Skip to content

Embedded Outpost (proxy) does not generate Basic Authorization header in Forward Auth (single application) since version 25.10.0 #17779

@adrianmusante

Description

@adrianmusante

Describe the bug

Since version 25.10.0, the authentik Embedded Outpost (type: proxy) stopped generating the Authorization: Basic ... header when the Send HTTP-Basic Authentication option is enabled and using Forward Auth (single application) mode. As a result, the application behind the proxy displays the basic authentication form.
It worked correctly in previous versions.

To Reproduce
Steps to reproduce the behavior:

  1. Create a Proxy Provider
  2. Click on Forward auth (single application)
  3. Set External Host
  4. Scroll to Authentication Settings
    4.1. Enable Intercept header authentication
    4.2. Enable Send HTTP-Basic Authentication
    4.3. Set HTTP-Basic Username Key
    4.4. Set HTTP-Basic Password Key

Expected behavior
Before release 25.10.0, it worked correctly: after requesting authorization via redirect, the application behind the proxy does not show the basic auth form.

Screenshots
Not necessary for now.

Logs
No errors are observed in the logs that explain the cause of the bug.

Version and Deployment (please complete the following information):

  • authentik version: 2025.10.0
  • Deployment: docker-compose

Additional context
The application uses Nginx Proxy Manager as proxy.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions