] …authorization succeeded!
[2023-10-05 7:23:32 pm] Verifying data integrity…
[2023-10-05 7:23:32 pm] …data integrity verification finished
[2023-10-05 7:23:32 pm] Fetching server configuration…
[2023-10-05 7:23:32 pm] [6E174D6D-FC8A-45F3-96B9-61EA8B30CB9A] HTTP GET /settings.json
[2023-10-05 7:23:32 pm] [6E174D6D-FC8A-45F3-96B9-61EA8B30CB9A] HTTP 200 /settings.json
[2023-10-05 7:23:32 pm] …server configuration fetched!
[2023-10-05 7:23:32 pm] [11F77BA2-B6F9-4ACD-A9D4-1FE878766217] HTTP GET /lookup
[2023-10-05 7:23:32 pm] [11F77BA2-B6F9-4ACD-A9D4-1FE878766217] HTTP 200 /lookup
[2023-10-05 7:23:32 pm] Refreshing users data…
[2023-10-05 7:23:32 pm] [0A548B99-21F8-4D78-A94E-24942DD00289] HTTP GET /users.json
[2023-10-05 7:23:32 pm] Updating account profile data…
[2023-10-05 7:23:32 pm] [E462427A-A953-4B4A-A5EF-9859435B11D7] HTTP GET /users/1a6e05fd-51ef-45e9-810d-b9f78f01c409.json
[2023-10-05 7:23:32 pm] [0A548B99-21F8-4D78-A94E-24942DD00289] HTTPUnauthorized
DiagnosticsContext:
•HTTPUnauthorized OSFeatures/NetworkRequestExecutor.swift:466
[2023-10-05 7:23:32 pm] [E462427A-A953-4B4A-A5EF-9859435B11D7] HTTPUnauthorized
DiagnosticsContext:
•HTTPUnauthorized OSFeatures/NetworkRequestExecutor.swift:466
[2023-10-05 7:23:32 pm] [269EA1D7-4365-4F41-9DCC-7A34FF2B5520] HTTP GET /avatars/view/afb6cd9a-fe9e-499f-a451-a6941978bc0e/medium.jpg
[2023-10-05 7:23:32 pm] [269EA1D7-4365-4F41-9DCC-7A34FF2B5520] HTTP 200 /avatars/view/afb6cd9a-fe9e-499f-a451-a6941978bc0e/medium.jpg

Additionally, the error log on the server shows:

2023-10-05 19:29:25 error: [Authentication\Authenticator\UnauthenticatedException] Authentication is required to continue in /usr/share/php/passbolt/vendor/cakephp/authentication/src/Controller/Component/AuthenticationComponent.php on line 177
Request URL: /users/1a6e05fd-51ef-45e9-810d-b9f78f01c409.json
Client IP: <IP_ADDRESS>
2023-10-05 19:29:25 error: [Authentication\Authenticator\UnauthenticatedException] Authentication is required to continue in /usr/share/php/passbolt/vendor/cakephp/authentication/src/Controller/Component/AuthenticationComponent.php on line 177
Request URL: /users.json?api-version=v2
Client IP: <IP_ADDRESS>
2023-10-05 19:29:25 error: [Authentication\Authenticator\UnauthenticatedException] Authentication is required to continue in /usr/share/php/passbolt/vendor/cakephp/authentication/src/Controller/Component/AuthenticationComponent.php on line 177
Request URL: /users/1a6e05fd-51ef-45e9-810d-b9f78f01c409.json
Client IP: <IP_ADDRESS>

Hello @reed5,

I’d like to know if you are using SSL on your server? if so

  • Is it a self signed certificate? → You need to add your CA cert to your device
  • LetsEncrypt?
  • Other authority?

Navigate to your passbolt server using your browser in order to check if the connection is secure from your phone to your instance.

Thanks in advance :slight_smile:

I am indeed using SSL, through a Let’s Encrypt certificate.