[Bug]: Asking for password of wrong domain #1216

New Issue

2026-04-24T23:54:03+02:00

adam commented

2026-04-24 23:54:03 +02:00

Originally created by @Niko4u5 on GitHub (Jun 1, 2025).

I have verified that the bug is not already awaiting release

Yes

What was the Problem?

when loging in using the Android APP and using Auto fill to fill in the Password, it asks if the app belongs to "localhost" instead of the domain of my server.

Steps to Reproduce the Issue

Open APP
start autofill using Keepas2Android

What was Expected?

It shoul ask for an account using my servers url

Phone Model

Pixel 6

Phone OS

Graphene OS

Audiobookshelf App Version

Android App - 0.9.81

Installation Source

Google Play Store

Additional Notes

No response

Originally created by @Niko4u5 on GitHub (Jun 1, 2025). ### I have verified that the [bug is not already awaiting release](https://github.com/advplyr/audiobookshelf-app/issues?q=is%3Aissue%20label%3A%22awaiting%20release%22) Yes ### What was the Problem? when loging in using the Android APP and using Auto fill to fill in the Password, it asks if the app belongs to "localhost" instead of the domain of my server. ### Steps to Reproduce the Issue Open APP start autofill using Keepas2Android ### What was Expected? It shoul ask for an account using my servers url ### Phone Model Pixel 6 ### Phone OS Graphene OS ### Audiobookshelf App Version Android App - 0.9.81 ### Installation Source Google Play Store ### Additional Notes _No response_

adam added the bug waiting unable to reproduce labels 2026-04-24 23:54:03 +02:00

adam commented

2026-04-24 23:54:03 +02:00

@advplyr commented on GitHub (Jun 1, 2025):

I don't understand what you mean. Can you share a screenshot of what you are seeing?

@advplyr commented on GitHub (Jun 1, 2025): I don't understand what you mean. Can you share a screenshot of what you are seeing?

adam commented

2026-04-24 23:54:04 +02:00

@Niko4u5 commented on GitHub (Jun 2, 2025):

Sure

@Niko4u5 commented on GitHub (Jun 2, 2025): Sure ![Image](https://github.com/user-attachments/assets/f4db4217-d729-4ff6-8de4-ac7a446d1641)

adam commented

2026-04-24 23:54:05 +02:00

@advplyr commented on GitHub (Jun 2, 2025):

I've never seen this before and I'm not aware of any thing we should change in the app.

@advplyr commented on GitHub (Jun 2, 2025): I've never seen this before and I'm not aware of any thing we should change in the app.

adam commented

2026-04-24 23:54:07 +02:00

@Niko4u5 commented on GitHub (Jun 3, 2025):

I found the coresponding page in the Capcitor docs , it only describes a static config though.

@Niko4u5 commented on GitHub (Jun 3, 2025): I found the coresponding page in the [Capcitor docs](https://capacitorjs.com/docs/guides/autofill-credentials#set-capacitor-server-hostname) , it only describes a static config though.

adam commented

2026-04-24 23:54:07 +02:00

@HubGon commented on GitHub (Aug 25, 2025):

Hey,

i have the same issue.
I have gone back until v0.9.71-beta (02. Jan 2024), to see if this was introduced in one of the updates. It is seems it is in since a very long time. I think the above mentioned docs would solve the solution, but i am not familiar with the codebase of the app.
Maybe trying to explain it, as you mentioned, that you didn't see it before: This is used for a password-manager as a hint, for which entry it has to show to the user, so the user doesn't have to scroll throw all entries to get the correct credentials for a service. For websites it is the URL, for apps it is mostly the technical app name, "com.audiobookshelf.app" in this case (when i refer correctly.

Kind regards

@HubGon commented on GitHub (Aug 25, 2025): Hey, i have the same issue. I have gone back until v0.9.71-beta (02. Jan 2024), to see if this was introduced in one of the updates. It is seems it is in since a very long time. I think the above mentioned docs would solve the solution, but i am not familiar with the codebase of the app. Maybe trying to explain it, as you mentioned, that you didn't see it before: This is used for a password-manager as a hint, for which entry it has to show to the user, so the user doesn't have to scroll throw all entries to get the correct credentials for a service. For websites it is the URL, for apps it is mostly the technical app name, "com.audiobookshelf.app" in this case (when i refer correctly. Kind regards

adam commented

2026-04-24 23:54:08 +02:00

@clayreimann commented on GitHub (Sep 3, 2025):

I'm seeing the same thing on iOS. I imagine it has to do with the how capacitor is serving the app. One solution would be to associate the url audiobookshelf.app (and register that domain to prevent password hijacking).

I'll try this locally and see if it resolves the issue for me.

@clayreimann commented on GitHub (Sep 3, 2025): I'm seeing the same thing on iOS. I imagine it has to do with the how capacitor is serving the app. One solution would be to associate the url audiobookshelf.app (and register that domain to prevent password hijacking). I'll try this locally and see if it resolves the issue for me.

adam commented

2026-04-24 23:54:09 +02:00

@eberhage commented on GitHub (Dec 4, 2025):

I've never seen this before and I'm not aware of any thing we should change in the app.

I can reproduce the bug.

The URI of the app is currently 'localhost'. It needs to be changed to something unique like 'androidapp://com.audiobookshelf.app' for password managers to work properly.

@eberhage commented on GitHub (Dec 4, 2025): > I've never seen this before and I'm not aware of any thing we should change in the app. I can reproduce the bug. The URI of the app is currently 'localhost'. It needs to be changed to something unique like 'androidapp://com.audiobookshelf.app' for password managers to work properly.

adam commented

2026-04-24 23:54:11 +02:00

@HubGon commented on GitHub (Dec 16, 2025):

Hey,
in my opinion there should only be an additional line in:

capacitor.config.json

For these, it should be set automatically, with npx cap sync.

before:

    "server": {
		"androidScheme": "http"
	},

after:

    "server": {
		"hostname": "com.audiobookshelf.app",
        "androidScheme": "http",
	},

At least for Android it should solve it. For iOS i don't know exactly.

Kind regards

@HubGon commented on GitHub (Dec 16, 2025): Hey, in my opinion there should only be an additional line in: 1. [capacitor.config.json](https://github.com/advplyr/audiobookshelf-app/blob/master/capacitor.config.json) For these, it should be set automatically, with npx cap sync. 1. [capacitor.config.json](https://github.com/advplyr/audiobookshelf-app/blob/master/android/app/src/main/assets/capacitor.config.json) 2. [capacitor.config.json](https://github.com/advplyr/audiobookshelf-app/blob/master/ios/App/App/capacitor.config.json) before: ``` "server": { "androidScheme": "http" }, ``` after: ``` "server": { "hostname": "com.audiobookshelf.app", "androidScheme": "http", }, ``` At least for Android it should solve it. For iOS i don't know exactly. Kind regards

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/audiobookshelf-app#1216