From b3dac3df0835c9e0388c510164b5a58b1b11bd5a Mon Sep 17 00:00:00 2001 From: Eduard Paul Date: Sun, 9 Nov 2025 20:11:33 +0100 Subject: [PATCH 1/2] Update _access.conf to fix access_list.pass_auth logic Wrong logic to pass auth as header: when disabled (pass_auth=0) credentials are included in Authorization header. However as soon as you enable (pass_auth=1) they are not. --- backend/templates/_access.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backend/templates/_access.conf b/backend/templates/_access.conf index f5926377..6ba9bc44 100644 --- a/backend/templates/_access.conf +++ b/backend/templates/_access.conf @@ -4,7 +4,7 @@ auth_basic "Authorization required"; auth_basic_user_file /data/access/{{ access_list_id }}; - {% if access_list.pass_auth == 0 or access_list.pass_auth == true %} + {% if access_list.pass_auth == 1 or access_list.pass_auth == true %} proxy_set_header Authorization ""; {% endif %} From 2bcb942f9355a164e8e73a9f2d731eb3c7ad3901 Mon Sep 17 00:00:00 2001 From: Eduard Paul Date: Sun, 9 Nov 2025 21:02:18 +0100 Subject: [PATCH 2/2] Update _access.conf to ensure Authorization header remove when pass_auth = false or 0 Fixing prev commit as it's negative logic. --- backend/templates/_access.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backend/templates/_access.conf b/backend/templates/_access.conf index 6ba9bc44..4f388545 100644 --- a/backend/templates/_access.conf +++ b/backend/templates/_access.conf @@ -4,7 +4,7 @@ auth_basic "Authorization required"; auth_basic_user_file /data/access/{{ access_list_id }}; - {% if access_list.pass_auth == 1 or access_list.pass_auth == true %} + {% if access_list.pass_auth == 0 or access_list.pass_auth == false %} proxy_set_header Authorization ""; {% endif %}