[GH-ISSUE #5926] [bug]: authorization inherit doesn't work #2328

Closed
opened 2026-03-16 23:58:20 +03:00 by kerem · 9 comments
Owner

Originally created by @ashaffah on GitHub (Mar 3, 2026).
Original GitHub issue: https://github.com/hoppscotch/hoppscotch/issues/5926

Originally assigned to: @nivedin on GitHub.

Is there an existing issue for this?

  • I have searched existing issues and this bug hasn't been reported yet

Platform

Desktop App

Browser

Chrome

Operating System

macOS

Bug Description

What happened ?

When I tried changing the authorization type to “inherit” and saved it, then tested several API endpoints with authorization, the response was ‘Unauthorized’ because the setting reverted to “none” and the cookie was not set.

Screen record

https://github.com/user-attachments/assets/f47e3374-e5bb-4bfe-988e-4aaa6a1fb9bc

Deployment Type

Hoppscotch Cloud

Version

No response

Originally created by @ashaffah on GitHub (Mar 3, 2026). Original GitHub issue: https://github.com/hoppscotch/hoppscotch/issues/5926 Originally assigned to: @nivedin on GitHub. ### Is there an existing issue for this? - [x] I have searched existing issues and this bug hasn't been reported yet ### Platform Desktop App ### Browser Chrome ### Operating System macOS ### Bug Description ## What happened ? When I tried changing the authorization type to “inherit” and saved it, then tested several API endpoints with authorization, the response was ‘Unauthorized’ because the setting reverted to “none” and the cookie was not set. ## Screen record https://github.com/user-attachments/assets/f47e3374-e5bb-4bfe-988e-4aaa6a1fb9bc ### Deployment Type Hoppscotch Cloud ### Version _No response_
kerem 2026-03-16 23:58:20 +03:00
Author
Owner

@nivedin commented on GitHub (Mar 5, 2026):

@ashaffah can you try clearing the cache and try again with latest version of Hoppscotch app.

<!-- gh-comment-id:4002895052 --> @nivedin commented on GitHub (Mar 5, 2026): @ashaffah can you try clearing the cache and try again with latest version of Hoppscotch app.
Author
Owner

@ashaffah commented on GitHub (Mar 5, 2026):

@nivedin i use desktop latest version not a browser

Image
<!-- gh-comment-id:4002970329 --> @ashaffah commented on GitHub (Mar 5, 2026): @nivedin i use desktop latest version not a browser <img width="303" height="188" alt="Image" src="https://github.com/user-attachments/assets/e2c3db6a-ce0f-4855-a4b9-f4f7aab34719" />
Author
Owner

@nivedin commented on GitHub (Mar 5, 2026):

@ashaffah Could you close all the tabs, reopen them, and check if the issue still persists? also is this issue reproducible with personal workspace ?

<!-- gh-comment-id:4003066799 --> @nivedin commented on GitHub (Mar 5, 2026): @ashaffah Could you close all the tabs, reopen them, and check if the issue still persists? also is this issue reproducible with personal workspace ?
Author
Owner

@ashaffah commented on GitHub (Mar 5, 2026):

@nivedin i was already do it from yesterday (team workspace) and this issue still persist today also affect to personal workspace

https://github.com/user-attachments/assets/22a1bc06-2688-48e7-a448-5471e499234e

<!-- gh-comment-id:4003168516 --> @ashaffah commented on GitHub (Mar 5, 2026): @nivedin i was already do it from yesterday (team workspace) and this issue still persist today also affect to personal workspace https://github.com/user-attachments/assets/22a1bc06-2688-48e7-a448-5471e499234e
Author
Owner

@nivedin commented on GitHub (Mar 5, 2026):

@nivedin i was already do it from yesterday (team workspace) and this issue still persist today also affect to personal workspace

https://github.com/user-attachments/assets/22a1bc06-2688-48e7-a448-5471e499234e

Thank you for the detailed explanation, can you check if there is a collection level auth set for auth folder

<!-- gh-comment-id:4003224778 --> @nivedin commented on GitHub (Mar 5, 2026): > @nivedin i was already do it from yesterday (team workspace) and this issue still persist today also affect to personal workspace > > https://github.com/user-attachments/assets/22a1bc06-2688-48e7-a448-5471e499234e Thank you for the detailed explanation, can you check if there is a collection level auth set for `auth` folder
Author
Owner

@ashaffah commented on GitHub (Mar 5, 2026):

Is there an existing issue for this?

  • I have searched existing issues and this bug hasn't been reported yet

Platform

Desktop App

Browser

Chrome

Operating System

macOS

Bug Description

What happened ?

When I tried changing the authorization type to “inherit” and saved it, then tested several API endpoints with authorization, the response was ‘Unauthorized’ because the setting reverted to “none” and the cookie was not set.

Screen record

Screen.Recording.2026-03-03.at.12.33.57.mov

Deployment Type

Hoppscotch Cloud

Version

No response

As I mentioned in the first issue, the same problem persists.

https://github.com/user-attachments/assets/4dcf8968-fb43-41e1-9570-69c543e27e3a

<!-- gh-comment-id:4003312235 --> @ashaffah commented on GitHub (Mar 5, 2026): > ### Is there an existing issue for this? > * [x] I have searched existing issues and this bug hasn't been reported yet > > ### Platform > Desktop App > > ### Browser > Chrome > > ### Operating System > macOS > > ### Bug Description > ## What happened ? > When I tried changing the authorization type to “inherit” and saved it, then tested several API endpoints with authorization, the response was ‘Unauthorized’ because the setting reverted to “none” and the cookie was not set. > > ## Screen record > Screen.Recording.2026-03-03.at.12.33.57.mov > ### Deployment Type > Hoppscotch Cloud > > ### Version > _No response_ As I mentioned in the first issue, the same problem persists. https://github.com/user-attachments/assets/4dcf8968-fb43-41e1-9570-69c543e27e3a
Author
Owner

@nivedin commented on GitHub (Mar 5, 2026):

ERP Reborn is a root collection, so it cannot inherit authorization since it does not have a parent folder to inherit from. Yes, this is a UI bug, there should not be an “Inherit” option for a root collection, which is why it resets to “None” on save. We will patch this soon.

Can you confirm if this is the issue you are referring to?

Or is the issue that the Login request from the Auth folder is inheriting authorization correctly, while the Get All request from the Tax folder is not inheriting it?

<!-- gh-comment-id:4003702166 --> @nivedin commented on GitHub (Mar 5, 2026): `ERP Reborn` is a root collection, so it cannot inherit authorization since it does not have a parent folder to inherit from. Yes, this is a UI bug, there should not be an “Inherit” option for a root collection, which is why it resets to “None” on save. We will patch this soon. Can you confirm if this is the issue you are referring to? Or is the issue that the `Login` request from the `Auth` folder is inheriting authorization correctly, while the `Get All` request from the `Tax` folder is not inheriting it?
Author
Owner

@ashaffah commented on GitHub (Mar 5, 2026):

ERP Reborn is a root collection, so it cannot inherit authorization since it does not have a parent folder to inherit from. Yes, this is a UI bug, there should not be an “Inherit” option for a root collection, which is why it resets to “None” on save. We will patch this soon.

Can you confirm if this is the issue you are referring to?

Or is the issue that the Login request from the Auth folder is inheriting authorization correctly, while the Get All request from the Tax folder is not inheriting it?

I appreciate your response thank you🙏.

Yes you're right, as you mentioned when i Get All request from the Tax folder is not inheriting it from Auth

My expectation looks like this :

https://github.com/user-attachments/assets/9a9b1765-c111-4ff9-ac23-a8bf0fd2168e

<!-- gh-comment-id:4004559694 --> @ashaffah commented on GitHub (Mar 5, 2026): > `ERP Reborn` is a root collection, so it cannot inherit authorization since it does not have a parent folder to inherit from. Yes, this is a UI bug, there should not be an “Inherit” option for a root collection, which is why it resets to “None” on save. We will patch this soon. > > Can you confirm if this is the issue you are referring to? > > Or is the issue that the `Login` request from the `Auth` folder is inheriting authorization correctly, while the `Get All` request from the `Tax` folder is not inheriting it? I appreciate your response thank you🙏. Yes you're right, as you mentioned when i Get All request from the Tax folder is not inheriting it from Auth My expectation looks like this : https://github.com/user-attachments/assets/9a9b1765-c111-4ff9-ac23-a8bf0fd2168e
Author
Owner

@nivedin commented on GitHub (Mar 5, 2026):

@ashaffah Thank you for the detailed explanation. From the description and details you’ve provided, it looks more like a cookie issue, not an authorization inheritance issue. The collection is not inheriting auth, but the Get All request is trying to fetch the cookie set from the Login request. In Hoppscotch, you have to manually set the cookie before calling the Get All request.
We have a PR open for automating this which will fix the issue.

You can check out the cookie doc for more details.
Let me know if this resolves your issue.

<!-- gh-comment-id:4005110605 --> @nivedin commented on GitHub (Mar 5, 2026): @ashaffah Thank you for the detailed explanation. From the description and details you’ve provided, it looks more like a cookie issue, not an authorization inheritance issue. The collection is not inheriting auth, but the `Get All` request is trying to fetch the cookie set from the `Login` request. In Hoppscotch, you have to manually set the cookie before calling the `Get All` request. We have a [PR](https://github.com/hoppscotch/hoppscotch/pull/5853) open for automating this which will fix the issue. You can check out the cookie [doc](https://docs.hoppscotch.io/documentation/features/cookies) for more details. Let me know if this resolves your issue.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/hoppscotch#2328
No description provided.