From 3cf985f2409c41308f119f85909a938c3abe2126 Mon Sep 17 00:00:00 2001 From: Dillard Blom Date: Mon, 6 Jul 2026 03:35:55 +0200 Subject: [PATCH] fix: disable SSO auth header injection for main permission MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Technitium manages its own authentication and does not integrate with YunoHost SSO. When auth_header is enabled (the default), SSOwat injects an 'Authorization: Basic' header containing the YunoHost user's credentials into every proxied request. Technitium receives this header, attempts to authenticate the YunoHost user against its own user database, fails silently, and redirects back to its login page — creating a login loop that affects users who are logged into YunoHost SSO. Setting auth_header = false prevents SSOwat from injecting credentials, allowing Technitium to handle authentication with its own login form. The app already correctly declares sso = false and ldap = false, making auth_header = false the consistent and expected setting. --- manifest.toml | 1 + 1 file changed, 1 insertion(+) diff --git a/manifest.toml b/manifest.toml index 4c80534..59a2648 100644 --- a/manifest.toml +++ b/manifest.toml @@ -77,6 +77,7 @@ ram.runtime = "50M" [resources.permissions] main.url = "/" + main.auth_header = false [resources.ports] main.default = 5380