starred/karakeep

Fork 0

mirror of https://github.com/karakeep-app/karakeep.git synced 2026-04-26 00:16:03 +03:00

[GH-ISSUE #2342] iOS app not using proxy auth headers for all requests #1418

New issue

Closed

opened 2026-03-02 11:57:10 +03:00 by kerem · 2 comments

kerem commented

2026-03-02 11:57:10 +03:00

Owner

Originally created by @radh21301 on GitHub (Jan 3, 2026).
Original GitHub issue: https://github.com/karakeep-app/karakeep/issues/2342

Describe the Bug

Continuation of the discussion https://github.com/karakeep-app/karakeep/discussions/2313#discussioncomment-15367043

I think I may have found a case where proxy headers are not being sent for all requests in the iOS app.

I’m using the app behind Pangolin with proxy headers enabled. Login works fine, and some API requests go through successfully. In Pangolin, these show up as “Valid auth token”. For example:

/api/trpc/users.whoami,bookmarks.getBookmark

However, thumbnails and images do not load in the app. When checking Pangolin logs, the asset requests are being blocked with “No valid auth”. For example:

/api/assets/xxxx

This made me wonder whether the proxy headers added during login are being applied to every request the app makes, or if they’re missing for asset requests in some places. Ideally, the headers should be used for every request made by the app. I have not tested the browser extensions yet, but I would assume this issue exists there as well.

Happy to help test or troubleshoot further if you can point me in the right direction.

Steps to Reproduce

Set the auth headers during login
Once logged in you cannot see any images or thumbnails load

Expected Behaviour

All the requests made by the app should use the proxy headers

Screenshots or Additional Context

No response

Device Details

No response

Exact Karakeep Version

v0.30.0

Have you checked the troubleshooting guide?

I have checked the troubleshooting guide and I haven't found a solution to my problem

Originally created by @radh21301 on GitHub (Jan 3, 2026). Original GitHub issue: https://github.com/karakeep-app/karakeep/issues/2342 ### Describe the Bug Continuation of the discussion https://github.com/karakeep-app/karakeep/discussions/2313#discussioncomment-15367043 I think I may have found a case where proxy headers are not being sent for all requests in the iOS app. I’m using the app behind Pangolin with proxy headers enabled. Login works fine, and some API requests go through successfully. In Pangolin, these show up as “Valid auth token”. For example: ``` /api/trpc/users.whoami,bookmarks.getBookmark ``` However, thumbnails and images do not load in the app. When checking Pangolin logs, the asset requests are being blocked with “No valid auth”. For example: ``` /api/assets/xxxx ``` This made me wonder whether the proxy headers added during login are being applied to every request the app makes, or if they’re missing for asset requests in some places. Ideally, the headers should be used for every request made by the app. _I have not tested the browser extensions yet, but I would assume this issue exists there as well._ Happy to help test or troubleshoot further if you can point me in the right direction. ### Steps to Reproduce 1. Set the auth headers during login 2. Once logged in you cannot see any images or thumbnails load ### Expected Behaviour All the requests made by the app should use the proxy headers ### Screenshots or Additional Context _No response_ ### Device Details _No response_ ### Exact Karakeep Version v0.30.0 ### Have you checked the troubleshooting guide? - [x] I have checked the troubleshooting guide and I haven't found a solution to my problem

kerem

2026-03-02 11:57:10 +03:00

closed this issue
added the
bug

status/approved

pri/medium
labels

kerem commented

2026-03-02 11:57:11 +03:00

Author

Owner

@Cyber-Unicorn-42 commented on GitHub (Jan 5, 2026):

I have the same issue on Android when running through a Clouflare tunnel.
Login works without any issues, but images/thumbnails are not being displayed.

@Cyber-Unicorn-42 commented on GitHub (Jan 5, 2026): I have the same issue on Android when running through a Clouflare tunnel. Login works without any issues, but images/thumbnails are not being displayed.

kerem commented

2026-03-02 11:57:11 +03:00

Author

Owner

@baldemar-wuda commented on GitHub (Jan 6, 2026):

Same here. It seems like requests for /api/assets/* don't have headers.

@baldemar-wuda commented on GitHub (Jan 6, 2026): Same here. It seems like requests for /api/assets/* don't have headers. <img width="689" height="305" alt="Image" src="https://github.com/user-attachments/assets/bce6e75e-3c5b-4876-931e-139263d060cd" />

kerem referenced this issue

2026-03-02 11:59:38 +03:00

[PR #1738] [CLOSED] feat: Add bookmarks/tags counter to sidebar and search results (#1418) #1892

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/karakeep#1418

No description provided.

Rows
Columns