Withdrawal from account recovery not working

[blaueBrause]

Hi,
I've succesfully enabled and tested account recovery. But we have a couple of users for which we don't want to enable the recovery feature. Because of that reason I wanted to test the option to disable the feature for a specific user account.

Unfortunately there is only an error message:

Is that an expected behavior, that it's not possible to disable the account recovery for a user that enabled it?

In the vaultwarden.log there is no further information: [2025-06-17 06:52:05.968][vaultwarden::api][ERROR] Invalid password

[stefan0xC]

The web-vault sends the following payload when requesting /api/organizations/<org_id>/users/<user_id>/reset-password-enrollment

{"masterPasswordHash":"ignored","resetPasswordKey":""}

As far as I've looked into it they have changed it from null to "" in bitwarden/clients@f3a2649 so we should also check if the reset_password_key is empty and act accordingly.

[stefan0xC]

Should be fixed via #5968

[blaueBrause]

Hi,

cool, that was a swift reaction, thank you! We are using docker compose, how can I use this new fix. A simple docker compose pull doesn't pull the update?

[BlackDex]

You need to use a different tag, :testing for the main branch versions.

[blaueBrause]

Thank you