Skip to content

[Bug] Remote-User Header Not Being Passed Correctly #7699

@darkpixelftw

Description

@darkpixelftw

Describe the bug

Since version 1.26.2 and later, I recieve the error:

Error 403 - Forbidden

You don’t have permission to access this page [HTTP Remote-User= ; Remote IP address=172.20.0.6]

Note how there is only a space after 'Remote-User=', that's not me removing something for privacy, that's just what it shows.
Authelia OIDC functions with other servicies so I don't believe that the issue lies with that.

I have tested with versions 1.25.0 to 1.26.1 with everything else being the same, and it works fine and showed the remote user header being passed correctly so I believe there is some regression in 1.26.2

The docker logs give this error:

[warning] --- Multiple HTTP authentication headers!

To Reproduce

  1. Enable FreshRSS version 1.26.2 or later
  2. Attemp to login in
  3. Authelia will ask if you want to give FreshRSS permission, accept
  4. The error should occur

Expected behavior

Should seemlessly go to the feed page of the authelia user after login.

FreshRSS version

1.26.2 and later

System information

  • Database version: SQLite
  • PHP version: Sorry I don't know how to check or change this - the default for the image I assume
  • Installation type: Docker
  • Web server type: Whatever is default for the debian image - I don't know how to check this either.
  • Device: PC
  • OS: Windows 10
  • Browser: both Firefox and Chrome

Additional context

No response

Metadata

Metadata

Assignees

No one assigned

    Type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions