starred/audiobookshelf-app
1
0
Fork 0
mirror of https://github.com/advplyr/audiobookshelf-app.git synced 2026-07-25 05:58:34 +02:00
Code Issues 454 Packages Projects Releases 10 Wiki Activity

Android app fails with basic-secure-headers middleware enabled in traefik #341

New Issue
Closed
opened 2026-04-24 23:17:06 +02:00 by adam · 1 comment
adam commented 2026-04-24 23:17:06 +02:00
Owner
Copy Link
Copy Source

Originally created by @nova-ace on GitHub (Nov 13, 2022).

Steps to reproduce

  1. Audiobookshelf server running with traefik ingress and basic-secure-headers middleware
  2. Cannot connect with app. Fails with "Unknown Error"

Expected behaviour

  • Should be able to connect with secure header injection

Actual behaviour

  • Cannot connect with app. Browser connections work fine.

Environment data

Audiobookshelf running on Truenas Scale with Truecharts images of both Audiobookshelf and Traefik. There is limited user configurability to remove middlewares on this system. A workaround has been viable until Truecharts Audiobookshelf version 2.2.1_3.0.0 by disabling basic-secure-headers Traefik middleware. This workaround is no longer supported. This is a very basic security setting that the app should likely support.

Audiobookshelf Version: Multiple up to 2.2.1

  • [X ] Android App?
  • iOS App?

Android Issue

Android version: 12 and 12L

Device model: Motorola Edge 2021 and Samsung Galaxy Tab S8

Stock or customized system: Stock

Untested on iOS app

Originally created by @nova-ace on GitHub (Nov 13, 2022). ### Steps to reproduce 1. Audiobookshelf server running with traefik ingress and basic-secure-headers middleware 2. Cannot connect with app. Fails with "Unknown Error" ### Expected behaviour - Should be able to connect with secure header injection ### Actual behaviour - Cannot connect with app. Browser connections work fine. ### Environment data Audiobookshelf running on Truenas Scale with Truecharts images of both Audiobookshelf and Traefik. There is limited user configurability to remove middlewares on this system. A workaround has been viable until Truecharts Audiobookshelf version 2.2.1_3.0.0 by disabling basic-secure-headers Traefik middleware. This workaround is no longer supported. This is a very basic security setting that the app should likely support. Audiobookshelf Version: Multiple up to 2.2.1 - [X ] Android App? - [ ] iOS App? #### Android Issue Android version: 12 and 12L Device model: Motorola Edge 2021 and Samsung Galaxy Tab S8 Stock or customized system: Stock Untested on iOS app
adam added the bug label 2026-04-24 23:17:06 +02:00
adam closed this issue 2026-04-24 23:17:07 +02:00
adam commented 2026-04-24 23:17:08 +02:00
Author
Owner
Copy Link
Copy Source

@advplyr commented on GitHub (Nov 13, 2022):

There is limited user configurability to remove middlewares on this system

I'm not sure what you mean. What configurability is available?

A workaround has been viable until Truecharts Audiobookshelf version 2.2.1_3.0.0 by disabling basic-secure-headers Traefik middleware. This workaround is no longer supported.

Nothing has been changed about how requests are handled in audiobookshelf. It seems like you may be confusing some package that Truecharts is offering with audiobookshelf.

This is a very basic security setting that the app should likely support.

I'm not sure that the app doesn't support this since I don't know what this setting is. The app is just making regular HTTP requests to the server, nothing special is happening with headers. What needs to be updated to support this setting?

@advplyr commented on GitHub (Nov 13, 2022): > There is limited user configurability to remove middlewares on this system I'm not sure what you mean. What configurability is available? > A workaround has been viable until Truecharts Audiobookshelf version 2.2.1_3.0.0 by disabling basic-secure-headers Traefik middleware. This workaround is no longer supported. Nothing has been changed about how requests are handled in audiobookshelf. It seems like you may be confusing some package that Truecharts is offering with audiobookshelf. > This is a very basic security setting that the app should likely support. I'm not sure that the app doesn't support this since I don't know what this setting is. The app is just making regular HTTP requests to the server, nothing special is happening with headers. What needs to be updated to support this setting?
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
android
android auto
backlog
bug
enhancement
ereader
help wanted
iOS
progress sync
pull-request
Mirrored from GitHub Pull Request
 sleep timer
unable to reproduce
waiting
No labels bug
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Melkus)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/audiobookshelf-app#341