-
Notifications
You must be signed in to change notification settings - Fork 51
Open
Description
When Beszel is deployed behind Authelia as a forward auth middleware, login appears to succeed but immediately fails with "Failed to authenticate / Please log in again."
If Authelia's forward auth is protecting all routes including /api/*, it intercepts this request and returns a 303 redirect instead of passing it through to Beszel breaking the session before it starts.
I added bypass rule in Authelia for Beszel's API endpoints, placed before any wildcard domain rules:
- domain: 'beszel.example.com'
resources:
- '^/api/.*$'
policy: 'bypass'This worked for me at least. It should go before the catch-all rules.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels