-
-
Notifications
You must be signed in to change notification settings - Fork 1.5k
Description
Describe the bug
As described in this other (now resolved) bug, basic auth through the proxy provider wasn't working on 2025.10.0. The solution (included in 2025.10.1) does work on the embedded outpost, but I can't seem to get non-embedded outposts running 2025.10.1 to send basic auth credentials after they restart and the sessions are reset.
I made an issue here about session storage with the outpost proxy that's worth noting. There I learned that currently, because the session storage is in memory & can't be stored elsewhere, when my single outpost pod restarts, I lose all my sessions stored by the outpost.
When this happens, every application that relied on basic auth credential sending from the provider, now prompts me for basic auth.
I can get the basic auth to work again as intended when I fully clear my browser's cache and log back into Authentik. Simply logging out & back into Authentik does not fix it - I need to clear the cookies.
To Reproduce
Steps to reproduce the behavior:
- Add a proxy outpost (I made mine manually on k8s)
- Add a proxy provider w/ basic auth credentials
- Assign the application to your external proxy outpost
- Log into the application using the outpost
- Kill the outpost container, clearing out its stored sessions. Wait for new outpost pod to start.
- Refresh the page of the application
Expected behavior
The application shouldn't prompt me for basic auth after an outpost restart
Logs
Startup logs are normal after restart
When refreshing the application page after an outpost restart, logs like this one occur.
{"error":"failed to get session: open /dev/shm/session_TH4LDU4USSDPDED2TEYUG6OV5BHLG3TFBRPB45M2WNFTIQAVI3XQ: no such file or directory","event":"failed to create state","level":"warning","logger":"authentik.outpost.proxyv2.application","name":"Provider for Radarr","timestamp":"2025-11-13T20:10:24Z"}I'd expect that for the first request, but it doesn't seem to be recovering after, it just logs the same thing for every request I send.
Version and Deployment (please complete the following information):
- authentik version: 2025.10.1
- Deployment: helm
Metadata
Metadata
Labels
Type
Projects
Status