[GH-ISSUE #2431] Better handling of redirection with Oauth enabled #1470

Open
opened 2026-03-02 11:57:31 +03:00 by kerem · 0 comments
Owner

Originally created by @Kinson261 on GitHub (Jan 28, 2026).
Original GitHub issue: https://github.com/karakeep-app/karakeep/issues/2431

Describe the Bug

My karakeep instance is hosted on an old laptop at home. To access it from outside, I decided to rent a VPS on which Pangolin sets up wireguard tunnels to my homelab and publish it on https://my.website.com.

Recently I came across Pocket-ID and decided to set up OAuth in all apllications which can support it, karakeep being one of them. After the setup, I could login successfully using OAuth on https://my.website.com. But on a local network or using Tailscale, I am stuck in a loop at the login page. I cannot log in using http://ip:port, either using OAuth or login/password.

Is there a way to handle this?

Steps to Reproduce

  1. Set up karakeep behind a reverse proxy, in my case Pangolin.
  2. Enable OAuth login, in my case Pocket-id
  3. Set up the NEXTAUTH_URL var in .env to https://my.website.com
  4. docker compose up -d
  5. Log in either using login/password or OAuth

Expected Behaviour

After entering your credentials and pressing Enter, the login page will reload

Screenshots or Additional Context

No response

Device Details

Vivaldi 7.7.3851.67 stable on Linux

Exact Karakeep Version

v0.30.0

Environment Details

Docker on Linux Mint behind Pangolin with Pocket-id as OAuth

Debug Logs

No response

Have you checked the troubleshooting guide?

  • I have checked the troubleshooting guide and I haven't found a solution to my problem
Originally created by @Kinson261 on GitHub (Jan 28, 2026). Original GitHub issue: https://github.com/karakeep-app/karakeep/issues/2431 ### Describe the Bug My karakeep instance is hosted on an old laptop at home. To access it from outside, I decided to rent a VPS on which Pangolin sets up wireguard tunnels to my homelab and publish it on `https://my.website.com`. Recently I came across Pocket-ID and decided to set up OAuth in all apllications which can support it, karakeep being one of them. After the setup, I could login successfully using OAuth on `https://my.website.com`. But on a local network or using Tailscale, I am stuck in a loop at the login page. I cannot log in using `http://ip:port`, either using OAuth or login/password. Is there a way to handle this? ### Steps to Reproduce 1. Set up karakeep behind a reverse proxy, in my case Pangolin. 2. Enable OAuth login, in my case Pocket-id 3. Set up the NEXTAUTH_URL var in .env to `https://my.website.com` 4. docker compose up -d 5. Log in either using login/password or OAuth ### Expected Behaviour After entering your credentials and pressing Enter, the login page will reload ### Screenshots or Additional Context _No response_ ### Device Details Vivaldi 7.7.3851.67 stable on Linux ### Exact Karakeep Version v0.30.0 ### Environment Details Docker on Linux Mint behind Pangolin with Pocket-id as OAuth ### Debug Logs _No response_ ### Have you checked the troubleshooting guide? - [x] I have checked the troubleshooting guide and I haven't found a solution to my problem
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/karakeep#1470
No description provided.