starred/karakeep

Fork 0

mirror of https://github.com/karakeep-app/karakeep.git synced 2026-04-25 07:56:05 +03:00

[GH-ISSUE #2361] Karakeep browser extension gets blocked by CORS when self-hosting the Karakeep app #1428

New issue

Closed

opened 2026-03-02 11:57:17 +03:00 by kerem · 3 comments

kerem commented

2026-03-02 11:57:17 +03:00

Owner

Originally created by @maestro-pkt on GitHub (Jan 7, 2026).
Original GitHub issue: https://github.com/karakeep-app/karakeep/issues/2361

Describe the Bug

Hello, the Karakeep browser extension can talk to https://cloud.karakeep.app fine; but when I host karakeep at my own domain there are CORS errors in the extension

Steps to Reproduce

Enter a self-hosted url when the browser extension opens
Then click configure
Right-click on the extension window and choose Inspect. The chromium devtools opens.
Choose either the console tab or the network tab in the devtools.
Back in the Karakeep extension, enter either the username/password or the API for your self-hosted instance.
Click login or Login with API key

In the devtools, there will be a CORS error.

Expected Behaviour

The extension should authenticate with the self-hosted Karakeep.

Screenshots or Additional Context

Device Details

No response

Exact Karakeep Version

1.2.7 (extension)

Have you checked the troubleshooting guide?

I have checked the troubleshooting guide and I haven't found a solution to my problem

Originally created by @maestro-pkt on GitHub (Jan 7, 2026). Original GitHub issue: https://github.com/karakeep-app/karakeep/issues/2361 ### Describe the Bug Hello, the Karakeep browser extension can talk to https://cloud.karakeep.app fine; but when I host karakeep at my own domain there are CORS errors in the extension ### Steps to Reproduce 1. Enter a self-hosted url when the browser extension opens 2. Then click configure 3. Right-click on the extension window and choose Inspect. The chromium devtools opens. 4. Choose either the console tab or the network tab in the devtools. 5. Back in the Karakeep extension, enter either the username/password or the API for your self-hosted instance. 6. Click login or Login with API key In the devtools, there will be a CORS error. ### Expected Behaviour The extension should authenticate with the self-hosted Karakeep. ### Screenshots or Additional Context <img width="390" height="266" alt="Image" src="https://github.com/user-attachments/assets/1bcbcc7c-3a25-46e7-9628-8846991dfb82" /> <img width="1264" height="599" alt="Image" src="https://github.com/user-attachments/assets/78a15726-50f4-4fb3-8979-9121ebb891a8" /> ### Device Details _No response_ ### Exact Karakeep Version 1.2.7 (extension) ### Have you checked the troubleshooting guide? - [x] I have checked the troubleshooting guide and I haven't found a solution to my problem

kerem

2026-03-02 11:57:17 +03:00

closed this issue
added the
bug

status/untriaged
labels

kerem commented

2026-03-02 11:57:18 +03:00

Author

Owner

@m3ktek commented on GitHub (Jan 21, 2026):

I had this issue when I only opened port 3022 locally, once I opened port 3000 as well the browser app then authenticated.
Hope this helps.

@m3ktek commented on GitHub (Jan 21, 2026): I had this issue when I only opened port 3022 locally, once I opened port 3000 as well the browser app then authenticated. Hope this helps.

kerem commented

2026-03-02 11:57:18 +03:00

Author

Owner

@MohamedBassem commented on GitHub (Jan 21, 2026):

Karakeep's default CORS policy is very permissive. Historically, the cors problems have been caused by the reverse proxies in front of karakeep (e.g CasaOS has been a constant source of pain for this issue).

The only other issue I'm aware of for CORS is if you're using custom headers, but it doesn't seem like you are in this case.

@MohamedBassem commented on GitHub (Jan 21, 2026): Karakeep's default CORS policy is very permissive. Historically, the cors problems have been caused by the reverse proxies in front of karakeep (e.g CasaOS has been a constant source of pain for this issue). The only other issue I'm aware of for CORS is if you're using custom headers, but it doesn't seem like you are in this case.

kerem commented

2026-03-02 11:57:18 +03:00

Author

Owner

@maestro-pkt commented on GitHub (Jan 27, 2026):

Thank you! It was the reverse proxy (Traefik in my case). When I set it to the IP/port combo it worked fine. I can get by using the IP/port combo so I consider this solved.

@maestro-pkt commented on GitHub (Jan 27, 2026): Thank you! It was the reverse proxy (Traefik in my case). When I set it to the IP/port combo it worked fine. I can get by using the IP/port combo so I consider this solved.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/karakeep#1428

No description provided.

Rows
Columns