discourse 2fa error when adding a new email address

I tried to add a new email to my forum account. Upon clicking the link, Discourse asks for a 2fa authentication, but when I click the "authenticate with security key" button, I get the following message: You supplied invalid parameters to the request: Discourse::InvalidParameters.

The js console show a few errors. The last seems relevant, the others might be noise

Content-Security-Policy: The page’s settings blocked the loading of a resource at inline (“script-src”).
Uncaught Error: Could not find module `discourse/loader-shims` imported from `(require)`
Uncaught Error: Could not find module `discourse/lib/ajax` imported from `discourse/lib/webauthn`

note: I can still login, this seems to be an issue with that specific page.