Describe the bug
Since version 25.10.0, the authentik Embedded Outpost (type: proxy) stopped generating the Authorization: Basic ... header when the Send HTTP-Basic Authentication option is enabled and using Forward Auth (single application) mode. As a result, the application behind the proxy displays the basic authentication form.
It worked correctly in previous versions.
To Reproduce
Steps to reproduce the behavior:
- Create a
Proxy Provider
- Click on
Forward auth (single application)
- Set
External Host
- Scroll to
Authentication Settings
4.1. Enable Intercept header authentication
4.2. Enable Send HTTP-Basic Authentication
4.3. Set HTTP-Basic Username Key
4.4. Set HTTP-Basic Password Key
Expected behavior
Before release 25.10.0, it worked correctly: after requesting authorization via redirect, the application behind the proxy does not show the basic auth form.
Screenshots
Not necessary for now.
Logs
No errors are observed in the logs that explain the cause of the bug.
Version and Deployment (please complete the following information):
- authentik version: 2025.10.0
- Deployment: docker-compose
Additional context
The application uses Nginx Proxy Manager as proxy.