dillard
fa89f4312d
When API_SECRET is set, Invoice Ninja requires the X-API-SECRET header on ALL API calls including /api/v1/login. The web UI (React SPA) never sends this header, so browser login silently fails with "Invalid secret" while the mobile app (which can be configured with the secret) continues to work. UPDATE_SECRET serves a different purpose (protecting the /update endpoint) and is kept. API_SECRET should remain unset for self-hosted YunoHost installs. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
InvoiceNinja 5, packaged for YunoHost
Create and email invoices, track payments, expenses, and time tasks
?style=for-the-badge){kind=icon}
Screenshots
📦 Developer info
🛠️ Upstream InvoiceNinja 5 repository: https://github.com/invoiceninja/invoiceninja
Pull request are welcome and should target the testing branch.
The testing branch can be tested using:
# fresh install:
sudo yunohost app install https://github.com/YunoHost-Apps/invoiceninja5_ynh/tree/testing
# upgrade an existing install:
sudo yunohost app upgrade invoiceninja5 -u https://github.com/YunoHost-Apps/invoiceninja5_ynh/tree/testing
📚 App packaging documentation
Please see https://doc.yunohost.org/packaging_apps for more information.